{
  "resultsPerPage" : 4769,
  "startIndex" : 0,
  "totalResults" : 4769,
  "format" : "NVD_CVE",
  "version" : "2.0",
  "timestamp" : "2025-10-22T03:03:17.6163277",
  "vulnerabilities" : [ {
    "cve" : {
      "id" : "CVE-2005-1247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2004-01-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:nsure_audit:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01631D6A-0E07-409C-84AD-A53159537EC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097379.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-31-advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0126.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097379.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-31-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2004-09-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an allowed file extension (e.g. .mp3), which bypasses the check for the file extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*",
            "matchCriteriaId" : "4EBB6E97-C8C0-49A7-BCDA-794C4986BAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "0C9031C2-95D1-46D0-965A-F4BAA76FB29F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:de:*:*:*:*:*",
            "matchCriteriaId" : "E5E04CB6-AD7E-4F38-A6D9-D68C35DC9EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01513F87-049E-46A9-A573-A7AF27EB30C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDC43D9-C93E-4FB4-B05B-9FB519B03DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348F3214-E5C2-4D39-916F-1B0263D13F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169753E3-949F-4B7D-9955-A52240CB8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616160228843&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/12672/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/040928_player/EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/real-02full.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11308",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17551",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616160228843&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/12672/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/040928_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/real-02full.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2004-10-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:athoc:athoc_toolbar:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520D2ACD-FFF3-46A2-BA9D-061638EA3E8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=109710974324742&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616363415176&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/athoc-01full.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/11341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=109710974324742&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616363415176&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/athoc-01full.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/11341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2004-10-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*",
            "matchCriteriaId" : "4EBB6E97-C8C0-49A7-BCDA-794C4986BAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "0C9031C2-95D1-46D0-965A-F4BAA76FB29F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:de:*:*:*:*:*",
            "matchCriteriaId" : "E5E04CB6-AD7E-4F38-A6D9-D68C35DC9EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01513F87-049E-46A9-A573-A7AF27EB30C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDC43D9-C93E-4FB4-B05B-9FB519B03DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348F3214-E5C2-4D39-916F-1B0263D13F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169753E3-949F-4B7D-9955-A52240CB8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/ntbugtraq/2005-q1/0046.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616636318261&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/040928_player/EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/698390",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12311",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/ntbugtraq/2005-q1/0046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616636318261&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/040928_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/698390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2004-10-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:de:*:*:*:*",
            "matchCriteriaId" : "EF2A171E-6E39-4FCC-88CC-655D18232FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*",
            "matchCriteriaId" : "4EBB6E97-C8C0-49A7-BCDA-794C4986BAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "0C9031C2-95D1-46D0-965A-F4BAA76FB29F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B6C4B6-9031-451B-B58B-45DA88173E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348F3214-E5C2-4D39-916F-1B0263D13F40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616302008401&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/040928_player/EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/real-03full.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18984",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616302008401&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/040928_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/real-03full.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2004-10-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:1.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B837A3-E1D7-469D-9A2C-1648DB869524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:1.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5319DC-7C56-4661-83A6-6F226DD6804F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:1.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFA8CBB-D990-489B-BBA1-72392B45511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ABBB175-E5D7-4270-A599-666233B6420B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8765C3F-45F4-403A-900C-EDC95476A5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BAE912B-3905-40D2-A2A3-34A87B743244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B860C12-E0C6-4365-8199-BDCA7303B549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D836C743-2957-4FE7-A396-E68466B29266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC8F82-1FE2-418E-A90B-3011C31274E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75CC348-B708-4B44-80AE-98C10B498876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBB6270-112B-4BC2-A72F-1FD44C7E6DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35EEADE-B717-4851-8D45-60E0F8800E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798B1672-529E-4D61-9CE6-A3C362AA3FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.18_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD156C94-966C-4EF7-A386-DA5516B77DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37042CDE-E4FE-442E-891A-CD84433D36E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openpkg:openpkg:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F6E348-01DF-4FA4-808E-39A2A7A2B97B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:suse_cvsup:16.1h_36.i586:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C930F134-76A8-4628-8B2E-B06CAC1F32CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4007B0D-9606-46BD-866A-7911BEA292BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C84296C-2C8A-4DCD-9751-52951F8BEA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*",
            "matchCriteriaId" : "C7EAAD04-D7C4-43DE-B488-1AAD014B503E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CD54FE-D682-4063-B7C3-8B29B26B39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "37F124FE-15F1-49D7-9E03-8E036CE1A20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C55338-3372-413F-82E3-E1B476D6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.linuxcompatible.org/print42495.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.monkey.org/openbsd/archive/ports/0407/msg00265.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11347",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff?r1=1.170&r2=1.171",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c?rev=1.171&content-type=text/x-cvsweb-markup",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.linuxcompatible.org/print42495.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.monkey.org/openbsd/archive/ports/0407/msg00265.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff?r1=1.170&r2=1.171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c?rev=1.171&content-type=text/x-cvsweb-markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Cyrus SASL as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2004-12-22T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged (aka \"TCP acknowledgement number checking\"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E69CF1-D657-4511-8726-D122211B9002"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2004-12-22T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The original design of TCP does not require that port numbers be assigned randomly (aka \"Port randomization\"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E69CF1-D657-4511-8726-D122211B9002"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2004-12-22T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E69CF1-D657-4511-8726-D122211B9002"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2004-12-22T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or \"sa\" role privileges to execute arbitrary code via (5) a crafted install java statement."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "2CDEB3AA-AC0F-4D2E-B376-B6E0B6D1125B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "351C0856-F606-4984-88D6-80441103AD67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "DFA1A00E-3623-4DC5-B5A9-C43ACEB361AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "B51FF66F-2E1B-4B67-B7F1-1E320461679A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:*",
            "matchCriteriaId" : "22FAE724-0C7E-4B22-B968-38A5FC6CF549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "D5C70B3D-F7FD-40D2-A92E-FC158BBCF9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "E8D15B30-66BE-4299-9B49-F96E5B675FF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "9FC688E2-ACE7-4AB9-A92D-C5C13F03D41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:*",
            "matchCriteriaId" : "B8FD8D4B-C375-400A-A139-99CB4CBC886F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "D1EF8909-5238-4FED-A5B0-4C830A15030B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "98ABCB89-3FDF-495C-B4C2-D39D063C132C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "11EB359A-2FCA-4E93-A6D2-5134A4B81312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:*",
            "matchCriteriaId" : "A892D682-CC14-4EAA-A394-52F104C33D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "CB19AA67-3F78-4A01-BA31-76F681E81DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "1F780727-2552-4275-BA67-87A18E7C42B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "D267399F-B2D4-46FB-943E-61A4D660BFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:*",
            "matchCriteriaId" : "6BA8947D-330C-4F65-BBD0-CBB2EF1C0058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "D6964976-4D18-4580-A793-9D26FFDD8804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "BC529C3A-16E7-4B90-A7AD-93E99F4F79DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "B4E9EE64-8E9C-4004-9C5B-A67AFE831151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:*",
            "matchCriteriaId" : "ACC81C45-21C0-454F-916E-476002E4EF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "4021B54C-6C0B-46E0-BCE0-2BA7357488DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "AB43D0DC-62DB-4D33-B84E-2227964A1A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A1A11319-C5D5-4947-B9CE-34F952453FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:*",
            "matchCriteriaId" : "47C266AB-6862-4FE5-B801-7A112F620C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "36C8D9D2-4DAC-4EF0-9AB5-92296CE82543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:*",
            "matchCriteriaId" : "CB5AA123-3426-4B7A-A790-F89DC8BF9AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42709C69-248F-4054-95C6-4DBDCBB92413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392C16A9-1F35-4459-A364-D047A3D27016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111272918117194&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13632",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/sybase-ase.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393851",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12080",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sybase.com/detail?id=1034520",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sybase.com/detail?id=1034752",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111272918117194&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/sybase-ase.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sybase.com/detail?id=1034520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sybase.com/detail?id=1034752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-01T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4107E934-D5CF-4ABF-8CB6-0DA90F3D9A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.0f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85742E7F-C06C-46A5-9008-245BE6E4E0BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.0g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B820A83B-0F03-4523-9D4D-3EB2930B35F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FA30E3-7572-4BCC-8EFA-9D259DF892E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBB2BDD-5FA2-40E1-9395-A9DED672E3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7E5E-BCBC-4E14-9C0D-50E5DD237D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E73109-5473-417C-A003-7C1EE1DC3ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F183CCFF-6D5B-43E7-A70F-E9AEA6E46880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA73438-7BA5-4668-90E2-2EECDBBB58A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C3E6DF-AE5C-4D7F-99B3-16C3967A6A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.5d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF53885-8C5B-4654-AB42-587290E58355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A197BD9-85DD-47F2-B30B-6C7F372F6DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:2.0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F2BB29-5136-4F23-8D1B-0507A5FCBF13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110461706232174&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110461706232174&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-03T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing the code into the url_avatar field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263DBD5A-63AD-4568-B29A-AC9268D77067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110477752916772&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12150",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110477752916772&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-03T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:reviewpost_php_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "BC8DE8E6-00CB-46CC-9C9A-537AEDF74A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:reviewpost_php_pro:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A201E3C2-98CE-493C-AD53-B33088954268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:reviewpost_php_pro:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "790D2CB2-EF2B-43C6-AE21-ECC5BA6C73C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110485682424110&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13697/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00062-01022005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110485682424110&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13697/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00062-01022005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-03T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) si, (3) page, or (4) ppuser parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.85",
            "matchCriteriaId" : "7D6D629E-A1CA-42FE-B9FF-E126B0A982E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110486165802196&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13680/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00063-01032005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12156",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110486165802196&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13680/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00063-01032005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-04T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in a message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jowood_productions:soldner_secret_wars:30830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4D8A12-E95D-4843-8B6B-B14214AE53B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110486654213504&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12162",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110486654213504&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-04T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (dot dot) and a %00 at the end of the filename in the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52446CE-AA8E-43D6-8E75-806C425005CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110486832621053&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.qwikiwiki.com/index.php?page=QwikiVulnerability",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12163",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110486832621053&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.qwikiwiki.com/index.php?page=QwikiVulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-06T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitrary files via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mod_dosevasive:mod_dosevasive:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44007DA6-C29B-4952-A613-568C5CE9CC8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mod_dosevasive:mod_dosevasive:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FA3828-615D-4318-B2B4-07749FC0F02F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110547469530582&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-01-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12181",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110547469530582&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-10T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_book:1.0_gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F0CC63-E55C-44E7-9AFE-982445412BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_book:1.1.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2D8FB2-FE35-44A4-B3DC-A40DA08511F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110548032401506&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110548032401506&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-10T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bottomline:webseries_payment_application:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15362EE4-A086-46D6-A77E-A22CCB995473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110548383812462&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110548383812462&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-11T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AA7680-E004-44AC-9AE9-C0186459C4B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A4829D-4DC1-4CD2-B136-48719A254EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6BFB6A-0AFC-4E52-AD48-252E741B683B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9797A37-FD26-4527-B2FA-E458F7A88D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC6CCDC-237A-408E-9CAF-D41EC3A9D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540AA8A9-A4AB-4DB2-B37E-11876348DF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F697BB-5C94-42CD-AD9E-72C3D3675D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE764CDC-1018-4502-8F41-8A48E38E7AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBAAC5B-6012-410F-B765-689A8D55B095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885123F3-346F-451E-B72A-D0405F0B72E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF792263-D6ED-4AD1-98C1-0E22670EF91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C66D46-D3C7-4FCC-B80D-EBA542E77C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B6C02F-D194-4CA7-9DEC-A436A4E8C99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D86CB-EEAD-4C40-855D-E98E4ED8B58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F59C3E7-0AC0-4886-B4B4-56904AC93C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5207FB50-946A-4AB2-AED9-9BA78B88F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8096AB-99B9-4D08-AA13-6AFF0DD65BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A356D04A-7882-4A14-AD5F-2079EA0E79C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C4F43-0807-400C-890B-D13BF5B9BF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D590FB-2759-475E-8136-1B15352605EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13789",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-11T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service (crash) via a RADIUS_REPLY_MESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_auth_radius:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796D8BB7-A27C-424C-9161-FE80023C204E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110548193312050&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-659",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110548193312050&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-11T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xshisen:xshisen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.36",
            "matchCriteriaId" : "5E4B6E22-E1BA-48C6-86EC-2E083EF86730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289784",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/56971fa6-641c-11d9-a097-000854d03344.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/56971fa6-641c-11d9-a097-000854d03344.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-11T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bottomline:webseries_payment_application:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15362EE4-A086-46D6-A77E-A22CCB995473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110549684319400&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110549684319400&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-12T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote attackers to execute arbitrary PHP code by modifying the DOCUMENT_ROOT parameter to reference a URL on a remote web server that contains (1) config.php or (2) sql_layer.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sergey_kiselev:sgallery:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE5AE46-E927-46C7-AFBF-A27432D96D15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110557050700947&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13824",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-39.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110557050700947&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-12T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes the URL to be obscured in a download dialog, which may allow remote attackers to trick users into executing arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.54",
            "matchCriteriaId" : "BFE75E76-E20D-47A4-9603-0AF46F733AEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13818/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/882926",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_31_opera.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/linux/changelogs/754u2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18867",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/13818/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/882926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_31_opera.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/linux/changelogs/754u2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-13T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim_development_group:vim:6.3.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B0FABE-75CE-4074-91FF-0D02DD0B6F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim_development_group:vim:6.3.025:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536006A-DB7A-4A50-9CF3-30EEAB59A83F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim_development_group:vim:6.3.030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7240424-79F1-41AA-AF22-C66F9F94B7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim_development_group:vim:6.3.044:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BA3F17-DA8F-4E4F-B654-AEBED68B43B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110608387001863&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13841/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-122.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2343",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608387001863&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13841/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-122.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-13T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBA6898-4D32-4A3D-8529-1FC7A63894B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1012893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=181&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=181&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-13T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in f.aspx in forumKIT 1.0 allows remote attackers to inject arbitrary web script or HTML via the members parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forumkit:forumkit:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD62D04-170D-432F-A045-CA524F28C493"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110563769413994&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12256",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110563769413994&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-13T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB726CF-ADA2-4CDA-9786-1E84AC53740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC373FC-88AC-4B6D-A289-51881ACD57F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBE290B-5EC6-4BBA-B645-294C150E417A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF053A1-C252-427E-9EEF-27240F422976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A9C344-45AA-47B9-B35A-1A62E220D9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB24F0-46A7-481B-83ED-8BB012AE0C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6AEAF0-FA61-4A3F-A083-1218C2027781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DA30A1-3360-46BC-85B7-008D535F95BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA33E7E2-DE7B-411E-8991-718DA0988C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957B3C0-7F25-469B-BC3F-7B09260837ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC46909F-DDFC-448B-BCDF-1EB343F96630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9496279F-AB43-4B53-81A6-87C651ABC4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA160D4-5CAB-44E7-880A-59DD98FEAD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012861",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata35.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12250",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/13819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata35.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=110569119106172&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110569119106172&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13858",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=182&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/12915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=182&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/12915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AA7680-E004-44AC-9AE9-C0186459C4B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A4829D-4DC1-4CD2-B136-48719A254EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6BFB6A-0AFC-4E52-AD48-252E741B683B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9797A37-FD26-4527-B2FA-E458F7A88D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC6CCDC-237A-408E-9CAF-D41EC3A9D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540AA8A9-A4AB-4DB2-B37E-11876348DF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F697BB-5C94-42CD-AD9E-72C3D3675D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE764CDC-1018-4502-8F41-8A48E38E7AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBAAC5B-6012-410F-B765-689A8D55B095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885123F3-346F-451E-B72A-D0405F0B72E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF792263-D6ED-4AD1-98C1-0E22670EF91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C66D46-D3C7-4FCC-B80D-EBA542E77C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B6C02F-D194-4CA7-9DEC-A436A4E8C99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D86CB-EEAD-4C40-855D-E98E4ED8B58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F59C3E7-0AC0-4886-B4B4-56904AC93C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5207FB50-946A-4AB2-AED9-9BA78B88F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8096AB-99B9-4D08-AA13-6AFF0DD65BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A356D04A-7882-4A14-AD5F-2079EA0E79C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C4F43-0807-400C-890B-D13BF5B9BF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D590FB-2759-475E-8136-1B15352605EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13825",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-651",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2005_1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-gopher_html_parsing.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2005_1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-gopher_html_parsing.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AA7680-E004-44AC-9AE9-C0186459C4B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A4829D-4DC1-4CD2-B136-48719A254EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6BFB6A-0AFC-4E52-AD48-252E741B683B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9797A37-FD26-4527-B2FA-E458F7A88D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC6CCDC-237A-408E-9CAF-D41EC3A9D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540AA8A9-A4AB-4DB2-B37E-11876348DF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F697BB-5C94-42CD-AD9E-72C3D3675D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE764CDC-1018-4502-8F41-8A48E38E7AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBAAC5B-6012-410F-B765-689A8D55B095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885123F3-346F-451E-B72A-D0405F0B72E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF792263-D6ED-4AD1-98C1-0E22670EF91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C66D46-D3C7-4FCC-B80D-EBA542E77C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B6C02F-D194-4CA7-9DEC-A436A4E8C99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D86CB-EEAD-4C40-855D-E98E4ED8B58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F59C3E7-0AC0-4886-B4B4-56904AC93C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5207FB50-946A-4AB2-AED9-9BA78B88F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8096AB-99B9-4D08-AA13-6AFF0DD65BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A356D04A-7882-4A14-AD5F-2079EA0E79C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C4F43-0807-400C-890B-D13BF5B9BF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D590FB-2759-475E-8136-1B15352605EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13825",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-651",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/12886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2005_2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_denial_of_service.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/12886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2005_2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_denial_of_service.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-16T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minis:minis:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E95ED1B-D1F3-4E40-99D9-7A4AAB89A865"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110599953704025&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110599953704025&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-17T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2_form[subject] field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A43A4-F48B-4780-9F4C-1006F8963FFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-17T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using hex encoded URLs, as demonstrated using a hex encoded file extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:fvs318:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C54A73-70AB-4C23-BE24-437B386D1CC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030984.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110599727631560&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securinews.com/vuln.htm?vulnid=103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12278",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030984.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110599727631560&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securinews.com/vuln.htm?vulnid=103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-17T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via a blocked URL phrase."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:fvs318:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C54A73-70AB-4C23-BE24-437B386D1CC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030984.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110599727631560&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/13012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securinews.com/vuln.htm?vulnid=103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12278",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030984.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110599727631560&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/13012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securinews.com/vuln.htm?vulnid=103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-17T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the (1) messageid, (2) shopper, (3) shopfor, or (4) itemid parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gift_registry:phpgiftreg:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF9E7E9-30E5-412C-8FC4-17151A3C9437"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030965.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110599710017066&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13873",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392485",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12289",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030965.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110599710017066&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-17T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inca:nprotect_gameguard:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3700F6FE-63AC-4314-B035-46A53DC3F4FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110608422029555&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12280",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608422029555&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-17T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOTE: this issue has been disputed by the vendor.  The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified (1) error or (2) modify parameter that returns template files or the \"about\" information page.  NOTE: the vendor has disputed this issue"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194704B6-4820-4398-8906-A1E529ED65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E0DC694-0DEB-41DE-8A0D-9B649FC2F220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "174646C1-60F8-4A84-9C0D-785303EBAF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5DFFF8-7DCF-48E0-B43E-269EA4F3AE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F5DF0E-8158-4D2E-88CC-BBD7A031054E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "08A78BE7-6426-41CD-BBAF-9BB951726D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E50599E1-45E5-443F-AAEC-F91778CA4792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B28BB6-4A33-4A61-9810-9AB26911B490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EFCA37-C863-4E22-B231-B0A10E65594E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5298016B-B6E3-4236-B99F-57353A495B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "27060485-FD94-4E73-87B6-2AE940F02283"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110608203729814&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/servlet/tidfinder/10096251",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-01/0771.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-01/0341.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12285",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608203729814&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/servlet/tidfinder/10096251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-01/0771.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-01/0341.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-18T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "64A662D9-1187-489B-8E44-A409FFC808A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://awstats.sourceforge.net/docs/awstats_changelog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13893/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=185&type=vulnerabilities&flashstatus=false",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/272296",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/13002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://awstats.sourceforge.net/docs/awstats_changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13893/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=185&type=vulnerabilities&flashstatus=false",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/272296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/13002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-18T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A77562B-D1A5-450D-9288-3FC7145E9292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF498E5-F7DF-41F4-BC47-AB66E69BC89F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110606477308492&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110606477308492&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-19T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050119-itscme.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050119-itscme.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-19T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier could allow remote attackers to execute arbitrary code via a long tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*",
            "matchCriteriaId" : "4EBB6E97-C8C0-49A7-BCDA-794C4986BAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "0C9031C2-95D1-46D0-965A-F4BAA76FB29F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:de:*:*:*:*:*",
            "matchCriteriaId" : "E5E04CB6-AD7E-4F38-A6D9-D68C35DC9EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01513F87-049E-46A9-A573-A7AF27EB30C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDC43D9-C93E-4FB4-B05B-9FB519B03DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348F3214-E5C2-4D39-916F-1B0263D13F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169753E3-949F-4B7D-9955-A52240CB8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616302008401&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/040928_player/EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/real-03full.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18982",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616302008401&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/040928_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/real-03full.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-20T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the table parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsboard:jsboard:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67EEA77-8166-4F5A-8C3F-0405EE7A6761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsboard:jsboard:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37ED4D7-A553-4D37-9B46-0F8D7802A466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsboard:jsboard:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DD6C73-07BA-4576-971F-37976C38053A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110627201120011&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12319",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110627201120011&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1846",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2005-01-20T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in YaMT before 0.5_2 allow attackers to overwrite arbitrary files via the (1) rename or (2) sort options."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yamt:yamt:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2173E8AC-24C9-438E-8FB9-40E1311CA016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/99b5cfa5-d3d2-11d9-8ffb-00061bc2ad93.html",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/99b5cfa5-d3d2-11d9-8ffb-00061bc2ad93.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1847",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2005-01-20T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in YaMT before 0.5_2 allow attackers to execute arbitrary code via the (1) rename or (2) sort options."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yamt:yamt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.1",
            "matchCriteriaId" : "593CDA69-056F-4650-A58E-BD72A35270D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/99b5cfa5-d3d2-11d9-8ffb-00061bc2ad93.html",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/99b5cfa5-d3d2-11d9-8ffb-00061bc2ad93.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-22T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local users to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isync:mrouter:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFD7AC3E-5264-430F-925C-D9F9CF833581"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110642400018425&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110642400018425&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-22T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long RNTO command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.00b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF92180-09D2-4802-9C06-EEB72A29864C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.20b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83F3EB7-61B8-4B67-8CE2-137B377A0294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.30b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16963987-BC9A-4C07-A76E-9C6D92A1E755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.31b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E284D0C6-A8B5-4B37-A91A-96DBC53FFA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:2.02b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208D2C8A-8DA2-45BF-83D8-84DF4529531A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031098.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/13966/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.goldenftpserver.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/620862",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12333",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031098.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/13966/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.goldenftpserver.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/620862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ejoy_and_hu_yong:zhcon:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22C3E63-26B9-4DBF-AA46-7A67EF2FB09C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "C17FC804-1FAB-494A-A397-B2AA576F58B6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000925",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/13830",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-35.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012981",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-673",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:024",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-238.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-397.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12354",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19031",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9616",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/69-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/13830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-35.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-397.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/69-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBF40C5-6272-427C-97A1-3CE3B1D47B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55A98B3-34ED-4A90-BB78-50CB56B1B51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5143ED-D4C5-4830-9C96-0B54D03679CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B765AEC-09E9-456C-8B57-09927E55D119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAFC3B0-DCE3-4190-B279-E095C666FA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9291A565-0BD6-4B5E-B45F-9DE65AB8159D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110702772714662&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13962/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-099.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-135.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2005-01-19?PHPSESSID=8af117822fb1ca3aa966a64248b5d223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110702772714662&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13962/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-099.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-135.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2005-01-19?PHPSESSID=8af117822fb1ca3aa966a64248b5d223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datarescue:ida:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9C200-CF92-43B8-9520-284D5EB78D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.datarescue.com/ubb/ultimatebb.php?/topic/2/146.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=189&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.datarescue.com/ubb/ultimatebb.php?/topic/2/146.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=189&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265176",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ursoftware:w32dasm:8.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC9DAA1-3A27-4B98-87EB-C8AC4ADB83C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110661194108205&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12352",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110661194108205&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-25T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AA7680-E004-44AC-9AE9-C0186459C4B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A4829D-4DC1-4CD2-B136-48719A254EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6BFB6A-0AFC-4E52-AD48-252E741B683B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9797A37-FD26-4527-B2FA-E458F7A88D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC6CCDC-237A-408E-9CAF-D41EC3A9D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540AA8A9-A4AB-4DB2-B37E-11876348DF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F697BB-5C94-42CD-AD9E-72C3D3675D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE764CDC-1018-4502-8F41-8A48E38E7AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBAAC5B-6012-410F-B765-689A8D55B095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885123F3-346F-451E-B72A-D0405F0B72E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF792263-D6ED-4AD1-98C1-0E22670EF91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C66D46-D3C7-4FCC-B80D-EBA542E77C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B6C02F-D194-4CA7-9DEC-A436A4E8C99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D86CB-EEAD-4C40-855D-E98E4ED8B58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F59C3E7-0AC0-4886-B4B4-56904AC93C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5207FB50-946A-4AB2-AED9-9BA78B88F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8096AB-99B9-4D08-AA13-6AFF0DD65BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A356D04A-7882-4A14-AD5F-2079EA0E79C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C4F43-0807-400C-890B-D13BF5B9BF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D590FB-2759-475E-8136-1B15352605EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-25T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E42E9E-1C19-4ABE-99DA-A88B4D5C533D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2473C711-A505-43C7-81B4-48EE7D32395C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110661795632354&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12359",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110661795632354&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-25T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E42E9E-1C19-4ABE-99DA-A88B4D5C533D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2473C711-A505-43C7-81B4-48EE7D32395C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110661795632354&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12359",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110661795632354&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-25T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow remote attackers to inject arbitrary web script or HTML via the module parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03041476-37D5-4DEB-8392-42806DF3DC70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110666998407073&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/13188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/13190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12358",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110666998407073&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/13188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/13190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-26T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openswan:openswan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.9",
            "matchCriteriaId" : "E2411B8B-FE2A-4E99-A280-0FB39291E96F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C5F91B-EE8A-4A81-A21D-68A3F4295200"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=190&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openswan.org/support/vuln/IDEF0785/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-January/msg00103.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=190&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openswan.org/support/vuln/IDEF0785/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-January/msg00103.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-27T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access violation) via a CWD command with a crafted pathname, as demonstrated using a large string of \"%s\" sequences, possibly indicating a format string vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:war_ftp_daemon:war_ftp_daemon:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB927CA2-341F-4B24-A55B-F59BA8B44E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:war_ftp_daemon:war_ftp_daemon:1.82_rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A85AD8B6-0130-4AD2-BE8C-09E257276B2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110687202332039&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12384",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110687202332039&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-27T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2) read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete arbitrary directories and files via the IMAP commands (3) CREATE, (4) EXAMINE, (5) SELECT, or (6) DELETE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amax_information_technologies:magic_winmail_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661FB8A8-F851-44B8-90C4-4636A2C0AED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110685011825461&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12388",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110685011825461&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-27T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:amax_information_technologies:magic_winmail_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661FB8A8-F851-44B8-90C4-4636A2C0AED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110685011825461&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12388",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110685011825461&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-27T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amax_information_technologies:magic_winmail_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661FB8A8-F851-44B8-90C4-4636A2C0AED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110685011825461&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12388",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110685011825461&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwasher:webwasher_classic:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD5629F-8E42-4A68-B04A-C4B35DDFDE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwasher:webwasher_classic:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B24638-55F6-4366-8EE2-1F0FCE1AD3AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110693045507245&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14058",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oliverkarow.de/research/WebWasherCONNECT.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12394",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110693045507245&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oliverkarow.de/research/WebWasherCONNECT.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the user parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC237046-3404-4D84-8008-0E15D1075B06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110692897003614&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12395",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110692897003614&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users to edit other users' account information via a modified user parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC237046-3404-4D84-8008-0E15D1075B06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110692897003614&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12395",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110692897003614&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server, which allows remote attackers to inject arbitrary HTML or web script to facilitate cross-site scripting (XSS) and phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F411993-6855-43FB-A090-210263CBD9F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110692897003614&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12395",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110692897003614&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to login.html, (2) accountid parameter to accountsettings_add.html, or the (3) note, (4) title, and (5) location fields to calendar.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A024C321-E1DD-409E-9E0D-CC2C1E41123B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110693950205007&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12396",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110693950205007&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-29T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBF40C5-6272-427C-97A1-3CE3B1D47B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55A98B3-34ED-4A90-BB78-50CB56B1B51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5143ED-D4C5-4830-9C96-0B54D03679CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B765AEC-09E9-456C-8B57-09927E55D119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAFC3B0-DCE3-4190-B279-E095C666FA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9291A565-0BD6-4B5E-B45F-9DE65AB8159D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110702772714662&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13962/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-099.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-135.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2005-01-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110702772714662&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13962/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-099.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-135.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2005-01-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-29T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBF40C5-6272-427C-97A1-3CE3B1D47B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55A98B3-34ED-4A90-BB78-50CB56B1B51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5143ED-D4C5-4830-9C96-0B54D03679CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B765AEC-09E9-456C-8B57-09927E55D119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAFC3B0-DCE3-4190-B279-E095C666FA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9291A565-0BD6-4B5E-B45F-9DE65AB8159D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C44025-C79D-4791-8EF6-3E26786E194E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110702772714662&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13962/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14096",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-662",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-099.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-135.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2005-01-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110702772714662&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13962/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-099.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-135.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2005-01-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-01-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote attackers to cause a denial of service via certain network traffic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:virtualvault:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2609CA23-B892-428D-93D1-D210B8D5741D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:virtualvault:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129075F9-F03E-4298-8515-5A046816C7C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:virtualvault:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E7B549-B2AA-4587-84DE-ECDF4FE4BAFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110726808700080&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14082/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110726808700080&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14082/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-01T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newspost:newspost:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "C4EB0FE4-AF9F-4192-8BF2-816D46BB54CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110746336728781&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://people.freebsd.org/~niels/issues/newspost-20050114.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14092/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-05.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vuxml.org/freebsd/7f13607b-6948-11d9-8937-00065be4b5b6.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110746336728781&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://people.freebsd.org/~niels/issues/newspost-20050114.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14092/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vuxml.org/freebsd/7f13607b-6948-11d9-8937-00065be4b5b6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0245",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-02-01T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3",
            "versionEndExcluding" : "7.3.10",
            "matchCriteriaId" : "96E69FC4-9166-4A1A-831D-7C686B902273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4",
            "versionEndExcluding" : "7.4.7",
            "matchCriteriaId" : "7B6180C2-75D0-4196-AE96-9DA773C346E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.postgresql.org/pgsql-committers/2005-01/msg00298.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.postgresql.org/pgsql-patches/2005-01/msg00216.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/12948",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-683",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-150.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12417",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19188",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10175",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://archives.postgresql.org/pgsql-committers/2005-01/msg00298.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.postgresql.org/pgsql-patches/2005-01/msg00216.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/12948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-150.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-02T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via \"URL manipulation.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp.debian.org/debian/dists/stable-proposed-updates/squirrelmail_1.2.6-2_i386.changes",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14096",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-662",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/203214",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://ftp.debian.org/debian/dists/stable-proposed-updates/squirrelmail_1.2.6-2_i386.changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/203214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-03T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDENT, logging to SYSLOG, and with DEBUG enabled, allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ngircd:ngircd:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1953E24-5EF6-4E56-B8D8-72DDE031EA41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110746413108183&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14114/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nosystem.com.ar/advisories/advisory-11.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110746413108183&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14114/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nosystem.com.ar/advisories/advisory-11.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.0",
            "matchCriteriaId" : "18656642-C693-4BFD-A708-BCBFB5965C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:emacs:21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA95B19B-F35D-4644-9E75-5A138A960C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:xemacs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.4",
            "matchCriteriaId" : "C335DC66-8037-4457-942A-9F6B83333BAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110780416112719&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-670",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-671",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-685",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-110.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-112.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-133.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433928/30/5010/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780416112719&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-112.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-133.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433928/30/5010/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30E072-9E6A-49B4-A5C7-63A328598A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "434F0580-985F-42AF-BA10-FAB7E2C23ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B179E0-C843-46C9-AAD2-78E998175E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5E5A51-ED4C-4927-8C4D-502E79391E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171C82CB-2E92-4D41-B1B1-DCFE929E8270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25633253-D9DE-41F0-A787-D0E8B2B3B9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEDF9611-E4E2-4059-B45E-D3A61AC9DB47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A9D197-D889-4BE4-BE7A-2EE9536A7498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A4538C-3870-431E-A225-D8523D77A4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8233B3A-E09D-425B-B1A1-65CD170FD384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC217F-C257-4A3C-9CBD-08010C30BEC3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CD54FE-D682-4063-B7C3-8B29B26B39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "37F124FE-15F1-49D7-9E03-8E036CE1A20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C55338-3372-413F-82E3-E1B476D6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39605B96-BAD6-45C9-BB9A-43D6E2C51ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67735E5-E43E-4164-BDB2-ADC6E0288E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB70F82-52BB-4D0D-9A24-9AF67278466D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "6E94583A-5184-462E-9FC4-57B35DA06DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E905FAAD-37B6-4DD0-A752-2974F8336273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110737149402683&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110779721503111&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/55314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0131b%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-13.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-103.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-105.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12426",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110737149402683&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110779721503111&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/55314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0131b%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-103.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-105.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF792263-D6ED-4AD1-98C1-0E22670EF91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C66D46-D3C7-4FCC-B80D-EBA542E77C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B6C02F-D194-4CA7-9DEC-A436A4E8C99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D86CB-EEAD-4C40-855D-E98E4ED8B58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F59C3E7-0AC0-4886-B4B4-56904AC93C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5207FB50-946A-4AB2-AED9-9BA78B88F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8096AB-99B9-4D08-AA13-6AFF0DD65BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A356D04A-7882-4A14-AD5F-2079EA0E79C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C4F43-0807-400C-890B-D13BF5B9BF72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/768702",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-header_parsing",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.br.squid-cache.org/Advisories/SQUID-2005_4.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/768702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-header_parsing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.br.squid-cache.org/Advisories/SQUID-2005_4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF792263-D6ED-4AD1-98C1-0E22670EF91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C66D46-D3C7-4FCC-B80D-EBA542E77C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B6C02F-D194-4CA7-9DEC-A436A4E8C99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D86CB-EEAD-4C40-855D-E98E4ED8B58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F59C3E7-0AC0-4886-B4B4-56904AC93C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5207FB50-946A-4AB2-AED9-9BA78B88F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8096AB-99B9-4D08-AA13-6AFF0DD65BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A356D04A-7882-4A14-AD5F-2079EA0E79C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C4F43-0807-400C-890B-D13BF5B9BF72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-667",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/625878",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2005_5.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-response_splitting",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/625878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2005_5.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-response_splitting",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka \"firetabbing.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110781134617144&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/firetabbing/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-26.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=280056",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110781134617144&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/firetabbing/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=280056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0233",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-02-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D044E602-45A5-4B14-8B16-B0978D985027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.6",
            "matchCriteriaId" : "E6F232DA-F897-4429-922E-F5CFF865A8AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omnigroup:omniweb:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD3E937-C813-4564-9E3C-D009D39E8A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.54",
            "matchCriteriaId" : "BFE75E76-E20D-47A4-9603-0AF46F733AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera_software:opera_web_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142EB1E3-2918-4792-83D7-9D7B6A3BD26B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-29.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "5797D88E-6D89-46F9-AC32-154754D6B856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95436CD6-8E9C-4F89-9683-0650F6167027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC910CFD-9F20-473E-BC2D-64A7A3C14404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE15AE1D-8647-444F-90F0-FC658A3AC344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C03FA86-F2E6-4E41-8368-E917C91D7837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:*",
            "matchCriteriaId" : "95BF74F0-40F1-4395-AC85-E6B566950C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:*",
            "matchCriteriaId" : "994CB184-AFE8-4673-ACE8-085813F1E71F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:*",
            "matchCriteriaId" : "85CF6FFB-4189-4558-A70D-DE6D4C0C1F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:*",
            "matchCriteriaId" : "31D6A148-A92C-4FCA-8762-16764D62C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6E2EA2-88DA-4DF0-9AA3-3E3D2C80C04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB47C16B-5221-4D64-BDB2-65D072A66C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr2_build_8.1.1.319:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204F2046-F116-45D7-9256-179A3B59886A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr3_build_8.1.1.323:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0C67C0-3CF1-4BAD-A673-9B783E1D0724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr4_build_8.1.1.329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274EA5DA-9519-46DE-B11E-87BDF1978E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044C020A-0BCC-4037-BC32-73385A0BE019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:gateway_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A939A3CE-BFBB-4950-A0D3-D5731AABF602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:gateway_security:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC7324C-0415-4349-A625-04A8209D7709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:gateway_security:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031C9545-1CF1-46EF-B79C-7AD69E1B1C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:4.0:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "DA6CFDFD-1EB4-458A-AD39-320E619593D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:4.1:build_458:exchange:*:*:*:*:*",
            "matchCriteriaId" : "15436586-B0EE-40F4-9051-90953CF3684D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:4.1:build_459:exchange:*:*:*:*:*",
            "matchCriteriaId" : "96290C64-A507-46B6-908D-AD567A21899F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:4.1:build_461:exchange:*:*:*:*:*",
            "matchCriteriaId" : "2955A350-222F-4AD9-9745-9468D46503F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:4.5_build_719:*:exchange:*:*:*:*:*",
            "matchCriteriaId" : "5CA62889-7A55-459F-BFD8-D38CD93F9219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2.18_build_83:*:exchange:*:*:*:*:*",
            "matchCriteriaId" : "3E906A81-4081-438E-948C-FC82BF7203F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.319:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "E626F14C-FDE9-4C6A-8CE7-B99CD4FEE485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.323:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EC4CFE5A-4D51-405D-B92E-37DE4E617ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.329:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "727A116A-D18C-4F3F-A6A8-2C6107FFB8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4A6612F1-4CA8-427A-AED4-854F943BA3D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.434:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "8BB225A0-7FB9-4AD2-8ED2-5CC1AEBAAB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.437:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "9603C423-F24A-4607-B721-D02EDA94AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.446:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "574AAAA6-8181-457B-84CE-5AEB1895E3B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.457:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "DF957AD3-B6E5-4BD7-832F-33E734817B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.460:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "14D862F4-BE5F-4E6B-9955-ACFB48A5D3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.464:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "768B7F5E-E4AD-420E-92FA-A58E1AE3D1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.471:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "C15B7FEA-E6A9-4DBE-B1A9-E17E91512A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0:*:macintosh_corporate:*:*:*:*:*",
            "matchCriteriaId" : "DFD3D01C-9169-4CFE-9EA0-61D32BFA8943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2004:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A7FC3B67-D36C-4C9F-B5DC-8FBE3D6E9E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "09CA1AC8-E273-44C1-9D1C-19542EB57433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2004:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "676BCD67-231B-409B-AE6B-D00314C30C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "20030FF8-7275-4AFB-A051-C78F3D3990D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:os_400:*:*:*:*:*",
            "matchCriteriaId" : "4CD83506-91E9-4556-A993-8FDD31FBDF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:sav_filter_for_domino_nt:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4004DB50-022B-48C9-B9E5-5110DF37A0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:web_security:3.01.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05B8522-E203-49A0-8C5B-3DA7B06AF5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:web_security:3.01.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD064CE-3C39-4243-B59E-CC8E48ED50DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:web_security:3.01.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9886B467-793C-4D07-9B1B-B80FA5266D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:web_security:3.01.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676F5A96-B21B-49FF-86EA-F18F9C3931C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:web_security:3.01.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18991132-C5B6-43AB-BDCB-196BB2957F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:web_security:3.01.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CE2596-83A9-4A80-A8C6-825EDEAAB8B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:web_security:3.01.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA16BAF-6263-44EA-B3EB-187264913D8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013133",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/107822",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.02.08.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18869",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1013133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/107822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.02.08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0362",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-02-09T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) \"pluginmode\", (2) \"loadplugin\", or (3) \"noloadplugin\" parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255AE13F-5A3E-4A8E-B453-C9B10971E2E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13B168A-5B44-48F9-891B-0BB28AD02721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADC1071-123D-4C66-BFEE-D140ABCD273B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E169347-2804-4DC0-9EC9-B3840C719EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34318EAF-8E44-49AF-87C0-A2C0BB981D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "058FD0C7-1E3F-4EDF-B024-F9D572D78693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882C578E-14B6-4003-A9B2-0366F7EDCEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE32264-0980-4122-AA46-0E40D1432103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353361B9-864D-41E1-B4C0-337EA5373B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4119D0EC-66BB-4C55-80E1-6D458492E978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C5DFFC3-A628-4569-9AB7-3C60C3F5DDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B1B44AB-45F0-4E0A-8529-610C6B8934BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312C3DA6-D34A-4566-923E-F2ECD613EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24439BBC-DEDA-4309-B8B5-78289476052B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16089",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-09T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. (dot dot) in (1) the filename of an e-mail attachment, (2) the _msgatt.rec file, (3) and the /msg, /delete, /folderadd, and /folderdelete operations for the Folder parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:argosoft_mail_server:1.8.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B01A652-6B3D-4376-B2A4-83A39DFABA6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110796956011699&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.org.sg/vuln/argosoftmail1873.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110796956011699&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.org.sg/vuln/argosoftmail1873.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-10T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67457&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67655&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=195&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67457&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67655&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=195&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-10T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110805105200470&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14220/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110805105200470&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14220/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-11T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpcd:xpcd:2.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2911CA-5CFE-4DD2-8D1E-F0ADEAC8B2CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-676",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-11T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:check_point_integrity_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.556.166",
            "matchCriteriaId" : "F67CBAA3-FC85-48FA-B90A-5BB354BC041D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:check_point_integrity_client:4.5.122.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE49F811-CB35-46F6-A569-1C3B934FC8B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm:5.5.062.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C25ED8-75E6-4C5C-B9C9-DF8B452E60FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm_wireless_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.080.000",
            "matchCriteriaId" : "570140A8-D941-44FE-AB84-6C990BF2C704"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.zonelabs.com/bin/free/securityAlert/19.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=199&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.zonelabs.com/bin/free/securityAlert/19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=199&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-12T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possibly crash the server via a long infostring, possibly triggering a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AE0171-46F1-4137-99BE-4B825A403D6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/q3infoboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110824822224025&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/q3infoboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110824822224025&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-212"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:image_processing_project:image_processing:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88EE3811-AD0E-4D63-8610-F7A075CE25BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Feb/0343.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-008.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Feb/0343.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-008.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating the MD5 checksum of the user name combined with the \"boogaadeeboo\" string, which is hard-coded in the $hidden_hash variable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-916"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrusdb:citrusdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.6",
            "matchCriteriaId" : "AA1F1B4D-3FA6-4A54-A671-9B403DE5EC33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of other vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrusdb:citrusdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.6",
            "matchCriteriaId" : "AA1F1B4D-3FA6-4A54-A671-9B403DE5EC33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrusdb:citrusdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.6",
            "matchCriteriaId" : "AA1F1B4D-3FA6-4A54-A671-9B403DE5EC33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031709.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-004.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031709.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. (dot dot) sequences in the load parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrusdb:citrusdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.6",
            "matchCriteriaId" : "AA1F1B4D-3FA6-4A54-A671-9B403DE5EC33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031710.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031710.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:r4:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.2_build_8848",
            "matchCriteriaId" : "08339980-CE28-4565-8712-9A6D52ACDDEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-18.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-094.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268107",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-094.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846102231365&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-472.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846102231365&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-472.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (1) db.php, (2) mainfile.php, (3) Downloads/index.php, or (4) Web_Links/index.php, which lists the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23264211-2992-4222-9B96-5ABEE1332C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F76C32-E24D-4B62-88CE-2D23F457573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90A3E1F-0371-45C0-A165-55D94A62C3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A5D98-6C48-461F-8B96-BD32A96CDCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F4E55E-4424-4EC8-8013-9A0FFE7D3658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13CCAA-839F-406D-A7F3-975B4780425A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D375197-0087-479C-991B-964FB83644F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F6320E-314D-4A8F-BC9A-29F730035C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E16D17-B704-4ADA-8F91-B7D96FB52909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/12561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-40.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-40.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) the newdownloadshowdays parameter in a NewDownloads operation or (2) the newlinkshowdays parameter in a NewLinks operation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23264211-2992-4222-9B96-5ABEE1332C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F76C32-E24D-4B62-88CE-2D23F457573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90A3E1F-0371-45C0-A165-55D94A62C3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A5D98-6C48-461F-8B96-BD32A96CDCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F4E55E-4424-4EC8-8013-9A0FFE7D3658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13CCAA-839F-406D-A7F3-975B4780425A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D375197-0087-479C-991B-964FB83644F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F6320E-314D-4A8F-BC9A-29F730035C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E16D17-B704-4ADA-8F91-B7D96FB52909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/12561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-40.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-40.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08003947-A4F1-44AC-84C6-9F8D097EB759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14286",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57673-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57673-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-16T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31ABD58E-2CF3-4548-9EFB-3A151ECB2EB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-684",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-16T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including \">\" and \"<\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23853366-133E-40D0-9CD5-9995A642728F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:1.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "CA932DEC-C465-45A7-860C-4217D72EDCAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:1.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCD7252-375C-44AC-9761-C14723B8AFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D8B732-4FC7-4454-9F94-B1C99952462A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC441C4B-3A1E-4709-8601-44477A6D5FA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110867912714913&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14214",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12574",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110867912714913&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-16T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL with a %00 (null) character after the file extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FE9EF8-936E-4351-B512-02B181C4DF5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.comp.web.lighttpd/1171",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14297",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-21.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://article.gmane.org/gmane.comp.web.lighttpd/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-17T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349A209F-6609-4809-B228-E84623FA268D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92465439-530F-435E-976F-491AD3C56944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6.0.1351:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38232D5E-568C-4CFA-BA01-C35939D68AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE7278-FFAD-489B-BDCC-BF6BA8D5DF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:6.0.0.1750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595ECE8-C876-441F-B90A-FC8D80BA1034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-2/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/13712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-2/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-17T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAAB645C-2D52-4710-952B-0A4ED0008977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E42E9E-1C19-4ABE-99DA-A88B4D5C533D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2473C711-A505-43C7-81B4-48EE7D32395C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/02/mercuryboard-forumphp-f-variable-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13937",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/02/mercuryboard-forumphp-f-variable-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-18T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349A209F-6609-4809-B228-E84623FA268D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92465439-530F-435E-976F-491AD3C56944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6.0.1351:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38232D5E-568C-4CFA-BA01-C35939D68AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE7278-FFAD-489B-BDCC-BF6BA8D5DF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:6.0.0.1750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595ECE8-C876-441F-B90A-FC8D80BA1034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://messenger.yahoo.com/security/update6.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/11815",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-6/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://messenger.yahoo.com/security/update6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/11815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-6/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-18T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read arbitrary files via (1) ../ and (2) ..\\ characters in an HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xinkaa_web_station:xinkaa_web_station:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C36B62A-2216-4AB6-A5B8-B2B3F4A53137"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/xinkaa-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14349",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/xinkaa-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-18T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52B7406-3481-4692-A897-7B8E4BCF4ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92A87072-6A64-4400-B839-D7E178AA03AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47EA17F1-AE32-43AF-B11C-13B8D1D5B448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED4F896-AC49-44C5-A7DE-13052F6B9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C462CC04-10A2-4F4C-9E6D-139599D03E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8BA120-D506-4688-B524-275A1FB54C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00BEE9B9-B5B9-4FC5-8BE7-554629042868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA27A4CC-41E2-424D-A9EF-93FE0D8F1DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE4FC9C-2281-4BDD-88FA-8E94D5CA08FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0097A7-8713-4979-A6CD-F5086741706D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68592EA7-2237-4BF0-8769-5942B6D065D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9955ED25-075F-4818-BFAD-070D19EBBA30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.argosoft.com/ftpserver/changelist.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.argosoft.com/ftpserver/changelist.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-19T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running on x86 with the hugemem kernel, allows local users to cause a denial of service (crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12599",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-19T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021147FB-D153-440D-95F2-B812FB9DEA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABAEFB19-C049-4C09-89CF-00E128FEC5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FC71F5-C279-40A8-ABC3-5A141D7DF419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837FA51A-A0C2-4BC0-9349-DB220BBB7A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C7E8DA-5108-4928-B05E-70827B5F39B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110884332105513&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110884332105513&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-19T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mail_autocheck.php and modifying the pm_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2003-1086."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmachine:pmachine_pro:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB996BB-4272-4A2E-8CF2-4DBA95882E21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=110883604531802&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12597",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110883604531802&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-20T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gigafast router (aka CompUSA router) with the DNS proxy option enabled allows remote attackers to cause a denial of service via malformed DNS queries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:gigafast_ethernet:gigafast_router:ee400-r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1166D62C-3E49-4A5E-BCD0-57A953C8DD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:gigafast_ethernet:gigafast_router:ee410-r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D39480F-DA8D-4A2B-8434-C179CCFF8C47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110900986022760&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110900986022760&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-21T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been allocated."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.56",
            "matchCriteriaId" : "190CABAE-FF9C-44F5-9F8B-7E229DE6B67A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14333",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-readdir.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-string.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-28.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=201&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-readdir.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-string.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-28.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=201&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-21T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:thomson_cable_modem:tcw690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64693F84-4564-4AF3-B778-09BAA10189C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110886937131507&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14353",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110886937131507&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-21T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to access the file system and possibly execute arbitrary commands."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arkeia:network_backup:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E68C91-5706-445A-B88C-9F2ECF39D9DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110900879826004&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://metasploit.com/research/arkeia_agent/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013256",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20667",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110900879826004&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://metasploit.com/research/arkeia_agent/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-21T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uim:uim:0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A25E233-DA22-4C24-96AE-F502B5323B2D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3528DABD-B821-4D23-AE12-614A9CA92C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9E661D58-18DF-4CCF-9892-F873618F4535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.freedesktop.org/archives/uim/2005-February/000996.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/13981",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12604",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.freedesktop.org/archives/uim/2005-February/000996.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/13981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-21T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "misc.php for vBulletin 3.0.6 and earlier, when \"Add Template Name in HTML Comments\" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81E1505-5F99-4DA8-AC0F-28F3E6F819C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818806B0-37B1-4CC2-A955-E711EC000203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0394B9E0-FD26-4D5E-91D5-B8334B517DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCDE86-03BD-4A61-9F3A-5EB05912A2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC9227A-1F12-4E93-AEA7-C44D6A6F4177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306C6BDF-C687-4B63-998B-B520DF1D1B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF18ED7C-80BB-4A78-8809-9AAE817876A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D731A35-E0DB-4F40-A981-C38229A2EB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4053C8E5-5510-4814-A46E-89B81266C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6753AB-DFCF-4D40-8267-645810F7967E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B3772-A566-4A51-8B51-68E78C86CB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFBBAA9-BD46-44E3-9618-D87384E959A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.9_can:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747A57AD-A345-4F5B-AD82-0F7E08C2240E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E0702A-9235-45BE-82A8-BFD57A0DCC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0914B4-24A9-438F-9B44-A6809D755168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CAB0A-2A0A-47EF-A328-C341CCC1BA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFED411-1291-4E03-A160-CC9F1AD03D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_can4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9FE483-4367-47E7-9D09-043955998C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC85ED9-7491-43D3-B34D-1CB07836888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74013F50-0677-454E-8E6C-101CF210E989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC951B-860E-4AF1-8908-71C7099FB19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E9C82-64CF-4487-8947-ED745C41945A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110910899415763&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14326",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vbulletin.com/forum/showthread.php?postid=819562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110910899415763&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vbulletin.com/forum/showthread.php?postid=819562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-21T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2004-1693."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.2",
            "matchCriteriaId" : "BC281DB3-7FDC-40AD-9D53-8E080AC74964"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mamboforge.net/frs/download.php/4043/Patch_4.5.2_to_4.5.2.1.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14337",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://mamboforge.net/frs/download.php/4043/Patch_4.5.2_to_4.5.2.1.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-21T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in page.php for iGeneric (iG) Shop 1.2 may allow remote attackers to execute arbitrary SQL statements via the (1) cats, (2) l_price, or (3) u_price parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igeneric:free_shopping_cart:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF5B05C-741F-4797-8F7C-ED51A225B8D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110910607229970&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14369",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013268",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110910607229970&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-22T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain \"Ready for next volume\" messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-merge:unace:1.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAA4F65-3652-4B5C-8005-EDA2CF700721"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14359",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/215006",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/215006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-22T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) ../ sequences or (2) absolute pathnames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-merge:unace:1.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAA4F65-3652-4B5C-8005-EDA2CF700721"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14359",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-22T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Verity Ultraseek before 5.3.3 allows remote attackers to inject arbitrary HTML and web script via search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:verity:verity_ultraseek:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE83F38A-BA09-4BEE-8DBC-B6D649C2116C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14367",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/716144",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mikx.de/index.php?p=6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/716144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mikx.de/index.php?p=6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-22T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AFC6EE-41C7-4369-8BA1-DDBF8A744ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09F36C1-CBC0-489E-B62D-4590A2E5A4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F0067D-534A-4238-A244-D92A73845432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEC422E-49BC-41D4-9F71-B834D4108EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D854161-28AA-4386-B90A-97F9692CE37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A0FA49-99DC-4691-968F-6AEB76B74370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0C6A2C-992B-45A0-8E0C-1AE983881337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292A77C7-8C7B-4F3A-B7FD-3505A9F37E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77FC97A-3BB2-4AA5-B0D6-C0D1FBEA5FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9393EF-083A-4662-BC7A-89979C2B8546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DE6A4E-6BCE-499E-B017-1E0F8D1F65B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14360",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013260",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=307067",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=307067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0937",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-02-22T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F04081-D672-488E-A91D-5088DD04AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB59EF-74EF-462E-BC84-89201F734380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0755A136-3DE3-4B61-B5EF-F6282AACD38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D950C3-0DDC-4549-99F8-1E206768219A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195A133A-26C9-401E-913F-285BA220D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D68E21-6C58-46A7-96F2-9A79DD880803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D11B12-AFD7-4055-A366-D932CA1BA8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC990132-9DF2-4D23-B9DA-0819809A3CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA51D40-E72C-40A4-B238-70F6806FA1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1B7D68-E41E-4A5A-9606-F14F057B39E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BCB10C-FD72-4F18-84C9-AE0603402426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF742FF1-5504-41BB-8FAA-D71B83C791B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C6D04-3226-4654-9A41-0325B48A2F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072A77AD-BB27-4C24-91A0-A12D6E741593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF900D1D-E351-4407-8269-80E5403432B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44915F9F-88DF-4304-8F66-58A869654BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC2D90D-2115-406C-B609-870B241F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF681CC1-B3EC-467A-A10D-10840D3D4575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8660C030-328E-4221-847E-AC4BDA08CE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47AEC277-F9A4-412F-B2EA-C1AEA336A46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7234AF29-BCDA-4728-A141-C169EE59CEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374851C5-C61D-4964-8B4A-473B0A008F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD55C81-3687-46BF-880E-58D7E005A185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2953267F-16BF-404F-83F1-73E0908979B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D953B61-3457-4A0E-A668-BA4937B79784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5F3607-C0DD-494C-AB6E-46E383A6B17D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19138F52-25EA-42B6-89DC-692A8AF0A720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2EBADC-0817-4E38-9F49-8446D8A20CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340368E7-0005-4F8A-8AF1-C20A1198288C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC860DD-57DF-4474-AE2B-9AADB9060175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1D576A-0763-4611-B3CF-CD8514F18783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F570226-CA89-46F4-8C68-9A59BC0602A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162A88DA-E2EA-4E92-B174-9AD86BE8D983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE5C4F5-C64D-4714-B02E-689B435E3E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164F4483-9F28-491A-8F99-4242C9B9CBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34803A7D-45C4-4DBE-BF18-19CE9DE62A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1178D6EE-A462-4CC1-B430-9A44C75D2336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4360530E-6E07-48F9-B8F8-B36622331052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17508D09-AE14-4458-93A2-E2764452EA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F2CD4A-CCA9-4743-86C4-7675D2487E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C1504C-03C5-49E4-8192-E1E698CF07A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3172A-E663-42F6-90E7-51C3850AF9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F6692C-494F-44ED-97C6-A6CD05334DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77231F8B-137F-4FAE-BCD9-658F32943CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552ED77A-F09A-4923-A907-8E0DF8445363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF940EA-676A-42C8-A6E0-7F53C8A34340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DCCFB1-054F-4BF0-92F1-78A2063415D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D3222C-7469-42F6-984D-3223BCD8080E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697B7069-D08D-41BD-8285-A1ABA0E1142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72173CFB-BAB6-456C-B5F2-3AA31D799E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD08A67-195F-431B-98A5-42B2966055DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658C7317-D50B-475A-9E0E-E68AECD49B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1270F454-8E05-413C-BAF4-35D062CA5803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40421cfc11zFsK9gxvSJ2t__FCmuUd3Q",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lkml.org/lkml/2005/2/22/123",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10037",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40421cfc11zFsK9gxvSJ2t__FCmuUd3Q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2005/2/22/123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-23T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ImageGalleryPlugin (ImageGalleryPlugin.pm) in Twiki allows remote attackers to execute arbitrary commands via certain commands that generate thumbnails."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:imagegalleryplugin:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8787E66-BE59-496C-B757-B69D28335C2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110918725225288&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14384",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://static.enyo.de/fw/patches/twiki/imagegallery-robustness-20041128.diff",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.enyo.de/fw/security/notes/twiki-robustness.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110918725225288&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://static.enyo.de/fw/patches/twiki/imagegallery-robustness-20041128.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.enyo.de/fw/security/notes/twiki-robustness.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-23T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PeerFTP_5 stores sensitive information such as passwords in plaintext in the PeerFTP.ini files, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peerftp_5:peerftp_5:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E621956F-5D53-4E82-A391-8F0BD4091AC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013263",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-23T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privileges via the proxy_user and proxy_password values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exeem:exeem:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB020F38-BC49-4553-A4CD-22FE8064316C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013266",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-23T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the SITE COPY command, a different vulnerability than CVE-2005-0519."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52B7406-3481-4692-A897-7B8E4BCF4ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92A87072-6A64-4400-B839-D7E178AA03AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47EA17F1-AE32-43AF-B11C-13B8D1D5B448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED4F896-AC49-44C5-A7DE-13052F6B9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C462CC04-10A2-4F4C-9E6D-139599D03E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8BA120-D506-4688-B524-275A1FB54C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00BEE9B9-B5B9-4FC5-8BE7-554629042868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA27A4CC-41E2-424D-A9EF-93FE0D8F1DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE4FC9C-2281-4BDD-88FA-8E94D5CA08FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0097A7-8713-4979-A6CD-F5086741706D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68592EA7-2237-4BF0-8769-5942B6D065D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9955ED25-075F-4818-BFAD-070D19EBBA30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14372",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.argosoft.com/ftpserver/changelist.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.argosoft.com/ftpserver/changelist.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-23T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SendLink 1.5 stores sensitive information, possibly including passwords, in plaintext in the data.eat file, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sendlink:sendlink:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0249FEF1-EEFB-4758-840D-F526786F3067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C525B9-636F-49B9-B528-50AEB0E98F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74632C65-6711-4425-A43F-CCF1664C8542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E291BCAA-E2B5-4127-92DA-0BD48EACB6B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110929725801154&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14382",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110929725801154&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain \"unauthorized access to files.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110927245211549&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110927245211549&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12651",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110927245211549&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110927245211549&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:\\(acns\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "489ABDD8-DE03-46B0-B600-D76F1F579F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C11A917-8173-4266-8098-687A96937C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBF9A68-C8CA-4AB8-B831-89E63D1CCF0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D8DB6E-ED9E-4981-9DF3-7CD268E455B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFC2175-854C-4C6F-BBA3-22B130391DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6385CE52-78E9-401A-9CA4-D7DACCAB8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F39004-8977-4C4D-B278-1DCE564B9702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE863AC-3902-4BD2-90A8-12E4D19E63F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66527B05-A7BE-4582-A458-4EBB9F7B7E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2711B21-43C2-4EF9-BEFD-F0B4450E86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B2DF00-A45C-4615-B59B-715D1ABFBD38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC27C87-0432-425E-B77F-81F7FE83BAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_delivery_manager:4630:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB34BB4-CEC1-4351-BC38-BC2E8115E6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_delivery_manager:4650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89436CEB-FE3C-4F78-99D2-4916E61359BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4630:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71568B23-8055-4625-A13C-E5B9032DEEA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4630:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC79750C-9CA0-4A9F-BF18-06BEF13A3F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4630:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6766073-A568-4299-B528-3F29C5D9A421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4650:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F368653-EF5E-43EB-93CB-1CCD0FFD6FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4650:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F52DDF6-B959-4221-834E-2371DF46BD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4650:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E842071-A161-4F02-B0CC-D3A6582D9930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4670:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DE3F02-3223-4CB9-81FB-87CA0DD1B914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:507:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B947FCA-35E1-4F88-A8EA-7C90BBA0294F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:507_2.2_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF48646D-F72D-4236-ABC5-A37ACA801973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:507_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7705CE1-4982-45AF-8CB1-271225180BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:507_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF9A0A5-3107-44F6-9383-A2FFE15377AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:507_4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C1B960-F088-4486-BB87-37BBD713F184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D373A697-21F6-4AAA-8B53-C34CFC2E6C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA1C53F-0548-47ED-8C81-534D621BC00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:560_2.2_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096CEE42-5DF7-4661-A908-B598DE27032E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:560_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85526696-0617-45E2-B2DA-8AAB05F0E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:560_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6EB111F-D6C5-4906-8316-A317B27BC599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:560_4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FF8F15-7851-4052-B353-76251BB55F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:565:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7B3CE9-8306-4CB2-B3FD-79FA500E0CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5362FE38-A346-4959-B1B6-E4E981BF2292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:590_2.2_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADA2500-631D-429C-8F2E-CEF687B1CE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:590_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C0C24A-36A3-4C25-9279-3E2F495AA59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:590_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "359CA948-212B-49F1-A659-7E8FC2E6F845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:590_4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84BE6AF-044E-46D6-94F4-6A9F665F62CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C96FD2-7C6B-4526-A3EE-0CE578526B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7320_2.2_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE7E43C-4ACC-403D-AE2C-D42BD51C1F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7320_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41E0ADD3-EF9C-4904-83D8-AAB9729A33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7320_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A206212-F490-4A31-989F-C2F4A01B1DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7320_4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3940DE-75B0-41BF-A6B3-4D01091D7A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7325:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57F0D7-9482-45AE-89F1-426182DA8591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:2600_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1B155F-8DA7-4940-8DF0-82D91019B810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:2800_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142F287-E15F-4C8A-9E10-A9F768C58B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3600_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64774589-EBB1-4C52-9645-3B66923111E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3700_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235FC5D3-ACC2-4DDB-B987-5898E50B59E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3800_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31223523-0430-4179-A65A-3C60F683DDDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9A7E8B-B8A9-430B-8712-7CA4C60B349E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2721E909-0237-4633-BAE0-758A1357B23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_router_4430:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A3BF42-76DF-47E2-A7B4-FAC4D693F493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_router_4450:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA736E0A-0D31-4869-892E-8875B6ACE4D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14395",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/579240",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12648",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/579240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service (bandwidth consumption) via \"crafted IP packets\" that are continuously forwarded."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:\\(acns\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "489ABDD8-DE03-46B0-B600-D76F1F579F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C11A917-8173-4266-8098-687A96937C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBF9A68-C8CA-4AB8-B831-89E63D1CCF0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D8DB6E-ED9E-4981-9DF3-7CD268E455B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFC2175-854C-4C6F-BBA3-22B130391DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6385CE52-78E9-401A-9CA4-D7DACCAB8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F39004-8977-4C4D-B278-1DCE564B9702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE863AC-3902-4BD2-90A8-12E4D19E63F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66527B05-A7BE-4582-A458-4EBB9F7B7E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2711B21-43C2-4EF9-BEFD-F0B4450E86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B2DF00-A45C-4615-B59B-715D1ABFBD38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC27C87-0432-425E-B77F-81F7FE83BAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_delivery_manager:4630:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB34BB4-CEC1-4351-BC38-BC2E8115E6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_delivery_manager:4650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89436CEB-FE3C-4F78-99D2-4916E61359BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4630:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71568B23-8055-4625-A13C-E5B9032DEEA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4630:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC79750C-9CA0-4A9F-BF18-06BEF13A3F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4630:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6766073-A568-4299-B528-3F29C5D9A421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4650:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F368653-EF5E-43EB-93CB-1CCD0FFD6FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4650:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F52DDF6-B959-4221-834E-2371DF46BD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4650:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E842071-A161-4F02-B0CC-D3A6582D9930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_distribution_manager_4670:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DE3F02-3223-4CB9-81FB-87CA0DD1B914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:507:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B947FCA-35E1-4F88-A8EA-7C90BBA0294F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:507_2.2_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF48646D-F72D-4236-ABC5-A37ACA801973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:507_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7705CE1-4982-45AF-8CB1-271225180BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:507_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF9A0A5-3107-44F6-9383-A2FFE15377AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:507_4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C1B960-F088-4486-BB87-37BBD713F184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D373A697-21F6-4AAA-8B53-C34CFC2E6C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA1C53F-0548-47ED-8C81-534D621BC00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:560_2.2_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096CEE42-5DF7-4661-A908-B598DE27032E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:560_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85526696-0617-45E2-B2DA-8AAB05F0E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:560_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6EB111F-D6C5-4906-8316-A317B27BC599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:560_4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FF8F15-7851-4052-B353-76251BB55F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:565:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7B3CE9-8306-4CB2-B3FD-79FA500E0CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5362FE38-A346-4959-B1B6-E4E981BF2292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:590_2.2_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADA2500-631D-429C-8F2E-CEF687B1CE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:590_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C0C24A-36A3-4C25-9279-3E2F495AA59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:590_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "359CA948-212B-49F1-A659-7E8FC2E6F845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:590_4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84BE6AF-044E-46D6-94F4-6A9F665F62CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C96FD2-7C6B-4526-A3EE-0CE578526B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7320_2.2_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE7E43C-4ACC-403D-AE2C-D42BD51C1F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7320_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41E0ADD3-EF9C-4904-83D8-AAB9729A33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7320_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A206212-F490-4A31-989F-C2F4A01B1DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7320_4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3940DE-75B0-41BF-A6B3-4D01091D7A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine:7325:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57F0D7-9482-45AE-89F1-426182DA8591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:2600_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1B155F-8DA7-4940-8DF0-82D91019B810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:2800_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142F287-E15F-4C8A-9E10-A9F768C58B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3600_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64774589-EBB1-4C52-9645-3B66923111E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3700_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235FC5D3-ACC2-4DDB-B987-5898E50B59E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3800_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31223523-0430-4179-A65A-3C60F683DDDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9A7E8B-B8A9-430B-8712-7CA4C60B349E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2721E909-0237-4633-BAE0-758A1357B23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_router_4430:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A3BF42-76DF-47E2-A7B4-FAC4D693F493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_router_4450:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA736E0A-0D31-4869-892E-8875B6ACE4D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14395",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12648",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-25T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:bsmtpd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "3EE36146-E02F-4114-A497-93F41BC7A0DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-690",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-25T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenx:freenx:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29D0EFB0-479C-4263-8DA7-66334B5670AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenx:freenx:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FB00AB-5EA8-410A-8B1A-B7E7471BDB76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenx:freenx:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B263719-C81E-4073-9371-66F2A93218D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenx:freenx:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826BD6AF-73DD-4A7C-977D-870F8FDDE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenx:freenx:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D47E29-F3C8-4407-89F9-4B5895C8527A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenx:freenx:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A53B3F-E69E-49CD-9664-CE3BD09B0607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenx:freenx:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC42BC72-26C0-4E85-980D-9378D54B7ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenx:freenx:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4B01D8-CF5A-4BA9-AA84-DA3830BE9B46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.kde.org/pipermail/freenx-knx/2005-February/000734.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.linuxcompatible.org/story42495.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://mail.kde.org/pipermail/freenx-knx/2005-February/000734.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.linuxcompatible.org/story42495.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-25T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krzysztof_dabrowski:cmd5checkpw:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD542D23-A05C-43C3-949C-634B21E517EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krzysztof_dabrowski:cmd5checkpw:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD6D32BC-E219-4F5D-B4EC-4C9706A4CBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krzysztof_dabrowski:cmd5checkpw:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0651BB-BEA6-44D2-952D-ACD6BEA86167"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-30.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110943646112950&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://neossecurity.net/Advisories/Advisory-06.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/14413",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?t=267563",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110943646112950&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://neossecurity.net/Advisories/Advisory-06.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/14413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?t=267563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a POST request with a Content-Length that is less than the amount of data that is actually sent."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmod:webmod:0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A0D1AF1-C7A4-4A65-8D30-378DC794C6F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://djeyl.net/forum/index.php?showtopic=41440",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14302",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://djeyl.net/forum/index.php?showtopic=41440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to upload arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD08F2AA-D782-419D-945C-D241EB18CBB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/12676",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2) File link, (3) Author name (4) Author e-mail address, (5) File size, (6) Version, or (7) Home page variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke_phoenix:0.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD0F45A-0AAE-4E0F-9D40-1F8D7373B2A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke_phoenix:0.760_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C04D873-6515-4F32-B3DF-BD5C92F65646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110962768300373&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/Article2669.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013324",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110962768300373&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/Article2669.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bfriendly.com:einstein:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "F0453722-0B28-4CDE-88C9-66E6B1EF56C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14455",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:reportbug:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C8330F-E5CF-4B4C-8096-4B7F48267A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:reportbug:2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C9BF15-8298-4179-9221-4DC61848A79B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110972153627388&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14422/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110972153627388&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14422/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-02-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:reportbug:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C8330F-E5CF-4B4C-8096-4B7F48267A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:reportbug:2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C9BF15-8298-4179-9221-4DC61848A79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:reportbug:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983A734B-2270-4C50-A4D4-4BE6A15F5053"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110972153627388&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14422/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6717",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110972153627388&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14422/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-01T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing (1) . (dot) or (2) space."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raidenhttpd:raidenhttpd:1.1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7074E50F-79BB-4923-AAA3-4500B757505F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110969702013313&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14453",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/raidenhttpd1132.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110969702013313&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/raidenhttpd1132.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-01T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raidenhttpd:raidenhttpd:1.1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7074E50F-79BB-4923-AAA3-4500B757505F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110969702013313&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14453",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/raidenhttpd1132.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110969702013313&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/raidenhttpd1132.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-01T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or the (2) body or (3) subject of a forum message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:demof:forumwa:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6638F045-AD2D-40D0-B842-B300249EA5CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110971101826900&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14418",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12689",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110971101826900&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-01T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) Avatar parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F00248E-8243-4BF5-95E2-65BC2BB7FFEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B4AB6A-D3B4-42DB-B688-4540FBC94CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D00F1D-7E56-4144-95CA-F81F3BFBDD05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5468851-B5F0-436E-9C30-EEADC93CAC42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E5E1EC-EC22-44BE-A021-082807A9033E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CA83D7-9749-4EC1-B315-04B770E464F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36919AD5-4F5E-4A13-BA9D-09078B030896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A5C539-196E-4B64-8815-53AD085AD7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110970474726113&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110970911514167&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14434",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013337",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110970474726113&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110970911514167&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-01T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8436698F-444F-479A-A559-487AD4DB99B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BDBEE7-263B-40E7-8492-B452BDCE32C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.56_4.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD40331D-7781-44F2-9D83-88235A450860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE462871-487D-4D7A-8EC0-8B6C62B091B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110971002211589&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=40&page=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12690",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110971002211589&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=40&page=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-01T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the \"id\" and \"a\" parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8436698F-444F-479A-A559-487AD4DB99B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BDBEE7-263B-40E7-8492-B452BDCE32C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.56_4.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD40331D-7781-44F2-9D83-88235A450860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE462871-487D-4D7A-8EC0-8B6C62B091B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110970738214608&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=42&page=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12694",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110970738214608&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=42&page=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-01T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP code via the path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnews:phpnews:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9A0A0D-BAA4-41FB-AB68-701894B666FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnews:phpnews:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4206A418-EADB-438A-82C5-9D6196921276"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110971663824719&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110989169008570&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14449",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12696",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110971663824719&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110989169008570&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-02T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lesstif:lesstif:0.93.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A4B331-2868-46E3-9734-DC3AEFD2F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC217F-C257-4A3C-9CBD-08010C30BEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FFBC43-2178-48DF-B61E-CCBA4682AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F506308-E878-4AA5-B5D5-A7E148D63947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D129D08C-AF18-4F9D-9781-64B8C1CFD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE887A26-0590-40DE-ACE2-28A30E5228AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF2D1C-D328-49BE-87CF-938FB533180B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C104B02C-3F3B-4DB4-8A1D-65A7DAA380EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEECB0ED-A5C9-4675-9CEB-AD6C19EDA7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43D5F86-97B2-4175-8ED7-1F937850F9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0946A224-6A0C-4DE3-89F9-200682431737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33E5444-E178-4F49-BDA1-DE576D8526EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BCC09AA-AB01-4583-8052-66DBF0E1861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E49FAA6-E146-4AD5-845E-9445C7D9F088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43425C85-806B-4823-AD74-D0A0465FC8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90FA67D9-8296-4534-8354-51B830DE3499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A000C67-7EA3-47A7-9068-1C8744C182D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EDDB93-DD20-4DBE-962B-6334D5A7CB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC4F566-5D54-4364-B5AA-F846A0C8FCEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9D1BD9-4300-43B5-A87B-E2BF74E55C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:*",
            "matchCriteriaId" : "F4B7E143-E24B-40D2-897B-6D516566B7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837EBF15-6C7D-46B8-8A90-9DFBF2C09FF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E859A205-0DC2-4E28-8FF0-72D66DE9B280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:x11r6:4.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18E8C7B-53AC-4BC7-9E00-A70293172B58"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*",
            "matchCriteriaId" : "64BE98C2-8EFA-4349-9FE2-D62CA63A16C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*",
            "matchCriteriaId" : "7D0AC3A3-A37C-4053-B05F-A031877AC811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3528DABD-B821-4D23-AE12-614A9CA92C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9E661D58-18DF-4CCF-9892-F873618F4535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D69B83-4EF3-407B-8E8C-DE623F099C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "F1D16230-3699-4AAA-9CAE-5CAF34628885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F0D201-B1DC-4024-AF77-A284673618F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "052E3862-BFB7-42E7-889D-8590AFA8EF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB0B27C-04EA-426F-9016-7406BACD91DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6996B14-925B-46B8-982F-3545328B506B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124E1802-7984-45ED-8A92-393FC20662FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F08806-9458-439A-8EAE-2553122262ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B67020A-6942-4478-B501-764147C4970D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E74E0A28-7C78-4160-8BCF-99605285C0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "76159C25-0760-47CB-AFCE-28306CDEA830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7786607A-362E-4817-A17E-C76D6A1F737D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "8A206E1C-C2EC-4356-8777-B18D7069A4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "6E2FE291-1142-4627-A497-C0BB0D934A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "49BC7C7E-046C-4186-822E-9F3A2AD3577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "2FE69F6F-6B17-4C87-ACA4-A2A1FB47206A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "467A30EB-CB8F-4928-AC8F-F659084A9E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "714C1439-AB8E-4A8B-A783-D60E9DDC38D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAE5B0-4D46-4A93-A343-C8E9CB574C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819868A7-EB1E-4CA9-8D71-72F194E5EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*",
            "matchCriteriaId" : "FB647A8B-ADB9-402B-96E1-45321C75731B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0944FD27-736E-4B55-8D96-9F2CA9BB9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "373BB5AC-1F38-4D0A-97DC-08E9654403EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E71DA3-F4A0-46AF-92A2-E691C7A65528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0519FF7D-363E-4530-9E63-6EA3E88432DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "1975A2DD-EB22-4ED3-8719-F78AA7F414B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "19F606EE-530F-4C06-82DB-52035EE03FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A0E896D5-0005-4E7E-895D-B202AFCE09A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5A8B313F-93C7-4558-9571-DE1111487E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CD54FE-D682-4063-B7C3-8B29B26B39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "37F124FE-15F1-49D7-9E03-8E036CE1A20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C55338-3372-413F-82E3-E1B476D6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.5/SCOSA-2006.5.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.57/SCOSA-2005.57.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83598",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83655",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-08.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013339",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-723",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-15.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-044.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-331.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-412.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-473.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12714",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/attachment.cgi?id=1909",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/92-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/97-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.5/SCOSA-2006.5.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.57/SCOSA-2005.57.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-044.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-331.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-412.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-473.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/attachment.cgi?id=1909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/92-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/97-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-02T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bfriendly.com:einstein:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "F0453722-0B28-4CDE-88C9-66E6B1EF56C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14455",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-02T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerulean_studios:trillian:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189B6C6-A516-4C23-A67F-F1505D977DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerulean_studios:trillian_pro:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7743FA8-9C43-4774-9FAA-DBEC02F676EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111023000624809&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5KP030KF5E.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12703",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111023000624809&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5KP030KF5E.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-02T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the USER command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxmail:foxmail_email_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB66C043-0412-4041-976C-4CA5E5B89309"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14145",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013356",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391960",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12711",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-02T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xli:xli:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D053A59C-7C9C-42B9-82CD-B6E8D6D405C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xli:xli:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A8E75C-D3DD-472D-8E9E-BBB4F753F506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xli:xli:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44737F18-0C52-451E-9555-0A222F02B321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xli:xli:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE9AD48-3D2F-44AD-9950-494B14E3FC33"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*",
            "matchCriteriaId" : "64BE98C2-8EFA-4349-9FE2-D62CA63A16C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*",
            "matchCriteriaId" : "7D0AC3A3-A37C-4053-B05F-A031877AC811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EE2D72-B1E6-4380-80B0-E40A23DDD115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111575DE-98A2-4C54-BDE1-CACC74D22B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1976D15D-9EE6-4A49-B59F-34F0505FD5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962FC8D7-BE5D-4E7D-9ADC-511681C593BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "451453AC-65FF-4E3B-9AC1-2DDB2E2182E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7716120D-5110-42B0-A574-9AA2AC8D3C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4C8426-CAF2-4366-94C0-1BA1C544FB6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC7D746-B98B-4FAF-B816-57222759A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830D48B8-D21D-4D31-99A1-20C231804DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC94EF9-5872-402F-B2FC-06331A924BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F163E145-09F7-4BE2-9B46-5B6713070BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124E1802-7984-45ED-8A92-393FC20662FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F08806-9458-439A-8EAE-2553122262ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B67020A-6942-4478-B501-764147C4970D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E74E0A28-7C78-4160-8BCF-99605285C0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "76159C25-0760-47CB-AFCE-28306CDEA830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7786607A-362E-4817-A17E-C76D6A1F737D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "8A206E1C-C2EC-4356-8777-B18D7069A4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "6E2FE291-1142-4627-A497-C0BB0D934A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "49BC7C7E-046C-4186-822E-9F3A2AD3577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "2FE69F6F-6B17-4C87-ACA4-A2A1FB47206A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "467A30EB-CB8F-4928-AC8F-F659084A9E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "714C1439-AB8E-4A8B-A783-D60E9DDC38D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAE5B0-4D46-4A93-A343-C8E9CB574C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819868A7-EB1E-4CA9-8D71-72F194E5EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*",
            "matchCriteriaId" : "FB647A8B-ADB9-402B-96E1-45321C75731B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0944FD27-736E-4B55-8D96-9F2CA9BB9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "373BB5AC-1F38-4D0A-97DC-08E9654403EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E71DA3-F4A0-46AF-92A2-E691C7A65528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0519FF7D-363E-4530-9E63-6EA3E88432DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "1975A2DD-EB22-4ED3-8719-F78AA7F414B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "19F606EE-530F-4C06-82DB-52035EE03FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A0E896D5-0005-4E7E-895D-B202AFCE09A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5A8B313F-93C7-4558-9571-DE1111487E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CD54FE-D682-4063-B7C3-8B29B26B39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "37F124FE-15F1-49D7-9E03-8E036CE1A20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C55338-3372-413F-82E3-E1B476D6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=79762",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14459",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14462",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-05.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433935/30/5010/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=79762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433935/30/5010/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-02T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via \"buffer management errors\" from certain image properties, some of which may be related to integer overflows in PPM files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xli:xli:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D053A59C-7C9C-42B9-82CD-B6E8D6D405C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xli:xli:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A8E75C-D3DD-472D-8E9E-BBB4F753F506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xli:xli:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44737F18-0C52-451E-9555-0A222F02B321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xli:xli:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE9AD48-3D2F-44AD-9950-494B14E3FC33"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*",
            "matchCriteriaId" : "64BE98C2-8EFA-4349-9FE2-D62CA63A16C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*",
            "matchCriteriaId" : "7D0AC3A3-A37C-4053-B05F-A031877AC811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EE2D72-B1E6-4380-80B0-E40A23DDD115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111575DE-98A2-4C54-BDE1-CACC74D22B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1976D15D-9EE6-4A49-B59F-34F0505FD5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962FC8D7-BE5D-4E7D-9ADC-511681C593BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "451453AC-65FF-4E3B-9AC1-2DDB2E2182E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7716120D-5110-42B0-A574-9AA2AC8D3C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4C8426-CAF2-4366-94C0-1BA1C544FB6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC7D746-B98B-4FAF-B816-57222759A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830D48B8-D21D-4D31-99A1-20C231804DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC94EF9-5872-402F-B2FC-06331A924BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F163E145-09F7-4BE2-9B46-5B6713070BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124E1802-7984-45ED-8A92-393FC20662FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F08806-9458-439A-8EAE-2553122262ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B67020A-6942-4478-B501-764147C4970D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E74E0A28-7C78-4160-8BCF-99605285C0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "76159C25-0760-47CB-AFCE-28306CDEA830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7786607A-362E-4817-A17E-C76D6A1F737D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "8A206E1C-C2EC-4356-8777-B18D7069A4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "6E2FE291-1142-4627-A497-C0BB0D934A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "49BC7C7E-046C-4186-822E-9F3A2AD3577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "2FE69F6F-6B17-4C87-ACA4-A2A1FB47206A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "467A30EB-CB8F-4928-AC8F-F659084A9E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "714C1439-AB8E-4A8B-A783-D60E9DDC38D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAE5B0-4D46-4A93-A343-C8E9CB574C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819868A7-EB1E-4CA9-8D71-72F194E5EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*",
            "matchCriteriaId" : "FB647A8B-ADB9-402B-96E1-45321C75731B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0944FD27-736E-4B55-8D96-9F2CA9BB9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "373BB5AC-1F38-4D0A-97DC-08E9654403EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E71DA3-F4A0-46AF-92A2-E691C7A65528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0519FF7D-363E-4530-9E63-6EA3E88432DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "1975A2DD-EB22-4ED3-8719-F78AA7F414B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "19F606EE-530F-4C06-82DB-52035EE03FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A0E896D5-0005-4E7E-895D-B202AFCE09A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5A8B313F-93C7-4558-9571-DE1111487E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CD54FE-D682-4063-B7C3-8B29B26B39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "37F124FE-15F1-49D7-9E03-8E036CE1A20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C55338-3372-413F-82E3-E1B476D6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=79762",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14459",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-05.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=79762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-02T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the \"Change Credentials for Database\" window, which allows local users to recover the SQL Admin password via certain methods."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "358E054A-2298-486B-88A4-44AB6864904E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14454",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-02T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Reporter for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to inject arbitrary HTML or web script via the (1) name or (2) description in a report template."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "358E054A-2298-486B-88A4-44AB6864904E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14454",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-03T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca3de:ca3de:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "march_2004",
            "matchCriteriaId" : "B74D5B6E-79AC-4B40-999E-9C1CEE84EFED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/ca3dex-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14483",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013361",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12727",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/ca3dex-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-03T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pabox:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376A31CC-EFBE-4FCC-8175-4DC9A71B437A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110987537431541&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14474",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013363",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12719",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110987537431541&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0593",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-03-04T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL \"secure site\" lock icon via (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-14.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=258048",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268483",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=276720",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=277564",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9533",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=258048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=276720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=277564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-04T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in certain files such as (1) .CAB or (2) .ZIP files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:christian_hilgers:http_anti_virus_proxy_\\(havp\\):*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.50",
            "matchCriteriaId" : "AE7271E4-4527-4ABF-9A2B-B619B153EDAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013370",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bemberg.de/server-side/index.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bemberg.de/server-side/index.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-05T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C496B665-70DA-4B98-A5D1-E2935C0CE840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34797660-41F5-4358-B70F-2A40DE48F182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C9E23D-AB82-4AE1-873E-C5493BB96AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4054D69F-596F-4EB4-BE9A-E2478343F55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA26ABBE-9973-45FA-9E9B-82170B751219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7891202C-62AF-4590-9E5F-3514FDA2B38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8F9B2F-E898-4F87-A245-32A41748587B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183667CA-6DF1-4BFB-AE32-9ABF55B7283A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDDEC3F-52EB-4E1E-84C4-B472600059EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314BA420-4C74-4060-8ACE-D7A7C041CF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAD7613-A5B3-4621-B981-290C7C6B8BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE38C50A-81FE-412E-9717-3672FAE6A6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A3F7B6-2878-40C0-B59C-EBA8D171D2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263F3734-7076-4EA8-B4C0-F37CFC4E979E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0419DD66-FF66-48BC-AD3B-F6AFD0551E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B982342C-1981-4C55-8044-AFE4D87623DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E02BE6-4800-4940-B269-385B66AC5077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB09993-B837-4352-B09D-3656F62638A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0361EA35-FBD7-4E8F-8625-C8100ED7BB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "29EAA113-2404-4ABB-826B-3AA2AA858D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A585A1-FF82-418F-90F8-072458DB7816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F7EB61-55A5-4776-B0E7-3508920A6CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "A442DE97-4485-4D95-B95D-58947585E455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE31DFF8-06AB-489D-A0C5-509C090283B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8A6564-129A-4555-A5ED-6F65C56AE7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "237174A4-E030-4A0B-AD0B-5C463603EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF49BF03-C25E-4737-84D5-892895C86C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7F8F11-1869-40E2-8478-28B4E946D3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2019E0E-426B-43AF-8904-1B811AE171E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "9062BAB5-D437-49BE-A384-39F62434B70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1504C-14FE-4C21-A801-944041F2946F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "6E53C673-9D6D-42C8-A502-033E1FC28D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5FC1A-1253-4390-A4FC-573BB14EA937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4AC452-6042-409D-8673-ACAD108EE3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE1009B-371A-48E2-A456-935A1F0B7D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C844A170-B5A7-4703-AF3B-67366D44EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44308D13-D935-4FF8-AB52-F0E115ED1AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3D41CB12-7894-4D25-80EC-23C56171D973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD9C12-EDAB-473F-9CC5-04F06B413720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "09789843-6A1A-4CDB-97E8-89E82B79DDB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*",
            "matchCriteriaId" : "118211EF-CED7-4EB5-9669-F54C8169D4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*",
            "matchCriteriaId" : "58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "9A405AE2-ECC4-4BB0-80DD-4736394FB217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*",
            "matchCriteriaId" : "E5612FB0-8403-4A7E-B89A-D7BDFAC00078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*",
            "matchCriteriaId" : "FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "AFDA151E-E614-4A24-A34D-B6D5309110CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "09BFA20B-2F31-4246-8F74-63DF1DB884EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3B4BA2-8A61-4F9A-8E46-7FA80E7F5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE93D3D-34B4-47B7-A784-61F4479FF5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*",
            "matchCriteriaId" : "6E21E50A-A368-4487-A791-87366CC5C86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "43E84296-9B5C-4623-A2C4-431D76FC2765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*",
            "matchCriteriaId" : "E18328E2-3CB5-4D36-8EA3-77DD909B46A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "EF73D76B-FBB8-4D10-8393-9FAF53392A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "F177AE1C-58C2-4575-807C-ABFFC5119FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A612F6-E4EB-4E34-8F55-79E16C74758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "5C19B266-8FE7-49ED-8678-2D522257491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "15C4D826-A419-45F5-B91C-1445DB480916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9F2B04-A1F2-4788-A53D-C8274A758DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5309ED-D84F-4F52-9864-5B0FEEEE5022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BC012-ADE4-468F-9A25-261CD8055694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "409E324A-C040-494F-A026-9DCAE01C07F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
            "matchCriteriaId" : "6474B775-C893-491F-A074-802AFB1FEDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D76A8D-832B-411E-A458-186733C66010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E12F60-B4AF-4EF1-A4AA-5E9F0B8B0690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.3_up:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D953B3BB-F054-4FE9-839E-2D8EC5C7973A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059218D3-A3AD-4A10-9AA4-FBB689321D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3F305CBD-4329-44DE-A85C-DE9FF371425E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "6E94583A-5184-462E-9FC4-57B35DA06DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E905FAAD-37B6-4DD0-A752-2974F8336273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "3BD12488-1ED8-4751-ABF5-3578D54750A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "AE3733CF-4C88-443C-9B90-6477C9C500D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9C500A75-D75E-45B4-B582-0F0DF27C3C04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.24/SCOSA-2005.24.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=freebsd-hackers&m=110994026421858&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=freebsd-security&m=110994370429609&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=openbsd-misc&m=110995101417256&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/15348",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://secunia.com/advisories/18165",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://securitytracker.com/id?1013967",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101739-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.daemonology.net/hyperthreading-considered-harmful/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.daemonology.net/papers/htt.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/911878",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-476.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-800.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12724",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0540",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3002",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9747",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.24/SCOSA-2005.24.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=freebsd-hackers&m=110994026421858&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=freebsd-security&m=110994370429609&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=openbsd-misc&m=110995101417256&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/15348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://secunia.com/advisories/18165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://securitytracker.com/id?1013967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101739-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.daemonology.net/hyperthreading-considered-harmful/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.daemonology.net/papers/htt.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/911878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-476.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-800.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-05T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the \"Land\" vulnerability (CVE-1999-0016)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111005099504081&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111005099504081&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-06T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nokia Symbian 60 allows remote attackers to cause a denial of service (phone restart) via a Bluetooth nickname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:series:60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF15AA07-5AFB-4712-A4DD-B4F01F096D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5PP0V00G1S.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5PP0V00G1S.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-06T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6152DF4C-DE31-4724-BEFF-1F5081D044F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD231A8-E9B7-4B1C-A9FD-0448D51FC99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07E038B-91DB-4539-95D8-55F0A50AEDE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83541",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14487",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-12.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-06T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in article mode for modules.php in SocialMPN allows remote attackers to execute arbitrary PHP code by modifying the name parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socialmpn:socialmpn:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B246A17-0163-41D2-9136-0CDAF295860B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socialmpn:socialmpn:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF906B7E-59B2-4FA7-A823-719891A7FCFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socialmpn:socialmpn:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153AB98F-DE3E-4BBF-BC76-92AA08C64EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socialmpn:socialmpn:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F18212-3EA6-454E-A490-52C941E248B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socialmpn:socialmpn:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "238D3463-6F6E-4DC8-B4ED-91525457A54D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111022633903239&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://waraxe.us/ftopic-542-0-days0-orderasc-.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111022633903239&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://waraxe.us/ftopic-542-0-days0-orderasc-.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-06T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1040A11C-5F39-4045-9E7B-A9FFC0D119ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111022851900028&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14492",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111022851900028&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service (kernel crash) via a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4041e2bfbeOiXFga62XrBhzm7Kv9QDmQ",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846102231365&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4041e2bfbeOiXFga62XrBhzm7Kv9QDmQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846102231365&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) and possibly access portions of kernel memory, related to TTY changes, locking, and semaphores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netkit:linux_netkit:0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965ABB1F-BCD2-40F9-8029-3FE6785875A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netkit:linux_netkit:0.17.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CBF543-23BC-4CFD-893E-8AD446239F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vserver:linux-vserver:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4697C1-A42F-4361-B551-1829CDA8BB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vserver:linux-vserver:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "986B4DA4-1C72-4BE1-9D41-0C1A6B908C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vserver:linux-vserver:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A730470-F8A0-44A8-A228-935A7C8217D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vserver:linux-vserver:1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291CEFF8-B1B5-4124-962D-B328AC862DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vserver:linux-vserver:1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E86CE0-63D7-4BAC-AA82-90966A6898D3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6909B816-6778-48A8-A828-CA0AC5484388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B988FF88-E782-4581-9E24-CDE7E1734258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9C11B5-5D63-4D2B-AD9A-5E657A8E1D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24BEDA8-2D1D-4AA1-8806-02838FB4C323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAAF0A4-F1B1-4597-B9C1-E7F277061BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE95DD29-6E5F-475B-BCB3-6F756C62FA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A5A944-8CFC-40ED-96D1-842ECA7316B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BF38E2-7353-4A55-ABA3-84085BB5F8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5C94F0-2390-4AF3-BE18-D00B10A67052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18C6032-012A-4B09-8D16-680CA3080D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134ED367-9610-485D-8935-3C46BFC073AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C150050C-6C08-4434-848D-EB71741DF29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D41FAC-B0CD-48DE-AA43-27487FF9E424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9CC013-D4FB-4EC0-B405-6B79DF7C2F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235B7E7D-3785-408A-AE53-7EB4F88F06C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A12556-5E7D-4832-A71A-66E6E9C2A710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9B296A-126A-42E3-B3DD-158F895A48EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC75E5B-48A5-4C28-88B2-870C62DDA337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D2EFF1-78E4-4002-8904-9DA13D7D1DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E02E89-832D-44D9-B2EE-1C070E99AE9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B55CD0D-0117-48F3-8643-4C191716AE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BA4C24-FD29-421C-8F01-1798764C53F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726B962B-D8B6-419E-BC0D-3DD9821234F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985C2754-56B1-4638-B51E-313F7B8BA65F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746D0402-66BD-4225-B847-6762BC4DC18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E657F58A-440D-40CB-97BF-ACB72AB36A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5E6A99-20FD-456C-A5E2-FEBA5DD672ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7699FD2E-C211-4E7E-BCA5-B991FBA90EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B921F-B152-49F3-9AAD-9421F5867F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46381F67-EC99-4EA7-9599-BD4A25827E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AC849E-7D4E-4C00-8BD0-672F413A80B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6996F1F1-5374-4BD2-B421-ABB15C7C0B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E18AFD-5090-4C1F-A2EE-A32A28DB5182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC91B71A-2456-4410-9633-CF5870027D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92555500-16EB-4F76-B2C7-61A00A1AC722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D22C9-94C6-4AC5-AAD0-15F06BCC5CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541B4ED8-E970-4C67-B5AF-7DE5B7F754D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E55F8A8-1ABD-4760-9074-353BBAEE005B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F873503F-C6E2-4AC2-859E-9431FE0FA0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E849AC-B85A-4C4F-878B-E95A5F661E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E4A2912-12AC-4DF1-8023-A0B7DBE9A866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.1.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15004105-9A55-4592-96D6-3FF539EC7513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146F7A77-A950-4CAD-BDA9-C239696F569D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DCE8FF-40C3-44F7-8185-0422ADDA051B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAC3A7C-2092-46D4-908B-CF03F4217112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F3945-21ED-44C6-86D2-B7755A87014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DDB008-E88E-473C-B030-AF9B6F5E4E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEF4480-D50B-464C-AE39-A12455DBC99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15928E10-7D41-45B2-87D6-8AA10190A8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E13C4-F42D-4168-B25E-544E1549C46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4B2ABB-0283-4532-9E29-B37BFF5FDFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DADA29-DCD3-44C4-9BDB-B881D6FCE3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD794C6-11F5-4A2B-9A3C-E03069A1526B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4947CDE-CB89-456B-8B5F-0E17B46BC893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF701E58-35E8-4DDE-B832-C5A23E61A3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2498D898-D243-4D0C-9AEF-0138D19A68B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3924060B-1EC1-4003-B306-E327634E7797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D45B43DF-FD4C-4C37-9569-1CCE450B8987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99879B2B-7FFB-4181-8928-13B7E17F36C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A3E250-5BC6-4AD3-A3DE-7F876FD90BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B10DC6E8-1A85-4F3B-88C9-0425782010A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC74D465-3256-4D87-8F47-C4D7CEA6E2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4817429F-B24F-47E3-BB3B-7EF9036D5F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "1760ADC9-78A1-4133-9720-5319A4CF1DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "28ECE0D4-624D-4804-8013-DBA9BAF659ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "3C115333-E386-4B4D-91C6-69ECE55666F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D62621-2C12-40F0-8726-E48926E4DA44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "614F1C35-94B2-4A86-AEB4-55C774445E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "ECDD69D6-F79F-4F0E-BA3D-E721A1885A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCD388A-1E43-492E-8EEC-4E14EDD7AB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "74F962BE-2187-4C8F-BAE7-EFA3D79FCB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F04081-D672-488E-A91D-5088DD04AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB59EF-74EF-462E-BC84-89201F734380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0755A136-3DE3-4B61-B5EF-F6282AACD38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D950C3-0DDC-4549-99F8-1E206768219A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195A133A-26C9-401E-913F-285BA220D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D68E21-6C58-46A7-96F2-9A79DD880803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D11B12-AFD7-4055-A366-D932CA1BA8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC990132-9DF2-4D23-B9DA-0819809A3CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA51D40-E72C-40A4-B238-70F6806FA1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1B7D68-E41E-4A5A-9606-F14F057B39E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BCB10C-FD72-4F18-84C9-AE0603402426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF742FF1-5504-41BB-8FAA-D71B83C791B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C6D04-3226-4654-9A41-0325B48A2F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072A77AD-BB27-4C24-91A0-A12D6E741593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF900D1D-E351-4407-8269-80E5403432B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44915F9F-88DF-4304-8F66-58A869654BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC2D90D-2115-406C-B609-870B241F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF681CC1-B3EC-467A-A10D-10840D3D4575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8660C030-328E-4221-847E-AC4BDA08CE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47AEC277-F9A4-412F-B2EA-C1AEA336A46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7234AF29-BCDA-4728-A141-C169EE59CEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374851C5-C61D-4964-8B4A-473B0A008F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD55C81-3687-46BF-880E-58D7E005A185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2953267F-16BF-404F-83F1-73E0908979B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D953B61-3457-4A0E-A668-BA4937B79784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5F3607-C0DD-494C-AB6E-46E383A6B17D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19138F52-25EA-42B6-89DC-692A8AF0A720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2EBADC-0817-4E38-9F49-8446D8A20CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340368E7-0005-4F8A-8AF1-C20A1198288C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC860DD-57DF-4474-AE2B-9AADB9060175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1D576A-0763-4611-B3CF-CD8514F18783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F570226-CA89-46F4-8C68-9A59BC0602A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162A88DA-E2EA-4E92-B174-9AD86BE8D983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE5C4F5-C64D-4714-B02E-689B435E3E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164F4483-9F28-491A-8F99-4242C9B9CBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34803A7D-45C4-4DBE-BF18-19CE9DE62A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1178D6EE-A462-4CC1-B430-9A44C75D2336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4360530E-6E07-48F9-B8F8-B36622331052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17508D09-AE14-4458-93A2-E2764452EA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F2CD4A-CCA9-4743-86C4-7675D2487E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C1504C-03C5-49E4-8192-E1E698CF07A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3172A-E663-42F6-90E7-51C3850AF9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F6692C-494F-44ED-97C6-A6CD05334DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77231F8B-137F-4FAE-BCD9-658F32943CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552ED77A-F09A-4923-A907-8E0DF8445363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF940EA-676A-42C8-A6E0-7F53C8A34340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DCCFB1-054F-4BF0-92F1-78A2063415D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D3222C-7469-42F6-984D-3223BCD8080E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697B7069-D08D-41BD-8285-A1ABA0E1142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72173CFB-BAB6-456C-B5F2-3AA31D799E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD08A67-195F-431B-98A5-42B2966055DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658C7317-D50B-475A-9E0E-E68AECD49B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1270F454-8E05-413C-BAF4-35D062CA5803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4041ddda70CWJb5nNL71T4MOlG2sMG8A",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846102231365&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4041ddda70CWJb5nNL71T4MOlG2sMG8A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846102231365&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.4.x and 2.6.x allows local users to cause a denial of service (CPU and memory consumption) and bypass RLIM_MEMLOCK limits via the mlockall call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "74F962BE-2187-4C8F-BAE7-EFA3D79FCB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copy_from_user and copy_to_user functions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/386374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/386374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solaris_answerbook2:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15100B7C-A9EE-46DF-B12B-723570D0A7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solaris_answerbook2:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70C7D11-5DEA-473C-AB5A-C3676EAAE668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solaris_answerbook2:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09366485-E68C-4E5B-8C76-FD6D8CD48B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solaris_answerbook2:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E03C0EB-3336-4CF9-8088-CD90E768B1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solaris_answerbook2:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D613BAC-1341-4B6D-971A-9CB9FE4342EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solaris_answerbook2:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055AAFC3-DE75-4D03-B9E4-DF34FC39BC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solaris_answerbook2:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784439BF-79DC-41AE-8F0B-7B8383C845B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111205163531628&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57737-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000230.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111205163531628&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57737-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000230.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7919D2-ACA7-4BFF-8D86-C63F76C09B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAAF875-EBB8-4B6C-99CD-503AFAD5633B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E0580E-1F1C-4FF1-80AB-4151CFF6C880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48AA3783-5007-4869-A699-36E1888C16F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49731BBA-CC20-4DA2-9A0B-50E4F3CC0A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49389889-7C64-42FA-A212-6B892C011441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3818AFD5-5667-490A-A6F6-7DC525D56DCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0559156E-5339-4344-AE50-ECB5604E9A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F67B0E-24D6-4B37-93B0-177A1F4D7102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE43A4BB-E5FC-41CF-A4F7-A83FBB3AFD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4560B68F-9247-4057-802F-D15AFDFA10A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81DE243-D5C4-4EF3-B29D-7BBACE42F5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30CA4A62-79A8-4739-A76E-3DA3688C107C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DDA2A6C-76B4-4323-9AD3-8C30A9013EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed-claws:sylpheed-claws:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB139F9D-F308-40B2-9ECA-435216309D3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*",
            "matchCriteriaId" : "64BE98C2-8EFA-4349-9FE2-D62CA63A16C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*",
            "matchCriteriaId" : "7D0AC3A3-A37C-4053-B05F-A031877AC811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "409E324A-C040-494F-A026-9DCAE01C07F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
            "matchCriteriaId" : "6474B775-C893-491F-A074-802AFB1FEDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "84A50ED3-FD0D-4038-B3E7-CC65D166C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*",
            "matchCriteriaId" : "777F9EC0-2919-45CA-BFF8-78A02537C513"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14491",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sylpheed.good-day.net/changelog-devel.html.en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sylpheed.good-day.net/changelog.html.en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-26.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-303.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sylpheed.good-day.net/changelog-devel.html.en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sylpheed.good-day.net/changelog.html.en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-26.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:stadtaus:download_center_lite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "BA65B993-6B24-4865-B850-CB52B05FD6B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110996056601719&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14513",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.stadtaus.com/forum/p-5895.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.stadtaus.com/forum/t-1579.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110996056601719&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.stadtaus.com/forum/p-5895.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.stadtaus.com/forum/t-1579.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlterm:mlterm:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C46C84-382C-4DC0-AC04-AD6BE87D266F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlterm:mlterm:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05043153-6007-42D1-BA77-817EBE8B608A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlterm:mlterm:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFA89FE-2CF3-474D-8C21-0527E980369B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlterm:mlterm:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A873E53-3E5A-4699-B2F0-6FC171985BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlterm:mlterm:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643DE058-A3E0-4B40-8C5F-8100019A27AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlterm:mlterm:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C75BFAF-E889-4F6B-BC00-38B207EE7FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlterm:mlterm:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A4B9CC-67CF-4122-825C-BB5B1EAD92C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlterm:mlterm:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F85535-9B57-4704-8D2B-DA89693DEE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlterm:mlterm:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE0BF09-7311-4952-88DC-490DA8E32A37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-13.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://sourceforge.net/project/shownotes.php?release_id=310416",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://sourceforge.net/project/shownotes.php?release_id=310416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the URL or (2) the template parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jimmy:the_includer:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87018335-0DC8-4AE0-A177-6A2AF38198E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jimmy:the_includer:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5B3A7C-A574-4294-9CB3-290403AD6C5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111021730710779&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111030957413411&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12738",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111021730710779&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111030957413411&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the server configuration and gain privileges, as demonstrated by defining a SITE command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gene6:g6_ftp_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A93EE9-255E-499A-ABED-E9E94409AB39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gene6:g6_ftp_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD6387D-6BB2-4F33-A9AA-C1E0F5D92DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gene6:g6_ftp_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C64D9A-83AA-4853-9728-CD64FFEB07C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gene6:g6_ftp_server:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC615424-98F7-4D59-AAE5-AD9E2AF21FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gene6:g6_ftp_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58EE28D4-0BE0-4255-9430-8E94DF6A8107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gene6:g6_ftp_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5924EA37-A97A-499E-8199-77557BE0156C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gene6:g6_ftp_server:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CF0A0A-9E2F-4C8D-8C52-AD6476BCD3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gene6:g6_ftp_server:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9663DF-C2D9-47CE-8912-FDB3F4BE8CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gene6:g6_ftp_server:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DC952D-2D36-498E-94F9-8AC9AE16D291"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111022496826680&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111026585431080&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14436",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secway.org/Advisory/ad20050303.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12739",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111022496826680&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111026585431080&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secway.org/Advisory/ad20050303.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service (client or server crash) and execute arbitrary code via a long nickname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jowood_productions:chaser:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C171FB0-E4D2-480E-B0A9-E7F807628668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jowood_productions:chaser:1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C5A7EA-25B2-4F17-8934-721D905E41F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/chasercool-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12733",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/chasercool-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94170D21-1196-4BA2-AEB9-C28A4F08B05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3364FE23-345B-428B-BF18-A0AE4D23B03B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E9E17B-92A3-434F-B238-8B403BE4F539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1220294A-27FC-4D1C-BFA8-2B7189E04469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD6BB80-8513-4294-8A81-FE8B11FA8BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DDFC8A-C341-4137-AF44-F93E814E218B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDE7F42-4372-440E-9E8A-D4B123EB9045"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isun.shabgard.org/hc2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111026083314947&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://isun.shabgard.org/hc2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111026083314947&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the \"login ID\" field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94170D21-1196-4BA2-AEB9-C28A4F08B05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3364FE23-345B-428B-BF18-A0AE4D23B03B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E9E17B-92A3-434F-B238-8B403BE4F539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1220294A-27FC-4D1C-BFA8-2B7189E04469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD6BB80-8513-4294-8A81-FE8B11FA8BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DDFC8A-C341-4137-AF44-F93E814E218B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDE7F42-4372-440E-9E8A-D4B123EB9045"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isun.shabgard.org/hc2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111026083314947&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://isun.shabgard.org/hc2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111026083314947&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the process_picture function xp_publish.php in CopperExport 0.2.1 allows remote attackers to execute arbitrary SQL commands, possibly via the (1) title, (2) caption, or (3) keywords parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brt:copperexport:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13375113-015F-4F6C-BE3D-16CBE32D4EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brt:copperexport:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6876B5-243D-4CE9-B9DC-0234DB099C6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14401",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zzamboni.org/copperexport/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zzamboni.org/copperexport/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) G_PATH parameter to init.inc.php or the (2) PATH parameter to index.php to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_hines:phpweblog:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1688D63-EC3D-42EF-B2C7-3CD18D54CA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_hines:phpweblog:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C438A6-0637-4EE9-9C06-9DBE9D84CA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_hines:phpweblog:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA3E8F1-54B9-412F-8245-5666131B3E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_hines:phpweblog:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC45ADD-43C3-4375-9FCD-F5DF9205BB6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_hines:phpweblog:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2633ECDF-664B-4DD1-AD3B-A702E412A6FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/392552",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12747",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATK_ADMIN cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aztek_forum:aztek_forum:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91FDD-2582-4E67-BAA6-4B4EA4114E02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.frsirt.com/exploits/20050307.aztek.c.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12745",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.frsirt.com/exploits/20050307.aztek.c.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via \"\\\\.\\\\..\"  (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A77562B-D1A5-450D-9288-3FC7145E9292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032273.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111023635928211&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.argeniss.com/research/ARGENISS-ADV-030501.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032273.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111023635928211&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.argeniss.com/research/ARGENISS-ADV-030501.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D2E1DC-EA41-4819-B700-78546932755C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.4_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B69808-C3F4-401E-996D-88091203698E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.4_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39CA9672-6651-4654-89AB-AF45A3EB2492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E47EB76A-2314-4978-A146-C6C73CF018C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BCB304A-9B0D-4C9F-80FA-5BEDB9753A45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14516",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyfaq.de/advisory_2005-03-06.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyfaq.de/advisory_2005-03-06.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, has an \"unauthenticated account,\" which allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-1179."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_165:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "EB8BFE49-7606-4A8F-8A60-809DE7212999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_165:7.47.30.000:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "665F5E03-4D1A-4F4C-B05D-633770060CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_165:7.47.33.008:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "7FB37123-D747-4F5B-9098-A5B91DF50BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_175:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "78C30A0A-0936-436C-8AB4-E691040D96F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_175:7.47.30.000:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "7A69E610-69B3-473B-AE11-6AA61612BB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_175:7.47.33.008:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "5866F38D-9CCB-4C8C-B6CB-79CD6D5F399B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2128:*:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "EB422F5E-4558-4E12-AF62-C46F672C1161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2128:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "EA305D4F-4307-4043-A749-B6BA0B8A8492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2636:*:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "24FFA00C-9F04-466B-909C-E09E6B05F77B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2636:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "89D31C14-FC15-456F-A5A3-3DD081C87CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_32_color:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "E52704B0-4819-4B79-AB57-C655EB11DF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_32_color:0.001.00.060:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "B1EBBEB0-8E03-4117-8997-B3BBD08C4678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_32_color:0.001.02.081:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "747E83A4-2828-4267-BA55-EF130F474BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_35:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "B329E212-F74E-4621-A556-D52344528DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_35:3.028.11.000:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "6FAB36E8-E1F6-4B42-9482-477E2D57E6C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_35:3.97.20.032:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "E23C7444-0B9F-4701-8C0E-0B6D71EEC9CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_3545:*:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "911378EC-F92E-469C-8F8A-109680E57BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_3545:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "4FE28C1C-E8D2-4161-B441-26A70E6C9A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_40_color:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "361B802A-7B81-42E2-97D3-AE8D6EB699B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_40_color:0.001.00.060:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "FBF74274-3877-4C9C-8DD8-004A9CC85ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_40_color:0.001.02.081:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "1B456444-625C-4443-B27C-5C473A2555E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_45:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "8CDF7605-0018-49D4-AFFE-3A41524A5A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_45:3.028.11.000:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "BA1F488B-E149-4A00-98DB-7ABD3FF16D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_45:3.97.20.032:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "71D56AEA-2154-4A52-8401-69C5929BCB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_55:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "99C9BDA1-5B47-4165-9B7A-2B25C9152355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_55:3.028.11.000:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "D48E8756-C3B3-47A5-A7A6-606150B4EE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_55:3.97.20.032:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "D3D9C688-7F13-4B9A-83C4-198516C61C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_65:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "564E2146-07E5-42FF-AFF4-AA30590CB42C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_65:1.001.00.060:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "9047BA7F-AC2A-4B39-98C3-203A9DCC8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_65:1.001.02.084:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A50469C9-B15C-4809-B7D5-5F859F1A3FFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_75:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "72ABAD2F-270B-4A6C-BAD0-6F8C99CB142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_75:1.001.00.060:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "128FA7C0-FE3D-4A66-A1EF-B7415BA619D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_75:1.001.02.084:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "7308C737-0B78-4AE7-B11D-B95469B46987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_90:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "04CC813E-F57F-47B8-ADF5-20E431EDAEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_90:1.001.00.060:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "59BA012E-9CB1-47FA-AC8A-B67DF9F42C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_90:1.001.02.084:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "6B33E637-C658-4F5D-B2A3-97189FC5DE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m165:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D82162-B6B2-45B0-9CEA-FFDCFFF924F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m165:6.47.30.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EDDC23-7865-43BA-8EB5-178F1AA46542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m165:6.47.33.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3458D869-B7FB-49ED-9555-51541658815E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m165:8.47.30.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B6F9EB-3150-4D4D-8E09-5D7AD7CC6AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m165:8.47.33.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06114132-3911-49EA-92EA-09E6566A58A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m175:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44117525-B9A5-403E-9700-FD9647238497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m175:6.47.30.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724C0CB0-E3AA-4C45-9C63-B8A7AC2E00EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m175:6.47.33.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6B9223-1B84-45B2-9C19-0C45EF3F3013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m175:8.47.30.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B71EBA-A5F2-4CA6-89B4-03A7DACA58F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m175:8.47.33.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "372C429C-0344-411E-9C1E-813C235F25BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m35:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460F31A6-7D06-4914-BE7A-4D8070BDEA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m35:2.28.11.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCE1756-7C2B-45F8-921E-BDD194FDCCEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m35:2.97.20.032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C02A9E7E-3955-46FB-AA84-28291DA9B16D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m35:4.84.16.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACAE4E5-E2DC-414B-A7BF-41ED3C79EF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m45:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061425F7-B3EB-4CB5-980E-5CC372DBAA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m45:2.28.11.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E8092-F39E-4936-8871-04A46131A70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m45:2.97.20.032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10D1EC6-525A-42B4-8C33-B9BC69965FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m45:4.84.16.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA7E00A-669E-4BE3-8699-CDE44B88A168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m55:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9C5F78-A4A7-4719-939E-D8217EB1B3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m55:2.28.11.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C20ED6-45DD-4C76-A41C-2F27C50E9CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m55:2.97.20.032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01413B3-6DB1-446E-BD13-756501F83550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m55:4.84.16.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BCE475-2042-4B90-A38C-65D90EE00980"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14507",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-07T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php without any parameters, which leaks the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:experience2:experience2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB3E463-D3AA-440D-AF16-1AF304219589"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111030766324600&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111030766324600&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the SDL port of abuse (abuse-SDL) before 2.00 allow local users to execute arbitrary code via the command line."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abuse:abuse-sdl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "0C77621D-A7C2-4404-8121-9D63A571C5B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14495",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-691",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abuse:abuse-sdl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "0C77621D-A7C2-4404-8121-9D63A571C5B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14495",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-691",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0626",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-03-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-415.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-setcookie",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19581",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/93-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-415.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-setcookie",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/93-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to (1) browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, (2) rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, (3) delete arbitrary directory objects by modifying the selectedObjectsCSV parameter to displaydeletenavigator.jsp, and conduct other unauthorized activities via the (4) showDeleteView, (5) showWebFolderView, (6) showLibraryView, (7) showMyLibraryView, (8) singleSelectObject, (9) processRadioSelection, (10) processCheckboxSelection, (11) singleSelectObject, (12) addToSelectedObjects, or (13) removeFromSelectedObjects commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outstart:participate_enterprise:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CEABE2D-A476-4AB8-B88F-39B15BCB0EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14542",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.honour.ca/outstartpsi.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392623",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12752",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.honour.ca/outstartpsi.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. NOTE: this issue was later reported to also affect 1.4.3.5."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19774B84-7368-4568-8E92-ECD8F19FC2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2383B139-13E2-416B-9E2E-4D945635CE93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DFB123-9769-4A4B-9BCA-29195F5B1A5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042523.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14526",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392653",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426081/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12755",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.securinfos.info/english/security-advisories-alerts/20060225_ArGoSoft.FTP.Server_Heap.Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042523.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426081/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.securinfos.info/english/security-advisories-alerts/20060225_ArGoSoft.FTP.Server_Heap.Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4007B0D-9606-46BD-866A-7911BEA292BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:compact_2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6FD322-2883-407F-A694-7B0B49D81E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:junior_2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3753D1E6-7AB6-46FB-B652-856D137E43C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "409E324A-C040-494F-A026-9DCAE01C07F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
            "matchCriteriaId" : "6474B775-C893-491F-A074-802AFB1FEDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "84A50ED3-FD0D-4038-B3E7-CC65D166C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*",
            "matchCriteriaId" : "777F9EC0-2919-45CA-BFF8-78A02537C513"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111038641832400&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111083125521813&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-16.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-03-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392659",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12759",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111038641832400&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111083125521813&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-03-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitrary PHP code by modifying the skinfile parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcnews:mcnews:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A2A23F4-28BB-4806-8242-AF5D1FDA3AE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111025679324892&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14528",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/476277/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111025679324892&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/476277/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameters, which is not properly cleansed in the $pageurl variable, as demonstrated using pafiledb.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EB588E-FC2B-4E10-86F5-33C2758BEED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111031801802851&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111031801802851&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wf-sections:wf-sections:1.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75069F8B-B252-40B2-8342-67F75B785F3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111049618519821&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111049618519821&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BC5B30-B6D7-4694-9DFB-7F96528C5855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12756",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-08T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:applyyourself:i-class:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40982430-58AE-4CD4-9345-0F94F31693B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013400",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-09T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service (process crash) for processes such as nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, srconfig, strsetup, trpt, netstat, and xntpd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:4.0f:pk8:*:*:*:*:*:*",
            "matchCriteriaId" : "884D55C0-F5EB-484E-8886-1C6C12320BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:4.0g:pk4:*:*:*:*:*:*",
            "matchCriteriaId" : "5A788DB8-B738-4498-9C0B-68FCB92086F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1a:pk6:*:*:*:*:*:*",
            "matchCriteriaId" : "BA274FCB-748E-4EEB-9C77-DD5DF1ABB303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1b1:pk3:*:*:*:*:*:*",
            "matchCriteriaId" : "47DCD48A-9AA2-4F94-9B63-CFF515452650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1b1:pk4:*:*:*:*:*:*",
            "matchCriteriaId" : "B1EFE691-90F1-40A8-BB83-BB5D9BADA584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111040492127482&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111040492127482&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14549/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12768",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111040492127482&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111040492127482&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14549/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-09T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6996B14-925B-46B8-982F-3545328B506B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html%7CChangeSet%40-1d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032314.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12763",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/95-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html%7CChangeSet%40-1d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032314.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/95-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-09T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing \"*#26845#\" and causing a device reset."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:utstarcom:ian-02ex_voip_ata:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7357C35-1295-4BE2-B0D3-1048C6C49495"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0168.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14544",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0168.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-10T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to Filelist.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:py_software:active_webcam:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94A5FAD-70F3-46A4-8B23-0EB8259414E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14553",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secway.org/advisory/ad20050104.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secway.org/advisory/ad20050104.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-10T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PHP code by modifying the absolute_path parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webinsta:webinsta_mailing_manager:1.3d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5C0D7F-6450-407E-AA8A-DCEC38AC6C37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14550",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013409",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12773",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0248",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-10T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary SQL commands via the uid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604A06DE-F946-42A0-8629-B87E7D6E9A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14576",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-12T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-12T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, (6) license.php, (7) custom.php, (8) admins.php, or (9) backupdb.php, which reveal the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BADFC3-51C0-4881-B5DF-81BBA02F0EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4CCDF7-5945-4478-9661-217F823DE9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC5717A-E248-406F-A281-C5B2F5368127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.0_beta_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E807335-6C70-4A19-A692-A7DE325FC213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EB588E-FC2B-4E10-86F5-33C2758BEED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111066293914977&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111066293914977&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete (unlink) arbitrary files via \"/../\" sequences in the avatarselect parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=205&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpbb.com/support/documents.php?mode=changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=205&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpbb.com/support/documents.php?mode=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the \"Upload Avatar from a URL:\" field to reference the target file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14362/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=204&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/774686",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.phpbb.com/support/documents.php?mode=changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14362/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=204&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/774686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.phpbb.com/support/documents.php?mode=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0398",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB016E3-49FE-4ADF-8D4A-479D0D1C5AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5630CFB-58BF-4B58-90AB-B44793D91FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2003-07-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F311F249-417C-4514-A144-E21A57078574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2004-04-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1BA7DD-5218-41A0-9D5F-79A45D22A2A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2004-04-07b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E51298-8789-44B0-B64F-6D8D90034404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2004-05-03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75ABB0EA-A057-486E-BD66-3378B28545BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2005-01-03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA01A84-6D57-4EC1-8E8B-29989E786101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2005-01-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44076976-AF46-4181-93B6-F85982185A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2005-01-17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE031420-9E80-48FC-BB65-92D890A7F688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2005-01-24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C34FC11-088E-408D-98B1-DA6F61547FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2005-01-31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF541C23-0158-45FE-8F8C-C353874E0090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2005-02-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B37581BA-4F83-4940-8EF4-91575BF37B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2005-02-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C044E7C0-F7DF-476D-B58A-9C5493F03BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2005-02-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52DAA449-31DC-49F0-83AF-15AA8C318585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2005-02-28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0298AF2-5267-4EE6-B2C4-9C53C3E89A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kame:racoon:2005-03-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE6D48A-FCF8-4DE1-A2E8-A163D3219827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC217F-C257-4A3C-9CBD-08010C30BEC3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*",
            "matchCriteriaId" : "64BE98C2-8EFA-4349-9FE2-D62CA63A16C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*",
            "matchCriteriaId" : "7D0AC3A3-A37C-4053-B05F-A031877AC811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*",
            "matchCriteriaId" : "81B543F9-C209-46C2-B0AE-E14818A6992E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "DB89C970-DE94-4E09-A90A-077DB83AD156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:*:*:desktop:*:*:*:*:*",
            "matchCriteriaId" : "81E1499C-E73C-4630-B45B-02C38B7AE90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:*:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "059EC93D-0F3F-4FC2-9878-0DB2756B951B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14584",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-33.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013433",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=6787713&forum_id=32000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:062",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-232.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12804",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0264",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=109966&action=view",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19707",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-33.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=6787713&forum_id=32000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-232.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=109966&action=view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault) via invalid EAPOL-Key packet data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0C69F9-128C-4A24-837B-C5705D62C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E366BD-B8C4-45AA-B965-5C5285035A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66093E96-081A-4C1C-9E67-3A579BE32D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2932035-67D8-48D6-B195-2A3485CF39E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85622267-568B-47D1-8440-92179792CD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EEC3C2-544C-46C3-B5EA-CBA5D4D62041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F79FF37-8F96-4C5C-905C-BA2604FBF275"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.shmoo.com/pipermail/hostap/2005-February/009465.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14313",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-22.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.shmoo.com/pipermail/hostap/2005-February/009465.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C1D605-1FE9-4F1A-A374-CC342CD7310C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF39BD92-7733-4408-A907-D292D973D9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA4DE59-4CF5-49F4-8625-0F3DA2DB7020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C9C594-3DBC-4706-BA88-A662CD28C830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC23BB12-3C36-46D9-9FB8-47D6DDB3D956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3144D692-96E3-477A-9383-D1880DCEDB2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB87D43-2860-43DD-94EE-886D7D75A351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73559DD-54B4-4DF2-81BC-9109DB29DCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/11070/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-7/advisory/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/544392",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/11070/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-7/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/544392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0472",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BC7CF5-118A-4127-BA07-749179FA5A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE70BCCA-A025-4F93-A773-8D4FF482540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2842937-2275-4C1C-85FE-9C1246B2A06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478EA6B8-99D9-4378-8839-AC85F281F630"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3528DABD-B821-4D23-AE12-614A9CA92C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9E661D58-18DF-4CCF-9892-F873618F4535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB0B27C-04EA-426F-9016-7406BACD91DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=10",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110935655500670&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14322",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/839280",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-215.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-432.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12589",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10433",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110935655500670&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/839280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-215.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-432.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0473",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes \"an invalid memory access,\" a different vulnerability than CVE-2005-0208."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BC7CF5-118A-4127-BA07-749179FA5A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE70BCCA-A025-4F93-A773-8D4FF482540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2842937-2275-4C1C-85FE-9C1246B2A06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478EA6B8-99D9-4378-8839-AC85F281F630"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3528DABD-B821-4D23-AE12-614A9CA92C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9E661D58-18DF-4CCF-9892-F873618F4535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB0B27C-04EA-426F-9016-7406BACD91DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=11",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110935655500670&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14322",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/523888",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-215.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12589",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19381",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10212",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110935655500670&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/523888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-215.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0504",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc7:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.21",
            "matchCriteriaId" : "14D781AD-0F7E-45B6-A553-884486F26E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146F7A77-A950-4CAD-BDA9-C239696F569D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DCE8FF-40C3-44F7-8185-0422ADDA051B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAC3A7C-2092-46D4-908B-CF03F4217112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F3945-21ED-44C6-86D2-B7755A87014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DDB008-E88E-473C-B030-AF9B6F5E4E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEF4480-D50B-464C-AE39-A12455DBC99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15928E10-7D41-45B2-87D6-8AA10190A8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E13C4-F42D-4168-B25E-544E1549C46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4B2ABB-0283-4532-9E29-B37BFF5FDFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DADA29-DCD3-44C4-9BDB-B881D6FCE3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD794C6-11F5-4A2B-9A3C-E03069A1526B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4947CDE-CB89-456B-8B5F-0E17B46BC893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF701E58-35E8-4DDE-B832-C5A23E61A3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2498D898-D243-4D0C-9AEF-0138D19A68B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3924060B-1EC1-4003-B306-E327634E7797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D45B43DF-FD4C-4C37-9569-1CCE450B8987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99879B2B-7FFB-4181-8928-13B7E17F36C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A3E250-5BC6-4AD3-A3DE-7F876FD90BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC74D465-3256-4D87-8F47-C4D7CEA6E2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4817429F-B24F-47E3-BB3B-7EF9036D5F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "1760ADC9-78A1-4133-9720-5319A4CF1DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "28ECE0D4-624D-4804-8013-DBA9BAF659ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "3C115333-E386-4B4D-91C6-69ECE55666F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D62621-2C12-40F0-8726-E48926E4DA44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "614F1C35-94B2-4A86-AEB4-55C774445E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "ECDD69D6-F79F-4F0E-BA3D-E721A1885A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCD388A-1E43-492E-8EEC-4E14EDD7AB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F04081-D672-488E-A91D-5088DD04AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB59EF-74EF-462E-BC84-89201F734380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0755A136-3DE3-4B61-B5EF-F6282AACD38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D950C3-0DDC-4549-99F8-1E206768219A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195A133A-26C9-401E-913F-285BA220D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D68E21-6C58-46A7-96F2-9A79DD880803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D11B12-AFD7-4055-A366-D932CA1BA8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC990132-9DF2-4D23-B9DA-0819809A3CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA51D40-E72C-40A4-B238-70F6806FA1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1B7D68-E41E-4A5A-9606-F14F057B39E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BCB10C-FD72-4F18-84C9-AE0603402426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF742FF1-5504-41BB-8FAA-D71B83C791B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C6D04-3226-4654-9A41-0325B48A2F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072A77AD-BB27-4C24-91A0-A12D6E741593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF900D1D-E351-4407-8269-80E5403432B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44915F9F-88DF-4304-8F66-58A869654BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC2D90D-2115-406C-B609-870B241F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF681CC1-B3EC-467A-A10D-10840D3D4575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8660C030-328E-4221-847E-AC4BDA08CE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47AEC277-F9A4-412F-B2EA-C1AEA336A46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7234AF29-BCDA-4728-A141-C169EE59CEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374851C5-C61D-4964-8B4A-473B0A008F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD55C81-3687-46BF-880E-58D7E005A185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2953267F-16BF-404F-83F1-73E0908979B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D953B61-3457-4A0E-A668-BA4937B79784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5F3607-C0DD-494C-AB6E-46E383A6B17D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19138F52-25EA-42B6-89DC-692A8AF0A720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2EBADC-0817-4E38-9F49-8446D8A20CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340368E7-0005-4F8A-8AF1-C20A1198288C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC860DD-57DF-4474-AE2B-9AADB9060175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1D576A-0763-4611-B3CF-CD8514F18783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F570226-CA89-46F4-8C68-9A59BC0602A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162A88DA-E2EA-4E92-B174-9AD86BE8D983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE5C4F5-C64D-4714-B02E-689B435E3E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164F4483-9F28-491A-8F99-4242C9B9CBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34803A7D-45C4-4DBE-BF18-19CE9DE62A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1178D6EE-A462-4CC1-B430-9A44C75D2336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4360530E-6E07-48F9-B8F8-B36622331052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17508D09-AE14-4458-93A2-E2764452EA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F2CD4A-CCA9-4743-86C4-7675D2487E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C1504C-03C5-49E4-8192-E1E698CF07A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3172A-E663-42F6-90E7-51C3850AF9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F6692C-494F-44ED-97C6-A6CD05334DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77231F8B-137F-4FAE-BCD9-658F32943CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552ED77A-F09A-4923-A907-8E0DF8445363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF940EA-676A-42C8-A6E0-7F53C8A34340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DCCFB1-054F-4BF0-92F1-78A2063415D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D3222C-7469-42F6-984D-3223BCD8080E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697B7069-D08D-41BD-8285-A1ABA0E1142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72173CFB-BAB6-456C-B5F2-3AA31D799E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD08A67-195F-431B-98A5-42B2966055DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658C7317-D50B-475A-9E0E-E68AECD49B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1270F454-8E05-413C-BAF4-35D062CA5803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26651",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30112",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1013273",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-529.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0237.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12195",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-508-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9770",
        "source" : "security@debian.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-529.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0237.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-508-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Information Resource Manager (IRM) before 1.5.2.1 allows remote attackers to have \"potentially serious\" impact, related to LDAP logins."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackworks_enterprises:information_resource_manager:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE162E1-5089-4336-B411-36754103F961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackworks_enterprises:information_resource_manager:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFD0561E-0536-4724-B7FE-226514CF59F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackworks_enterprises:information_resource_manager:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C049F92-9218-486A-8226-1310879C8B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackworks_enterprises:information_resource_manager:1.5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C858E4-BB12-4FC5-9F14-ED4B7709E1C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14342",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=306629",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=306629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\\IP400\\Generic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office_phone_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A58A88-F1B8-4E56-AE09-EE18FC862DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_soft_phone:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436FA15A-2A13-48A3-941E-4E751E99B0C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110909733831694&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110910486128709&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-041_Sensitive_Info_Leak.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110909733831694&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110910486128709&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-041_Sensitive_Info_Leak.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gd_software:sd_server:4.0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1DA688-9C64-46BD-8C94-2A917B94C784"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110910535122762&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110901639709476&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14365",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gdsoftware.dk/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110910535122762&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110901639709476&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gdsoftware.dk/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a \"script security issue.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:apache:batik:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4022792-F701-484C-AC7A-F4E8AAF086A5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:apache:batik:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87D00-0F3A-418B-B54A-EC1719ADDA6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:apache:batik:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39EC68C1-FA67-4CD5-80AB-C82B14952347"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:apache:batik:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30233EB2-4BB0-4EE5-B144-4770B61C61A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14336",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12619",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://xml.apache.org/batik/#SecurityWarning",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://xml.apache.org/batik/#SecurityWarning",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including \">\" and \"<\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "766661C0-6A35-4F62-8325-3840A75CF3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "603D5B6B-8BDE-491F-A60E-EFFDC9E0BA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0CBA3B-6BA9-443B-A40A-46CC1994748F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A927C9E-5CCC-4FC1-AE63-24B96A5FC51A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono:mono:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB77289-2AED-4BD4-9578-FEB0EC83701E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110867912714913&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14325",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110867912714913&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The daemon for fallback-reboot before 0.995 allows attackers to cause a denial of service (daemon exit), possibly related to verbose debug messages when the daemon is not on a tty."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fallback-reboot:fallback-reboot:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9645A032-7C66-45BE-BBE0-65D5C603A5A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dcs.nac.uci.edu/~strombrg/fallback-reboot/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dcs.nac.uci.edu/~strombrg/fallback-reboot/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simpgb:simpgb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BE0A4-CF17-490D-821C-41251D1F9A24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111082702422979&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14583",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12801",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111082702422979&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnutella GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limewire:limewire:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBACD0A2-9FCA-4547-AECD-C39062B101EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limewire:limewire:4.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5928E2B-0DD1-4B2D-B5F5-9C4D116E0755"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111082448213238&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14555/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-37.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111082448213238&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14555/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-37.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a magnet request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limewire:limewire:3.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5270EC45-B88A-4EEB-B1C8-75D4DC4CA2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limewire:limewire:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458FFFE-9D50-42D2-9475-A2601B41FE6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111082448213238&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14555/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-37.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111082448213238&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14555/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-37.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to (1) lib-xmlrpcs.inc.php, (2) maintenance-activation.php, (3) maintenance-cleantables.php, (4) maintenance-autotargeting.php, (5) maintenance-reports.php, (6) phpads.php, (7) remotehtmlview.php, (8) click.php, (9) adcontent.php, which reveal the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.4_pr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B033DF7-892C-4257-986E-E717C89053DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111083286926490&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111083286926490&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.4_pr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B033DF7-892C-4257-986E-E717C89053DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111083286926490&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14592",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/14787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12803",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111083286926490&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/14787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-14T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE77009-C449-4C27-8ED1-54536C868BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C59F32-C782-41AB-BBCD-14AE00622251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFA2FB3-988C-438C-91D5-CFB949D1DE72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C884064-3C7F-41D0-8C2D-9E472E6A4F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B174400C-B207-4244-BFB0-D21BC03B82A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED931373-EC2F-4957-8626-5B04356D5DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DE9C6F-E283-4A57-9AF5-623632ED564B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF810F5-30EE-44F0-8A83-BC23D28693B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BCAD68-4046-48C1-8621-D67F55103E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46EFD31-83A7-4EE7-B8C0-F403311D1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864DFC9C-EF3D-4681-B4FE-5766F8EB08AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C0392-2513-40D9-BD90-65B1762B3056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61BA821F-DB55-481E-A5C4-C08B74A93BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.9_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913CF7B2-A97C-4CA3-B01A-FCD2B5011854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-03/0210.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14566",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.holacms.de/?content=changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-03/0210.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.holacms.de/?content=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0384",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-03-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B3D5AE-05A8-433C-98DD-2711423D3FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67735E5-E43E-4164-BDB2-ADC6E0288E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB70F82-52BB-4D0D-9A24-9AF67278466D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62EF915-CA7C-4D75-BC67-E015772BB9CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-283.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12810",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0009/",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9562",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/95-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-283.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/95-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbitrary code as root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/95-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/95-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php or (2) page parameter to zpanel.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zpanel:zpanel:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCBF151-50B2-4BC7-B0B7-69697D76869A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zpanel:zpanel:2.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D99E1D5-F0BC-4F24-8B6B-10E7ED3748A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zpanel:zpanel:2.5_beta9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E03CBB-4539-4845-A6DD-B9D559AB2766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zpanel:zpanel:2.5_beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA0BCD3-1390-4EE6-8D84-CEB816BF266F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111090324111053&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111142323616309&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14602",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12809",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111090324111053&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111142323616309&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1) execute arbitrary PHP code in ZPanel 2.0 or (2) include local files in ZPanel 2.5 beta 10 and earlier by modifying the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zpanel:zpanel:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCBF151-50B2-4BC7-B0B7-69697D76869A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zpanel:zpanel:2.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D99E1D5-F0BC-4F24-8B6B-10E7ED3748A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zpanel:zpanel:2.5_beta9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E03CBB-4539-4845-A6DD-B9D559AB2766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zpanel:zpanel:2.5_beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA0BCD3-1390-4EE6-8D84-CEB816BF266F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111090324111053&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111142323616309&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12809",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111090324111053&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111142323616309&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reinstall the software and possibly cause a denial of service via a direct request to install.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zpanel:zpanel:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCBF151-50B2-4BC7-B0B7-69697D76869A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zpanel:zpanel:2.5_beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA0BCD3-1390-4EE6-8D84-CEB816BF266F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111090324111053&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111142323616309&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14602",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111090324111053&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111142323616309&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "986D157A-DB64-4F32-80A4-9358B615DABD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "82429724-FB37-4420-B650-E401AD9AF94C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "23DDA1C9-FE86-40B2-8CCA-FEFEADBEE381"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E677348-A982-49EC-911B-92C7C234EAB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "38F84B77-5522-48E0-AE56-7AE5E967A0DA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2.113:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841888E0-C8E9-4C9C-8C21-DE60B037DBB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA99C786-A542-4AC3-BB81-4DE9C35E28DA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:novell:ichain:2.3:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4B485F-AF4D-431F-8572-0C121E859598"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111091027000721&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12811",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091027000721&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "986D157A-DB64-4F32-80A4-9358B615DABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "82429724-FB37-4420-B650-E401AD9AF94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "23DDA1C9-FE86-40B2-8CCA-FEFEADBEE381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E677348-A982-49EC-911B-92C7C234EAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "38F84B77-5522-48E0-AE56-7AE5E967A0DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2.113:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841888E0-C8E9-4C9C-8C21-DE60B037DBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA99C786-A542-4AC3-BB81-4DE9C35E28DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.3:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4B485F-AF4D-431F-8572-0C121E859598"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111091517007681&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096887.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-05.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091517007681&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096887.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-15T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed by an MS-DOS device name such as (1) LPT1 or (2) PRN."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141D83A9-89C2-456F-B70D-F274EBE3EAC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mysql.com/bug.php?id=9148",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091250923281&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14564",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=9148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091250923281&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0352",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-03-16T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading local manual under the help menu, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woodstone:servers_alive:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A1B34C-82E2-42AB-A980-393B0C61C8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woodstone:servers_alive:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314893C6-D552-4E5A-8416-E35A5E8A6B72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111100364513513&w=2",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/14616/",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12822",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19715",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111100364513513&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14616/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-21T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to bypass access restrictions and gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-21T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AFP Server in Mac OS X before 10.3.8 uses insecure permissions for \"Drop Boxes,\" which allows local users to read the contents of a Drop Box."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-21T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CF_CHARSET_PATH environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=219&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=219&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-23T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E59CDD-9F95-4E38-95B3-AC5C35075378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA58BA23-4CFE-40F8-A2F4-104007E12E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F00276-9071-4B96-B49C-2E0898476874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB84CC9B-346B-4AF4-929E-D56D85960103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1444C77E-FF98-40E5-9CA9-B4C71B3C9304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B40771F-30CB-45D0-9EDE-1F13852085B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47315EC4-1EED-4070-A087-8E37C8FE6703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1EB38F-CEB2-40BC-AA5D-CC539F597137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE6B0681-B96F-405C-8042-1BF2DDB41648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDAEAE6-BA9F-4D40-B264-4A72930239E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9296197-0EE0-4CC0-A11F-E44E3443E990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A76ACC55-754D-4501-8312-5A4E10D053B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8987151-0901-4547-B750-5DC470BB9CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E60BCC-6D1C-489E-9F3B-9BE42B46704F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A87ED8-9E1F-4C2C-B806-A41765081C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C795D86F-9B08-41FE-B82B-5BBB3DE6357D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "2637D552-4A3D-4867-B52A-ACCED8681AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC237C8-CFE0-4128-B549-93CD16894E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "367A5D46-0FF3-4140-9478-251363822E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DE4889-424F-4A44-8C14-9F18821CE961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "1003D688-3EEA-45F9-BB2C-5BAB395D7678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098458D4-635B-4A4D-9472-39370094E1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.8:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "10349BA5-70D3-4D11-94F6-A77D8570CB06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-03.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=257308",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=257308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0759",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-03-23T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D83FADC-4C7F-4C16-BBAA-9883D7449744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A019EA-DB16-41D5-A625-CBD96F24416E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45B5EE8-00FB-46FE-9A26-7468AD30B540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6534A963-C0A7-47D6-8E1B-B8D0F3933428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD06A99-7CBF-4593-9EA1-5D1A800D8C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDC9494-E79B-4497-8413-A44DF326ABB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563F49AC-D60F-4E00-9E0D-7EDAA2FFFCD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB0628-9BFD-4262-886C-E971EC262134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F61BB-FF5B-4196-8723-AA165B077E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02E4063-E2B2-4EC5-9864-D2FB3E73F574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CEEBE6-7CE6-4E1B-8828-EDD64EA3A338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193A610A-5E5E-4A87-A501-902100D1C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC217F-C257-4A3C-9CBD-08010C30BEC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013550",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-702",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12875",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11022",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2005-070.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2005-070.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0761",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-03-23T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D83FADC-4C7F-4C16-BBAA-9883D7449744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A019EA-DB16-41D5-A625-CBD96F24416E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45B5EE8-00FB-46FE-9A26-7468AD30B540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6534A963-C0A7-47D6-8E1B-B8D0F3933428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD06A99-7CBF-4593-9EA1-5D1A800D8C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDC9494-E79B-4497-8413-A44DF326ABB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563F49AC-D60F-4E00-9E0D-7EDAA2FFFCD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB0628-9BFD-4262-886C-E971EC262134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F61BB-FF5B-4196-8723-AA165B077E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02E4063-E2B2-4EC5-9864-D2FB3E73F574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CEEBE6-7CE6-4E1B-8828-EDD64EA3A338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193A610A-5E5E-4A87-A501-902100D1C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A27CAC75-BFE8-4865-A6AE-20225BFCDBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6393827E-8F17-4C95-B1E2-D6049B8AA63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F682CD-0117-4770-877F-1F3903BAFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5717E4CF-15CD-4369-801F-7E113F0FAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34B9CBD-54BC-4131-820F-9483E50086BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD7EB24-20F1-493F-BD38-DF39638C319B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E62DFAA-1EFC-40D6-A4B5-9113DF0656B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BD0D69-A809-4DD3-824B-C68E3EF4F724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC271B0-ACAC-478E-B00B-FFBAAE33B5E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9BACC6-DEF1-4C20-B627-3AA55471B372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA96D5B-FD43-418E-980C-22DEBA4FC03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12378D7-6A7E-4636-9551-C224907A3219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55053EA-780E-46A9-91AE-F983DD54D154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8168249B-863D-44E3-8BC3-B877A64981B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A688471B-3A88-410B-AAD3-20A75E1A767E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F76B8D-D105-4106-B52C-FC201F5930AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB7AE5B-83D9-4DF5-A9A0-B0412D8C0B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600590DA-A2F4-488F-B85B-9B3B86A8FC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC217F-C257-4A3C-9CBD-08010C30BEC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-070.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013550",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12876",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11150",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-070.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-23T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3874855-734A-44C9-A104-34DC99F7EAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD4FF54-B178-48DA-83B8-E7F1026FD61C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF83E78-191F-4F19-9174-308168956CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E479B832-8C04-4925-A4AD-D23962EFD068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E741D34-2F95-4407-A866-DFA1F741FDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D08AAD-0988-4E6D-819B-F9F9887394E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14679",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12872",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-23T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interspire:articlelive:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A916F3-5E6B-4A82-A616-BA3C3491CCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112483966331737&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14708",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394069",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112483966331737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-23T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the mt parameter to the membres.php page or (2) the -afs-1- query string to the msg.php page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digitalhive:digitalhive:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71F066A-A219-423C-A540-348201F06EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14702",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013516",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12883",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michael_dean:double_choco_latte:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21A71D7-6B55-45E3-BA64-282B054EF2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michael_dean:double_choco_latte:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96942628-4B67-4C1E-BA49-9FD87C22C5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB18CD4-1DC5-4F4D-BDB8-35576CE5964D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B2609F-D8A8-498A-9364-ACAC3C8758EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14688",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013559",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=315144",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=315144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the area parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dream4:koobi_cms:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666B0EE6-64CB-4DC5-8EDB-4B017032A959"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013558",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12895",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-24T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deplate:deplate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.1",
            "matchCriteriaId" : "3B09662A-060D-4835-B136-419589F2DC5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013555",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=315034",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=315034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0585",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-03-25T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13599",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-15/advisory/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-23.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100035",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9924",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/13599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-15/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0587",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-03-25T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "F23F3867-1318-4ACF-A3A6-F0605BDA8BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.6",
            "matchCriteriaId" : "E6F232DA-F897-4429-922E-F5CFF865A8AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-21.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0592",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-03-25T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers to cause a denial of service (crash) or execute arbitrary code via invalid sequences in a UTF8 encoded string that result in a zero length value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-15.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=241440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10606",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=241440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-26T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txn_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magicscripts:e-store_kit-2:paypal:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D7FEA4-4A20-4F9A-B990-BF855B63FE31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111186424600509&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12909",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111186424600509&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-26T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive information via an invalid (1) file or (2) category parameter, which reveal the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nukebookmarks:nukebookmarks:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB7507C-6967-4B3C-AC0A-CC5B774DD781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111186145609320&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nukebookmarks.sourceforge.net/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zone-h.org/advisories/read/id=7356",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111186145609320&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://nukebookmarks.sourceforge.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zone-h.org/advisories/read/id=7356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-26T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly 9.0.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the profile parameter to index.php or (2) the cat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:cpg_dragonfly_cms:9.0.2_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735841E4-3B37-45E0-A509-639C5CB6923D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.talte.net/content/view/252/46/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013573",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.talte.net/content/view/252/46/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0750",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-03-27T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C84296C-2C8A-4DCD-9751-52951F8BEA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6996B14-925B-46B8-982F-3545328B506B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138985E6-5107-4E8B-A801-C3D5FE075227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "9B502A61-44FB-4CD4-85BE-88D4ACCCA441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux:7.3:*:i686:*:*:*:*:*",
            "matchCriteriaId" : "05853955-CA81-40D3-9A70-1227F3270D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*",
            "matchCriteriaId" : "C7EAAD04-D7C4-43DE-B488-1AAD014B503E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "6E94583A-5184-462E-9FC4-57B35DA06DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E905FAAD-37B6-4DD0-A752-2974F8336273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032913.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111204562102633&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-283.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12911",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11719",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032913.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111204562102633&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-283.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smail:smail:3.2.0.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F25741-B5FD-4D18-8426-39B40D22BCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111177045217717&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-722",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111177045217717&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to index.php or (2) the searchTopCategoryID parameter to search_result.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:valdersoft:valdersoft_shopping_cart:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD787A10-79CE-4298-BD3B-2CA8A4AA5683"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013565",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-28T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) the viewcat parameter to index.php or (2) the artid parameter in the viewarticle action for index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-xoops:e-xoops:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B496E5E-0603-4B7A-A6E5-82C44EFD1BF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-29T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting (XSS) attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adventia:adventia_chat:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD908E00-BBE5-4FB4-ACDC-0A69C7741E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adventia:adventia_server_pro:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D69308A-D811-4587-A0E8-B193FB054E49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-003-adventiachat.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111211930330410&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013588",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12927",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-003-adventiachat.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111211930330410&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-29T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adventia:e-data:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1624A4F5-0B8B-4E19-9835-F8D1CD4B3867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-004-edata.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111211945505635&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14739",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013589",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-004-edata.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111211945505635&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-29T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jimmy:the_includer:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87018335-0DC8-4AE0-A177-6A2AF38198E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jimmy:the_includer:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5B3A7C-A574-4294-9CB3-290403AD6C5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/12926",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-29T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the (1) term/keywords field on the search page, (2) username or (3) e-mail field on the forgot password page, or (4) domain name on the ordering new package page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FDCCE7-B76F-42EA-BD82-11D35AAED66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84AC0DD-109D-4E44-9673-668238545F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FECE4E8-3258-48E7-8F3A-F564512442CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111214190111520&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12917",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111214190111520&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-29T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (1) ... (triple dot) or (2) ..\\ (dot dot backslash) in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faststone:4in1_browser:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0E6BAB-0550-4A4D-B6F4-6B2E378BB174"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111213034206802&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14743",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013596",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/FastStone4in1Browser1.2-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12937",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111213034206802&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/FastStone4in1Browser1.2-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers to execute arbitrary SQL commands via an encoded webcalendar_session cookie."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en la función user_valid_crypt del fichero user.php en WebCalendar 0.9.45 permite a atacantes remotos la ejecución arbitraria de comandos SQL mediante una cookie webcalendar_session cifrada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D9BF6-6CFE-4BD6-923B-3E5F6F5FC59A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110868446431706&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14319",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/13918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scovettalabs.com/advisory/SCL-2005.001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110868446431706&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/13918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.scovettalabs.com/advisory/SCL-2005.001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) offset, (2) limit, (3) order, or (4) orderby parameter to question.php, (5) offset parameter to answer.php, (6) search_item parameter to search.php, (7) cat_id, (8) cid, or (9) id parameter to comment.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafaq:beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68793E50-2D04-4D8D-BA2B-DBDB5D76F450"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110868808723487&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110868808723487&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in hpm_guestbook.cgi allows remote attackers to inject arbitrary web script or HTML by posting a message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en hpm_guestbook.cgi permite a atacantes remotos la inyección de rutinas web arbitrarias o HTML mediante el envío de un mensaje."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpm_guestbook.cgi:hpm_guestbook.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F564F23-229E-4E69-A61B-1B90DC874976"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110869187805397&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110869187805397&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to inject arbitrary web script via (1) a signature file or (2) a message post containing an IMG tag within a COLOR tag whose style is set to background:url."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en el código SML de Invision Power Board 1.3.1 FINAL permite a atacantes remotos la inyección de sripts arbitrarios mediante:\r\n\r\nun fichero de firmas,\r\nun mensaje que contiene una etiqueta IMG en una etiqueta COLOR cuyo estilo está puesto como background:url."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CF6BD7-04F2-4D69-8402-EC4B637EA083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0C566E-2AC5-47A2-9246-2FBC87828690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29692429-A920-4BAD-9D79-D36EBE74EFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D52AB16-A202-48B6-82C0-AD13EBCC7FCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C498DCB3-3CC7-4334-BF61-F5DA43F4B90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A7875E-DAF0-46CD-AE30-246EB3FC6BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2103FBA-1B72-43FC-A1ED-28F8C7DA0EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FBF21B-CF52-41BB-BAF1-AF822586D28B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110868196922995&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110868196922995&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP request with a long User-Agent header or (2) a long argument to an arbitrary PHP script."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en TrackerCam 5.12 y versiones anteriores, permite a atacantes remotos causar la Denegación de Servicios (DoS) y posiblemente la ejecución de código arbitrario mediante:\r\n\r\nuna petición HTTP con una cabecera User-Agent larga,\r\nun argumento largo a un script PHP arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trackercam:trackercam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.12",
            "matchCriteriaId" : "9DACB08F-805A-4240-9718-B5F028F4FF2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/390918",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via \"..\" sequences and (1) \"/\" slash), (2) \"\\\" (backslash), or (3) hex-encoded characters in the fn parameter."
      }, {
        "lang" : "es",
        "value" : "Atravesamiento de directorios en ComGetLogFile.php3 de TrackerCam 5.12 y versiones anteriores, permite a atacantes remotos la lectura de ficheros arbitrarios mediante secuencias \"\"..\"\" y:\r\n\r\n\"\"/\"\" slash),\r\n\"\"\"\" (backslash),\r\ncaracteres hexadecimales en el parámetro fn."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trackercam:trackercam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.12",
            "matchCriteriaId" : "9DACB08F-805A-4240-9718-B5F028F4FF2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/390918",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTML or web script via the login request, which is recorded in a log file but not properly handled when the administrator views the log file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en TrackerCam 5.12 y versiones anteriores, permite a atacantes remotos inyectar código HTML arbitrario o script mediante una petición de conexión, la cual es almacenada en un fichero de log pero que no se maneja adecuadamente cuando el administrador visualiza el fichero de log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trackercam:trackercam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.12",
            "matchCriteriaId" : "9DACB08F-805A-4240-9718-B5F028F4FF2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/390918",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the ComGetLogFile.php3 script."
      }, {
        "lang" : "es",
        "value" : "TrackerCam 5.12 y versiones anteriores, permite a atacantes remotos leer ficheros de log mediante el parámetro fn en una consulta directa al script ComGetLogFile.php3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trackercam:trackercam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.12",
            "matchCriteriaId" : "9DACB08F-805A-4240-9718-B5F028F4FF2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/390918",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TrackerCam 5.12 and earlier allows remote attackers to cause a denial of service (crash) via (1) a large number of connections with a negative Content-Length header, possibly triggering an integer signedness error, or (2) a large amount of data."
      }, {
        "lang" : "es",
        "value" : "TrackerCam 5.12 y versiones anteriores permiten a atacantes remotos causar la Denegación de Servicio (DoS) por caída, mediante:\r\n\r\nun gran número de conexiones con una cabecera Content-Length negativa, posiblemente provocando un error de entero sin signo,\r\nuna gran cantidad de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trackercam:trackercam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.12",
            "matchCriteriaId" : "9DACB08F-805A-4240-9718-B5F028F4FF2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/390918",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in Glftpd 1.26 to 2.00 allow remote authenticated users to (1) determine the existence of arbitrary files, (2) list files in restricted directories, or (3) read arbitrary files from within ZIP or gzip files, via .. (dot dot) sequences and globbing (\"*\") characters in a SITE NFO command."
      }, {
        "lang" : "es",
        "value" : "Múltiple atravesamiento de directorios en sitenfo.sh,  sitezipchk.sh y siteziplist.sh en Glftpd de la versión 1.26 a la 2.00 permite a usuarios autenticados remotamente:\r\n\r\ndeterminar la existencia de ficheros arbitrarios,\r\nlistar los ficheros incluidos en directorios restringidos,\r\nleer ficheros arbitrarios de archivos ZIP o gzip, mediante; secuencias .. (punto punto) y caracteres (\"\"*\"\") en el comando SITE NFO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648069B8-DCAD-4E41-8721-64ED93CF5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC92E29-F4C6-4529-B691-1B3C9621BECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA83D5D1-47A5-4173-9C03-3BBECB446CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AE9464-A3D2-4CAE-90F2-E241FEE8D75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CA4FD5-451F-4657-B494-F48DA6D933E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C626C28-742B-4F6D-94E0-56B445260522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F0131D-0E50-433A-ABEB-3B0062BFDC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FFFE55-070E-45B1-889D-0F81EAA1E213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2931F258-AECE-4181-905A-D8801E12721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D773FC-D4D3-495D-BDE0-155B896D1B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D405B1-8AF9-46A5-AFB0-628F067D8D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAED5165-E96B-45BD-9C93-A365C6569E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8215195F-1FE1-4F3C-A067-E69F177E58B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05E032C-B32F-4AD6-B226-9E49CCD5D44F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/390924",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12586",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gproftpd:gproftpd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1.8",
            "matchCriteriaId" : "793E265B-D085-4FC9-8838-CC9BA7FD0659"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=81894",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-26.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=81894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-26.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject arbitrary HTML and web script via the showpost parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en comment.php para paNews 2.0b4 de PHP Arena permite a atacantes remotos la inyección de HTML arbitrario y scripts web, mediante el parámetro showpost."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phparena:panews:2.0b4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931AE43C-DDB3-4D3F-824C-A6C5ADDC5756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110863062605906&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12576",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110863062605906&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme."
      }, {
        "lang" : "es",
        "value" : "Tarantella Secure Global Desktop Enterprise Edition 4.00 y 3.42, y Tarantella Enterprise 3 3.40 y 3.30, cuando utiliza RSA SecurID y múltiples usuarios tienen el mismo nombre de usuario, revela información sensible durante el proceso de autenticación, lo que permite a atacantes remotos identificar nombres de usuario válidos y el esquema de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tarantella:secure_global_desktop:enterprise_3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49719C5-8A9A-42BB-9156-E7A40544394A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tarantella:secure_global_desktop:enterprise_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6834074-385B-4974-BAEF-3A9882485783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tarantella:tarantella_enterprise:3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE573E8-DD94-4293-99AE-27B9067B3ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tarantella:tarantella_enterprise:3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14413DA-5199-4282-9E22-D347E9D8E469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tarantella.com/security/bulletin-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tarantella.com/security/bulletin-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en index.php para Kayako ESupport 2.3.1 y posiblemete otras versiones, permite a atacantes remotos la inyección de HTML arbitrario y scripts web, mediante el parámetro nav."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207C5C3A-27FF-4EDA-B435-2316492CE84A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=110845724029888&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12563",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110845724029888&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-30T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A512328-2FD0-4B1D-9327-A13A0BCE9C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3020_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D50FE2-A4E6-4EF4-A91C-88FB0AF6CCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6548F964-B8EE-4B39-87CF-99743D41C42C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08810E6-33B6-45FF-91C7-EED10DC023EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD1A1AC-980F-428E-8BAF-0FC821014868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923949D1-06EC-462F-A3BC-FCAB448042A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901B1838-7169-41E5-80EF-29BB680BF937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAEAA5F-0A98-48B7-8012-9B9909243135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB38834B-E4AB-43F4-888B-14B088C95594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F8059B-3968-4D63-B1B3-74E545C918D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701CDA0D-F932-4251-B484-8F20F0AE9003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E674AA43-905E-40E0-A70F-77D05C62C18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AB682-2965-4C8D-B323-AB510E424407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F7F019-A0A4-49CD-BB28-24BF7725AC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175CD875-3402-4B06-A3FA-7DFFCBB44056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9017BB-5848-4361-ABB9-C69FB3AB90FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "207034E8-35F7-4E78-A3FC-C86D20EB8D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C544E523-15E5-4CE5-8113-53454F5D9973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09F6EBD-C3FC-4680-BE31-A766D863237D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8C3FDA-D321-4202-A8EA-6C1464558A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B68705AB-A133-401F-9F41-64594E071816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9092680-E154-4EAB-A2D5-B692073F894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF5F3FA-5FA4-408E-BA62-3943C5DFD859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC9764-5BF5-449F-9200-5569C13F8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12F2AAC-DB5B-4C28-86C5-F59490362E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071F52AD-D59B-4673-BCBE-112B94D3EB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80709CB0-D386-4C4F-B3EE-7A0501FD7248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFAF42-B894-4D62-A9CF-3349A43191AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE5BB7F-D8B4-441B-9F45-56F622EEAA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B87A7EC-DC23-4075-8C4A-2317FF34BDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AC18E3-D12B-489D-9D95-6C9210235FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB969E-8BE9-46E0-B8AA-5057E320F1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36291ADE-3D5A-4E49-8BA7-B71CAAA226B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D953DA9F-B54E-4941-85BE-48933C98DB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E298AD-26AC-4E1D-83D8-5C2016CC6559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DAF71-5763-44D8-AD1E-5ADE8BC15120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35B6FA9-E504-4CE3-B171-815291A812CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA54782-93A8-47BE-863D-89CA3678BF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F66A10-246D-447B-941F-F1175684F0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3005_concentrator_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17196F00-9D7A-4AF6-AE1E-EA2E450A8ABD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12ECF578-84BF-4F41-9462-C09FA517F2A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14784",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050330-vpn3k.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12948",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050330-vpn3k.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-03-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bay_technical_associates:rpc3_telnet:f_3.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A319C0D-A5AB-4219-9029-5ED21956F148"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111230568025271&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12955",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111230568025271&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0749",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-04-01T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.11.5",
            "matchCriteriaId" : "C9986411-00CF-4AFE-A7E3-6F40626DBCD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6909B816-6778-48A8-A828-CA0AC5484388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B988FF88-E782-4581-9E24-CDE7E1734258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9C11B5-5D63-4D2B-AD9A-5E657A8E1D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24BEDA8-2D1D-4AA1-8806-02838FB4C323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAAF0A4-F1B1-4597-B9C1-E7F277061BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE95DD29-6E5F-475B-BCB3-6F756C62FA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A5A944-8CFC-40ED-96D1-842ECA7316B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BF38E2-7353-4A55-ABA3-84085BB5F8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5C94F0-2390-4AF3-BE18-D00B10A67052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18C6032-012A-4B09-8D16-680CA3080D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134ED367-9610-485D-8935-3C46BFC073AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C150050C-6C08-4434-848D-EB71741DF29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D41FAC-B0CD-48DE-AA43-27487FF9E424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9CC013-D4FB-4EC0-B405-6B79DF7C2F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235B7E7D-3785-408A-AE53-7EB4F88F06C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A12556-5E7D-4832-A71A-66E6E9C2A710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9B296A-126A-42E3-B3DD-158F895A48EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC75E5B-48A5-4C28-88B2-870C62DDA337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D2EFF1-78E4-4002-8904-9DA13D7D1DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E02E89-832D-44D9-B2EE-1C070E99AE9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B55CD0D-0117-48F3-8643-4C191716AE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BA4C24-FD29-421C-8F01-1798764C53F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726B962B-D8B6-419E-BC0D-3DD9821234F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985C2754-56B1-4638-B51E-313F7B8BA65F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746D0402-66BD-4225-B847-6762BC4DC18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E657F58A-440D-40CB-97BF-ACB72AB36A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5E6A99-20FD-456C-A5E2-FEBA5DD672ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7699FD2E-C211-4E7E-BCA5-B991FBA90EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B921F-B152-49F3-9AAD-9421F5867F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46381F67-EC99-4EA7-9599-BD4A25827E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AC849E-7D4E-4C00-8BD0-672F413A80B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6996F1F1-5374-4BD2-B421-ABB15C7C0B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E18AFD-5090-4C1F-A2EE-A32A28DB5182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC91B71A-2456-4410-9633-CF5870027D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92555500-16EB-4F76-B2C7-61A00A1AC722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D22C9-94C6-4AC5-AAD0-15F06BCC5CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541B4ED8-E970-4C67-B5AF-7DE5B7F754D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E55F8A8-1ABD-4760-9074-353BBAEE005B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F873503F-C6E2-4AC2-859E-9431FE0FA0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E849AC-B85A-4C4F-878B-E95A5F661E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E4A2912-12AC-4DF1-8023-A0B7DBE9A866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.1.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15004105-9A55-4592-96D6-3FF539EC7513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146F7A77-A950-4CAD-BDA9-C239696F569D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DCE8FF-40C3-44F7-8185-0422ADDA051B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAC3A7C-2092-46D4-908B-CF03F4217112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F3945-21ED-44C6-86D2-B7755A87014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DDB008-E88E-473C-B030-AF9B6F5E4E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEF4480-D50B-464C-AE39-A12455DBC99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15928E10-7D41-45B2-87D6-8AA10190A8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E13C4-F42D-4168-B25E-544E1549C46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4B2ABB-0283-4532-9E29-B37BFF5FDFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DADA29-DCD3-44C4-9BDB-B881D6FCE3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD794C6-11F5-4A2B-9A3C-E03069A1526B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4947CDE-CB89-456B-8B5F-0E17B46BC893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF701E58-35E8-4DDE-B832-C5A23E61A3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2498D898-D243-4D0C-9AEF-0138D19A68B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3924060B-1EC1-4003-B306-E327634E7797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D45B43DF-FD4C-4C37-9569-1CCE450B8987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99879B2B-7FFB-4181-8928-13B7E17F36C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A3E250-5BC6-4AD3-A3DE-7F876FD90BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B10DC6E8-1A85-4F3B-88C9-0425782010A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC74D465-3256-4D87-8F47-C4D7CEA6E2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4817429F-B24F-47E3-BB3B-7EF9036D5F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "1760ADC9-78A1-4133-9720-5319A4CF1DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "28ECE0D4-624D-4804-8013-DBA9BAF659ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "3C115333-E386-4B4D-91C6-69ECE55666F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D62621-2C12-40F0-8726-E48926E4DA44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "614F1C35-94B2-4A86-AEB4-55C774445E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "ECDD69D6-F79F-4F0E-BA3D-E721A1885A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCD388A-1E43-492E-8EEC-4E14EDD7AB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "74F962BE-2187-4C8F-BAE7-EFA3D79FCB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F04081-D672-488E-A91D-5088DD04AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB59EF-74EF-462E-BC84-89201F734380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0755A136-3DE3-4B61-B5EF-F6282AACD38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D950C3-0DDC-4549-99F8-1E206768219A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195A133A-26C9-401E-913F-285BA220D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D68E21-6C58-46A7-96F2-9A79DD880803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D11B12-AFD7-4055-A366-D932CA1BA8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC990132-9DF2-4D23-B9DA-0819809A3CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA51D40-E72C-40A4-B238-70F6806FA1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1B7D68-E41E-4A5A-9606-F14F057B39E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BCB10C-FD72-4F18-84C9-AE0603402426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF742FF1-5504-41BB-8FAA-D71B83C791B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C6D04-3226-4654-9A41-0325B48A2F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072A77AD-BB27-4C24-91A0-A12D6E741593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF900D1D-E351-4407-8269-80E5403432B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44915F9F-88DF-4304-8F66-58A869654BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC2D90D-2115-406C-B609-870B241F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF681CC1-B3EC-467A-A10D-10840D3D4575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8660C030-328E-4221-847E-AC4BDA08CE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47AEC277-F9A4-412F-B2EA-C1AEA336A46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7234AF29-BCDA-4728-A141-C169EE59CEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374851C5-C61D-4964-8B4A-473B0A008F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD55C81-3687-46BF-880E-58D7E005A185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2953267F-16BF-404F-83F1-73E0908979B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D953B61-3457-4A0E-A668-BA4937B79784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5F3607-C0DD-494C-AB6E-46E383A6B17D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19138F52-25EA-42B6-89DC-692A8AF0A720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2EBADC-0817-4E38-9F49-8446D8A20CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340368E7-0005-4F8A-8AF1-C20A1198288C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC860DD-57DF-4474-AE2B-9AADB9060175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1D576A-0763-4611-B3CF-CD8514F18783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F570226-CA89-46F4-8C68-9A59BC0602A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162A88DA-E2EA-4E92-B174-9AD86BE8D983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE5C4F5-C64D-4714-B02E-689B435E3E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164F4483-9F28-491A-8F99-4242C9B9CBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34803A7D-45C4-4DBE-BF18-19CE9DE62A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1178D6EE-A462-4CC1-B430-9A44C75D2336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4360530E-6E07-48F9-B8F8-B36622331052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17508D09-AE14-4458-93A2-E2764452EA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F2CD4A-CCA9-4743-86C4-7675D2487E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C1504C-03C5-49E4-8192-E1E698CF07A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3172A-E663-42F6-90E7-51C3850AF9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F6692C-494F-44ED-97C6-A6CD05334DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77231F8B-137F-4FAE-BCD9-658F32943CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552ED77A-F09A-4923-A907-8E0DF8445363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF940EA-676A-42C8-A6E0-7F53C8A34340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DCCFB1-054F-4BF0-92F1-78A2063415D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D3222C-7469-42F6-984D-3223BCD8080E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697B7069-D08D-41BD-8285-A1ABA0E1142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72173CFB-BAB6-456C-B5F2-3AA31D799E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD08A67-195F-431B-98A5-42B2966055DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658C7317-D50B-475A-9E0E-E68AECD49B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1270F454-8E05-413C-BAF4-35D062CA5803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14713/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-529.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12935",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19867",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10640",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/103-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14713/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-529.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/103-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pavuk:pavuk:0.9.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D30721-3679-4EF1-9732-B12930B1C92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pavuk:pavuk:0.9_pl28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875D8080-E304-4B1E-9AC5-4F9DA9BE042E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pavuk:pavuk:0.9_pl30b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489A91A9-2828-4884-9AC6-CEDA11BB1700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pavuk:pavuk:0.9pl28i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8847E10D-BDBE-45D9-8843-D2179FD23703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pavuk:pavuk:0.928r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C449B4-EC74-49D6-B9D0-71C0260137FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pavuk:pavuk:0.928r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDBAC8F-EF13-4161-9E4F-906963A9FCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14571",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=313436",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=313436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:active_web_softwares:active_auction_house:7.1:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "F403D596-4206-4B53-9796-BAA23A68B47D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/advisories/aass.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111280834000432&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14839",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13032",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13034",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13035",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013649.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://digitalparadox.org/advisories/aass.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111280834000432&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013649.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-06T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:22.120",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: cart.php in LiteCommerce might allow remote attackers to obtain sensitive information via invalid (1) category_id or (2) product_id parameters.  NOTE: this issue was originally claimed to be due to SQL injection, but the original researcher is known to be frequently inaccurate with respect to bug type and severity.  The vendor has disputed this issue, saying \"These reports are credited to malicious person we refused to hire. We have not taken legal action against him only because he is located in India.  The vulnerabilites reported can not be reproduced, hence information you provide is contrary to fact.\" Further investigation by CVE personnel shows that an invalid SQL syntax error could be generated, but it only reveals portions of underlying database structure, which is already available in documentation from the vendor, and it does not appear to lead to path disclosure.  Therefore, this issue is not a vulnerability or an exposure, and it probably should be REJECTED"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via the UserID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocean12_technologies:membership_manager_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422C907D-45EF-485A-8DD8-77470EA91231"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14864",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013667",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=1865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15307",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13049",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E140F76-D078-4F58-89CF-3278CDCB9AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D76A8D-832B-411E-A458-186733C66010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.15/SCOSA-2005.15.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.15/SCOSA-2005.15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111299353030534&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013671",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.defacers.com.mx/advisories/2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111299353030534&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.defacers.com.mx/advisories/2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an:an-httpd:1.42n:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E925BE54-5384-479A-BC60-DEEFF4C7093F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14861",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013666",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15362",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/anhttpd142n.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/anhttpd142n.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Access_user Class before 1.75 allows local users to gain access as other users via the password \"new\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:access_user_class:access_user_class:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6896D45C-2C09-48AA-B6B4-C98BFF9118F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freshmeat.net/projects/access_user/?branch_id=53852&release_id=192770",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14897",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/access_user/?branch_id=53852&release_id=192770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B349F-F76D-49D2-95DA-C8670E32530A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB336F6C-E81A-43C2-A252-36A192D9CADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00082231-3168-4FCC-807B-8AD3DBBFCE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FF770-BEB4-4320-AA45-399A5CC6540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97DA335-4815-4608-84D5-67F4E539D8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14882",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:network-client.com:ftp_now:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37035DCC-F3CA-41F3-AA1D-2B8F09A445DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14889",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013657",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL commands via (1) the id parameter to view.php or (2) the from parameter to members/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azerbaijan_development_group:azdgdating:1.1.0:*:platinum:*:*:*:*:*",
            "matchCriteriaId" : "4C208847-0FDC-4145-9979-B2B29FFEAFCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/15525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395530",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438607/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13082",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438607/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5 checksums of the username and password via a direct request to the _dat/login file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:towerblog:towerblog:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B21AF05-2282-4016-B13F-ACA14AF21A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:towerblog:towerblog:0.4_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7728ECCF-2C1E-4FD9-A7A3-4002534BB223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:towerblog:towerblog:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D59273-52C7-4CEA-82D2-DE0EE7D54B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:towerblog:towerblog:0.6_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBCDA096-C03D-425D-B464-FE7784032E27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111323802003019&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14884",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013675",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111323802003019&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E29213B-F98C-41EE-9275-7EEF1AB75FC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B817B1C1-6E0D-4F78-94C0-40DE119C8A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA84172D-BDA2-4390-84C5-C34D848E263D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E175E2DF-8DC6-4207-8292-8D457779B732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB950ED-A563-4F3D-AE9C-C51F1298FE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF21126-D66C-40CD-BB41-B4314EFF35A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC58B7B-F546-4731-AF8D-11E4E0F50777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56E553F-78A7-4F77-BF25-342AF722CB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A49462C-E253-4067-A099-5FD06D362587"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111317179531000&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14878",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013674",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-12.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rsnapshot.org/security/2005/001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111317179531000&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rsnapshot.org/security/2005/001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC7F0E6-7DA6-41E3-9F73-4FFF699195C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA35A95-B8FD-4ED8-95E0-409E50BF13AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4066556-F0CE-4E8B-B88D-C3BA03D98D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25D5B0-082C-41AF-A3BA-5B35E54BCCAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93242B-85AD-451E-BC0A-D8561C292430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52954D4B-72E9-434C-991A-7B3D6C71183C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B42A0B9-628F-4173-8F94-3EACDE1D57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A127C8-803E-44A5-BB30-09C351CF3ACD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/395515",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13097",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013676.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013676.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dc\\+\\+:dc\\+\\+:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.673",
            "matchCriteriaId" : "3746CBF7-B005-4D17-BE19-7D09B47E844C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dcplusplus.sourceforge.net/index.php?t=8&s=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14880",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dcplusplus.sourceforge.net/index.php?t=8&s=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0555",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka \"Content Advisor Memory Corruption Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14922/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/222050",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19842",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2077",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2786",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3157",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3926",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4674",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/14922/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/222050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0562",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:msn_messenger:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95440454-0800-45FE-8ABA-79EE514A33ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14915/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/633446",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-022",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19950",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4927",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/14915/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/633446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0610",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A585A1-FF82-418F-90F8-072458DB7816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F7EB61-55A5-4776-B0E7-3508920A6CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "A442DE97-4485-4D95-B95D-58947585E455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE31DFF8-06AB-489D-A0C5-509C090283B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8A6564-129A-4555-A5ED-6F65C56AE7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "237174A4-E030-4A0B-AD0B-5C463603EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF49BF03-C25E-4737-84D5-892895C86C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7F8F11-1869-40E2-8478-28B4E946D3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2019E0E-426B-43AF-8904-1B811AE171E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "9062BAB5-D437-49BE-A384-39F62434B70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1504C-14FE-4C21-A801-944041F2946F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "6E53C673-9D6D-42C8-A502-033E1FC28D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5FC1A-1253-4390-A4FC-573BB14EA937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4AC452-6042-409D-8673-ACAD108EE3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE1009B-371A-48E2-A456-935A1F0B7D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C844A170-B5A7-4703-AF3B-67366D44EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44308D13-D935-4FF8-AB52-F0E115ED1AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3D41CB12-7894-4D25-80EC-23C56171D973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD9C12-EDAB-473F-9CC5-04F06B413720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "09789843-6A1A-4CDB-97E8-89E82B79DDB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*",
            "matchCriteriaId" : "118211EF-CED7-4EB5-9669-F54C8169D4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*",
            "matchCriteriaId" : "58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "9A405AE2-ECC4-4BB0-80DD-4736394FB217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*",
            "matchCriteriaId" : "E5612FB0-8403-4A7E-B89A-D7BDFAC00078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*",
            "matchCriteriaId" : "FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "AFDA151E-E614-4A24-A34D-B6D5309110CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "09BFA20B-2F31-4246-8F74-63DF1DB884EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3B4BA2-8A61-4F9A-8E46-7FA80E7F5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE93D3D-34B4-47B7-A784-61F4479FF5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "43E84296-9B5C-4623-A2C4-431D76FC2765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "F177AE1C-58C2-4575-807C-ABFFC5119FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A612F6-E4EB-4E34-8F55-79E16C74758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "5C19B266-8FE7-49ED-8678-2D522257491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "15C4D826-A419-45F5-B91C-1445DB480916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9F2B04-A1F2-4788-A53D-C8274A758DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5309ED-D84F-4F52-9864-5B0FEEEE5022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BC012-ADE4-468F-9A25-261CD8055694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14903",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13106",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/22f00553-a09d-11d9-a788-0001020eed82.html",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/22f00553-a09d-11d9-a788-0001020eed82.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the haslo parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:jportal:jportal_web_portal:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2880CF-460E-448A-89D9-E53E84B1BE93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111331738223323&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14919",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111331738223323&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via (1) cds.php, (2) Guestbook-EN.pl, or (3) phonebook.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:0.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E0E619FE-3692-43AF-BB0F-B3BA4976E555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:0.2:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "8BB0F1B6-EB64-475B-A5C9-5FDE2EE87A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:0.3:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "50937F53-8C29-4112-8F29-509C0EC99077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A47E800-FD01-4243-9C99-73A5E8E36664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B212CBB3-19FB-4272-B47A-C5B42E1C7BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC6DC68-A191-491E-9AD6-C8826514A9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612A604C-8ECA-4A3D-8585-04072E03DEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F3AF9A-4EE4-433D-A120-A8F28B284E08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A739B30-66E4-4BAC-BDED-04EC5CDE5FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B99B27EF-0F67-4C91-8321-9D7E58450E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D5DDAC-5FA4-4610-90A8-ADCF23E68446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E18825-FE21-4B76-87F6-994F0DE17EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7759E75B-C7C8-4270-A1FE-BD6DB4470F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84EDFD-F543-4BD2-BE38-F99E669DFB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2E72E-7E5E-4492-AA8A-1D62ACE0E2AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B534C774-B798-4020-A19F-C79F7E196780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED27B4D0-D9EA-45DB-A94E-2A481CD35BE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111330048629182&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13126",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13127",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111330048629182&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:0.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E0E619FE-3692-43AF-BB0F-B3BA4976E555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:0.2:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "8BB0F1B6-EB64-475B-A5C9-5FDE2EE87A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:0.3:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "50937F53-8C29-4112-8F29-509C0EC99077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A47E800-FD01-4243-9C99-73A5E8E36664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B212CBB3-19FB-4272-B47A-C5B42E1C7BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC6DC68-A191-491E-9AD6-C8826514A9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612A604C-8ECA-4A3D-8585-04072E03DEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F3AF9A-4EE4-433D-A120-A8F28B284E08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A739B30-66E4-4BAC-BDED-04EC5CDE5FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B99B27EF-0F67-4C91-8321-9D7E58450E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D5DDAC-5FA4-4610-90A8-ADCF23E68446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E18825-FE21-4B76-87F6-994F0DE17EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7759E75B-C7C8-4270-A1FE-BD6DB4470F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84EDFD-F543-4BD2-BE38-F99E669DFB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2E72E-7E5E-4492-AA8A-1D62ACE0E2AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B534C774-B798-4020-A19F-C79F7E196780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED27B4D0-D9EA-45DB-A94E-2A481CD35BE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111330048629182&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111330048629182&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salim_gasmi:gld:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2C451C-B098-458B-8076-C58D2D76313F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salim_gasmi:gld:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E1879E-6004-4877-904C-FAE7074F5F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salim_gasmi:gld:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFB0837-8CC7-4897-AAFA-4A2B2B20669E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salim_gasmi:gld:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED36FC52-E63D-480F-9141-C3BD9DE60DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salim_gasmi:gld:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D6DCA58-DE5D-460C-ACA7-9AE6C1566771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salim_gasmi:gld:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "777D93B6-589F-4B76-841A-4343F3A24740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111339935903880&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111342432325670&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14941",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-10.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Apr/1013678.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gasmi.net/down/gld-history",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15492",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111339935903880&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111342432325670&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Apr/1013678.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gasmi.net/down/gld-history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being updated by unprivileged users, which allows local users to modify the policy by exporting the policy file, changing it, and importing it back into SSA."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sygate_technologies:security_agent:3.5_build_2576:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8FEAEB-BF6C-4DDA-BA09-6C02F6A79C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sygate_technologies:security_agent:3.5_build_2577:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC45414D-760E-4C63-A183-F2E4621EBC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sygate_technologies:security_agent:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ABEC70D-9EC3-4C6A-B810-9514F3315045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sygate_technologies:security_agent:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10256DDB-895F-4F21-A275-DE5461410E9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111335219201828&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111335219201828&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web script or HTML via the pg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:desert_dog_software:pinnacle_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF0AAC1-F456-4BE2-ADBD-805AC5617219"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14924",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://systemsecure.org/board/index.php?showtopic=8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15485",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13138",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://systemsecure.org/board/index.php?showtopic=8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject arbitrary web script or HTML via the yr parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyphpcalendar:easyphpcalendar:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B336B6CD-ECAF-46A4-B280-1A060CBBB0BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.easyphpcalendar.com/Change%20Log/changeLog.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013704",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15544",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv4.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://docs.easyphpcalendar.com/Change%20Log/changeLog.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information via an invalid ev parameter, which reveals the full pathname of the web server in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyphpcalendar:easyphpcalendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.7",
            "matchCriteriaId" : "1DCDC071-F59F-46B4-A10D-32FA4C2981AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.easyphpcalendar.com/Change%20Log/changeLog.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013704",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15545",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv4.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://docs.easyphpcalendar.com/Change%20Log/changeLog.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "Version 6.2.8 and above are fixed."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOTE: this issue has been disputed by the vendor.  Cross-site scripting (XSS) vulnerability in calendar.pl in CalendarScript 3.20 allows remote attackers to inject arbitrary web script or HTML via the template parameter, a different vulnerability than CVE-2005-1146"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calendarscript:calendarscript:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D5A97F-B944-4CEF-BEBD-11023BCCC8AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013705",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15547",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv3.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOTE: this issue has been disputed by the vendor.  Cross-site scripting (XSS) vulnerability in the login command in calendar.pl in CalendarScript 3.21 allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-1145"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calendarscript:calendarscript:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D5A97F-B944-4CEF-BEBD-11023BCCC8AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013705",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv3.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or (2) template parameters, which leaks the full pathname and debug information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:calendarscript:calendarscript:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D5A97F-B944-4CEF-BEBD-11023BCCC8AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013705",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv3.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62233D77-9838-48AB-9A2D-F4EAA9E237EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F23BF-1C25-4A5E-9EC4-35A1A821A235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DCAE37-B4E9-490E-B441-CA6DD4DBBE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47E7512-FDB5-45F2-80B2-9BDAB856E856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E7930F0-59AD-45D6-B79D-92DB88EFF4D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75786060-F4F7-4491-8239-2081EBD3AE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "742C3558-301D-4930-859F-7A8AAC231689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFBFFE-DCBB-460A-9E43-9CC5A1046755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A56925-4CE9-4843-94BE-E35DBF6CFA64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785115A5-380A-462E-88F6-718320DD7E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925A50B9-0CEF-42FF-8359-52BAFB4FEBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C28957-2724-406D-BAD4-DDCDE8CFA843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE669F3-75FA-4237-8424-109FE52F59ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18814B9C-FE3E-4BB4-99E5-E3A88666B0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80A9CDA-C3E2-474F-8E43-440C72B0E8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15CFA451-FFD4-452D-A744-5FDA80379BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29716C7-2882-4B69-A4F8-BDBF0FB9CF88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A455F8B9-8A31-4BF1-895B-5D4579BE9C56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Apr/0195.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013699",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15542",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.s9y.org/5.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13161",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Apr/0195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.s9y.org/5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:acnews:acnews:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FD98F5-50E1-4656-90A7-A2926BE2EE56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013681",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15494",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13148",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, which allows remote malicious web sites to write arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nprotect:netizen:2005.3.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89794771-BF07-452E-AD47-DF466832A154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%23AF02FB4B/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111444390329376&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/80_e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%23AF02FB4B/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111444390329376&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/80_e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file."
      }, {
        "lang" : "es",
        "value" : "El soporte de ELF de 64 bits en los kernel de Linux 2.6 anteriores a 2.6.10 en arquitecturas de 64 bits no verifica adecuadamente solapamientos en asignaciones de memoria VMA (virtual memory address), lo que permite a usuarios locales causar una denegación de servicio (caída del sistema) o ejecutar código de su elección mediante un fichero ELF o a.out artesanal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:mn100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D073442B-D7E7-4E07-AF2D-E22FE65B09A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:network_routing:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E942E0E7-0808-479C-B061-66119EBA12E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E586558A-ABC3-42EB-8B4D-DC92A0D695E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:s8710:r2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B1272B-8B71-4D2D-A5E4-0E7828500C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:s8710:r2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C7B9C0-91A2-4529-B879-60DE043E719C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:avaya:modular_messaging_message_storage_server:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25F5CF2-F891-41CA-A40C-13966F72FDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:avaya:modular_messaging_message_storage_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7417958C-5321-41D6-9D1A-D16BF5511E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4177C378-7729-46AB-B49B-C6DAED3200E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3528DABD-B821-4D23-AE12-614A9CA92C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9E661D58-18DF-4CCF-9892-F873618F4535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F0D201-B1DC-4024-AF77-A284673618F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "052E3862-BFB7-42E7-889D-8590AFA8EF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB0B27C-04EA-426F-9016-7406BACD91DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*",
            "matchCriteriaId" : "81B543F9-C209-46C2-B0AE-E14818A6992E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "DB89C970-DE94-4E09-A90A-077DB83AD156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:intuity_audix:*:*:lx:*:*:*:*:*",
            "matchCriteriaId" : "C1A3B951-A1F8-4291-82FA-AB7922D13ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F3F3BB-E004-4FD9-9580-F2D5F3ED3701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C0BD87-CE4B-49D2-89BE-EF282C43AD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E6C4A8-59F4-43EE-8413-E95289037598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE76357A-27E6-4D85-9AA0-1BB658C41568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56C5FDB-24E2-479D-87CA-164CD28567D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF6C16F-8EDF-4A24-BFEF-6A304D654EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D982AE39-BB57-49E7-B5FE-5EF1ADE2F019"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.4/cset%4041c36fb6q1Z68WUzKQFjJR-40Ev3tw",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4041a6721cce-LoPqkzKXudYby_3TUmg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-017.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-043.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12261",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.4/cset%4041c36fb6q1Z68WUzKQFjJR-40Ev3tw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4041a6721cce-LoPqkzKXudYby_3TUmg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files."
      }, {
        "lang" : "es",
        "value" : "El script mysqlaccess de MySQL 4.0.23 y anteriores, 4.1.x anteriores a 4.1.10, 5.0.x anteriores a 5.0.3, y otras versiones incluyendo 3.x permite a usuarios locales sobreescribir ficheros arbitrariamente o leer ficheros temporales mediante un enlace de enlaces simbólicos (symlink) en ficheros temporales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.23",
            "matchCriteriaId" : "03DE5DAF-002F-4151-BDF1-72E7B9D3CA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.10",
            "matchCriteriaId" : "DE3B3226-45DB-46F8-A92D-AA15F6652F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.3",
            "matchCriteriaId" : "0B01C1FA-A584-44D8-A7A6-996B3C991F8F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.66",
            "matchCriteriaId" : "966DE621-0387-4AED-AC5F-67D87391AAA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.mysql.com/internals/20600",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608297217224&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/13867",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-647",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:036",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12277",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18922",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.mysql.com/internals/20600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608297217224&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/13867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función exported_display en xatitv de gatos anteriores a 0.0.5 permite a usuarios locales ejecutar código de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gatos:gatos:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F41C8F45-12BE-447E-BB5D-FDA2B9A753AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13884/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-640",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13884/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en playmidi anteriores a 2.4 permite a usuarios locales ejecutar código de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B37DAF-6D56-45B3-800D-338ABE276C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3F84A8-3A36-404E-AF22-0D05E414B842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18AEC72-3B87-4628-80A3-6784D02BFF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD696C5-D8DB-4713-95C5-CBAC430F3BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D30C06-489E-47B0-A45F-B8E28B2F62F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDADEFF2-1049-4C80-8108-147719A989C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E74B77F-D1B2-40EC-B1AB-F2477F0797D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7A0DA5-6D80-42AF-81D9-38A96D12575D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412261B9-10E2-41FE-A6D7-A0CB02408177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235BD887-82E3-4031-848A-EC13B540CA64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597F6E93-C849-48FE-8499-E1F6E02D66C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A0CDBB-D140-45B3-A9A7-F2B4441F054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C162073-0091-4635-8B4F-3BE2F9E01F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B78C22-5721-476B-9AC2-5A3862343172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C88827B-839A-4737-A28F-1E37621A834F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "058CE188-D500-452F-935C-7E170A1212C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05825831-ECA2-4B31-97E3-069667A4C790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A01115-2E9F-4784-BB62-42CBCE80EC9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC38D10-F13C-49A4-B3D8-12C00D73F62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF5C6DD-EC92-49D2-9537-40D28ACFA0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9F5C0A-9A23-429B-8A13-758441B3860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDD85AB-7348-4544-B08A-D2116B413499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AD75AD-394B-42AF-AFBB-0D7F8604FD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC599380-23BF-4E0E-AE69-D4786FB3C23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753C4660-8469-45D3-A531-DE2D2F5F82E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433FC9C7-796C-4670-B4B7-25EC81994FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playmidi:playmidi:2.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374FE48F-B5BA-4F23-B1DB-5137A418ED2D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3528DABD-B821-4D23-AE12-614A9CA92C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9E661D58-18DF-4CCF-9892-F873618F4535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB0B27C-04EA-426F-9016-7406BACD91DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-641",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/13049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/13049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request with invalid headers."
      }, {
        "lang" : "es",
        "value" : "MySQL MaxDB 7.5.0.0 y otras versiones anteriores a la 7.5.0.21, permite a atacantes remotos causar la Denegación de Servcio (DoS) por caída, mediante una petición HTTP con cabeceras no válidas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBA6898-4D32-4A3D-8529-1FC7A63894B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2635818-D83B-4C7A-9693-4EB202DA16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E5409-B8F1-4A9E-9A1E-0B023E5190DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E23371-678E-476B-B067-FCD655861CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6C9B28-F515-4F47-83F6-F2D4164B8D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160A9738-B169-4022-85BC-14B0BBFD1C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8442206-133D-4048-8064-D5724FDF0E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EAE96CE-D059-4C87-A7EC-5578EFD93849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B406A8D-48C1-4E62-BD40-2EA7D1A1A1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=187&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=187&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash."
      }, {
        "lang" : "es",
        "value" : "La función sapdbwa_GetUserData de MySQL MaxDB 7.5.0.0, otras versiones anteriores a 7.5.0.21 permite a atacantes remotos causar una denegación de servicio (caída) mediante un parámetro inválido al código de manejador de WebDAV, lo que dispara una desreferencia nula que causa que el Agente Web SAP Db se caiga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBA6898-4D32-4A3D-8529-1FC7A63894B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2635818-D83B-4C7A-9693-4EB202DA16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E5409-B8F1-4A9E-9A1E-0B023E5190DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E23371-678E-476B-B067-FCD655861CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6C9B28-F515-4F47-83F6-F2D4164B8D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160A9738-B169-4022-85BC-14B0BBFD1C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8442206-133D-4048-8064-D5724FDF0E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EAE96CE-D059-4C87-A7EC-5578EFD93849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B406A8D-48C1-4E62-BD40-2EA7D1A1A1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=187&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=187&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the (1) config.bin (2) profile.wlp?PN=ggg or (3) event.logs URLs."
      }, {
        "lang" : "es",
        "value" : "El interfaz administrativo basado en web de 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, y posiblemente versiones anteriores a 1.03.07A, permite a atacantes remotos saltarse la autenticación y obtener información sensible accediendo directamente a las URLs de  (1) config.bin, (2) profile.wlp=PN=ggg o (3) event.log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:3crwe454g72:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D20F01F7-4C74-4BD2-891F-B5F1204F3910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:3crwe454g72:1.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C47944D-A4CC-4F65-9468-3252A786EB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:3crwe454g72:1.0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A26FA1-D651-4673-BBE3-60B94F39619A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=188&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12322",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=188&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:09.907",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0975.  Reason: This candidate is a duplicate of CVE-2005-0975.  Notes: All CVE users should reference CVE-2005-0975 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause a denial of service (crash) or execute arbitrary code via negative vi.in_size or vi.out_size values, which may trigger a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "La función coda_pioctl en Linux kernel 2.6.9 y 2.4.x anteriores a 2.4.29 puede permitir a usuarios locales causar una denegación de servicio (caída) o ejecutar código de su elección mediante valores vi.in_size o vi.out_size negativos, lo que puede disparar un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "74F962BE-2187-4C8F-BAE7-EFA3D79FCB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/linux-kernel/2004/Dec/3914.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/linux-kernel/2005/Jan/1089.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/linux-kernel/2005/Jan/2018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/linux-kernel/2005/Jan/2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/linux-kernel/2004/Dec/3914.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/linux-kernel/2005/Jan/1089.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/linux-kernel/2005/Jan/2018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/linux-kernel/2005/Jan/2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing \"%\" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected."
      }, {
        "lang" : "es",
        "value" : "La característica de Botones Rápidos en Konversation 0.15 permite atacantes remotos ejecutar ciertos comandos IRC mediante un nombre de canal conteniendo variables \"%\", con son expandidas recursivamente por la función Server::parseWildcards cuando el botón \"Partir\" está seleccionado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:berlios:konversation:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46AE693-7BBD-431A-BC50-B524B057F218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110626383310742&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050121-1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110626383310742&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050121-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts."
      }, {
        "lang" : "es",
        "value" : "Ciertos scripts Perl en Konversation 0.15 permiten a atacantes remotos ejecutar comandos mediante metacaractéres de shell en (1) nombres de canal o (2) nombres de canciones que no son entrecomillados adecuadamente cuando el usuario ejecuta scripts IRC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:berlios:konversation:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46AE693-7BBD-431A-BC50-B524B057F218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110626383310742&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050121-1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110626383310742&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050121-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users."
      }, {
        "lang" : "es",
        "value" : "El diálogo de Conexión Rápidad en Konversation 0.15 usa inadvertidamente la contraseña suministrada por el usuario como el apodo en lugar del apodo suministrado por el usuario cuando se conecta a un servidor IRC, lo que podría filtrar la contraseña a otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:berlios:konversation:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46AE693-7BBD-431A-BC50-B524B057F218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110626383310742&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050121-1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110626383310742&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050121-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0771FC-F8FB-4065-B6E1-EA21ECE77AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B81A56D-3F2E-455B-A960-69728437B31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7799D4-7B04-463B-BA19-AE36CD9DD694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8093EE-AA6A-4E2C-A891-163A42EA89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AA7680-E004-44AC-9AE9-C0186459C4B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3655286B-D44A-4DCB-8DF4-D45A36398933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDCE5E-6D74-4E13-B830-E412C33EF337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E71F3AC2-E633-41D2-B49B-A92E5FB974F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87284115-14F4-4FB6-A8D9-7C7A3B5151E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB618BD-9C6D-458D-A521-FE436C428A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8717751-A250-49F6-97E9-C14C8A44E550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A4829D-4DC1-4CD2-B136-48719A254EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D360F838-C65C-4E76-B460-ADE1AB7657C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67618D3A-9C74-4701-B42F-385E0221D75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C501D54D-5294-4BFD-9858-BE70C411B928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CB5358-7833-4D1E-8F22-CB2714E36F3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2265D309-4E50-45A3-A884-9F1FA361D453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45663027-1EFD-415A-8AB3-BCE544F4AD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EAAEE-BAB5-42EC-B171-93D9E32AC6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9E1D6A-2C46-4062-87B2-726FCC5967B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D24DCC-6C2A-466A-B59F-3D07F62175D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC7B751-34D9-4BBB-8608-97823E5F5F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADF48B4-C9DA-41B7-9124-882ADF625F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446879FE-02A7-4576-A726-6E7C918C4E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F495D6-7734-411D-B527-14C74A345E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EFA76EB-C5A5-4652-8EF1-66E2B061BE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB6D7E3-697C-4AA9-9925-371AB99CA395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DD635-BB74-4311-9E62-0DFAEB8DC121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6BFB6A-0AFC-4E52-AD48-252E741B683B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9797A37-FD26-4527-B2FA-E458F7A88D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC6CCDC-237A-408E-9CAF-D41EC3A9D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540AA8A9-A4AB-4DB2-B37E-11876348DF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E006EBC-5624-4AEE-85A8-10E33FCB20A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8DC1BE-EA6C-41B8-9D50-AACE2F2BA424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155CB225-3F1B-4841-90F7-49C4CF90B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21905542-2429-4695-B253-AEC648B0BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317FED1B-9C39-40E5-980D-C5ED808D8FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48242DB9-5EB2-4C95-A944-C52B798A32A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F697BB-5C94-42CD-AD9E-72C3D3675D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE764CDC-1018-4502-8F41-8A48E38E7AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBAAC5B-6012-410F-B765-689A8D55B095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885123F3-346F-451E-B72A-D0405F0B72E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF792263-D6ED-4AD1-98C1-0E22670EF91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C66D46-D3C7-4FCC-B80D-EBA542E77C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B6C02F-D194-4CA7-9DEC-A436A4E8C99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D86CB-EEAD-4C40-855D-E98E4ED8B58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F59C3E7-0AC0-4886-B4B4-56904AC93C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5207FB50-946A-4AB2-AED9-9BA78B88F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8096AB-99B9-4D08-AA13-6AFF0DD65BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A356D04A-7882-4A14-AD5F-2079EA0E79C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C4F43-0807-400C-890B-D13BF5B9BF72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-415.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-489.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1224",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www1.uk.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-post",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/111-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-415.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-489.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www1.uk.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-post",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/111-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1043",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC217F-C257-4A3C-9CBD-08010C30BEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4007B0D-9606-46BD-866A-7911BEA292BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peachtree:peachtree_linux:release_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A208F7F-05FE-4C28-B636-33B029843725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EE2D72-B1E6-4380-80B0-E40A23DDD115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111575DE-98A2-4C54-BDE1-CACC74D22B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1976D15D-9EE6-4A49-B59F-34F0505FD5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962FC8D7-BE5D-4E7D-9ADC-511681C593BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "451453AC-65FF-4E3B-9AC1-2DDB2E2182E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7716120D-5110-42B0-A574-9AA2AC8D3C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4C8426-CAF2-4366-94C0-1BA1C544FB6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC7D746-B98B-4FAF-B816-57222759A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830D48B8-D21D-4D31-99A1-20C231804DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC94EF9-5872-402F-B2FC-06331A924BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F163E145-09F7-4BE2-9B46-5B6713070BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124E1802-7984-45ED-8A92-393FC20662FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F08806-9458-439A-8EAE-2553122262ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B67020A-6942-4478-B501-764147C4970D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E74E0A28-7C78-4160-8BCF-99605285C0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "76159C25-0760-47CB-AFCE-28306CDEA830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7786607A-362E-4817-A17E-C76D6A1F737D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "8A206E1C-C2EC-4356-8777-B18D7069A4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "6E2FE291-1142-4627-A497-C0BB0D934A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "49BC7C7E-046C-4186-822E-9F3A2AD3577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "2FE69F6F-6B17-4C87-ACA4-A2A1FB47206A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "467A30EB-CB8F-4928-AC8F-F659084A9E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "714C1439-AB8E-4A8B-A783-D60E9DDC38D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAE5B0-4D46-4A93-A343-C8E9CB574C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819868A7-EB1E-4CA9-8D71-72F194E5EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*",
            "matchCriteriaId" : "FB647A8B-ADB9-402B-96E1-45321C75731B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0944FD27-736E-4B55-8D96-9F2CA9BB9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "373BB5AC-1F38-4D0A-97DC-08E9654403EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E71DA3-F4A0-46AF-92A2-E691C7A65528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0519FF7D-363E-4530-9E63-6EA3E88432DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "1975A2DD-EB22-4ED3-8719-F78AA7F414B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "19F606EE-530F-4C06-82DB-52035EE03FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A0E896D5-0005-4E7E-895D-B202AFCE09A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5A8B313F-93C7-4558-9571-DE1111487E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CD54FE-D682-4063-B7C3-8B29B26B39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "37F124FE-15F1-49D7-9E03-8E036CE1A20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C55338-3372-413F-82E3-E1B476D6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.29&r2=1.118.2.30&ty=u",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154025",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10307",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/112-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.29&r2=1.118.2.30&ty=u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/112-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote attackers to inject arbitrary web script or HTML via the postdata parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:authentication_agent_for_web:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BA31AA-7ACF-46E2-B12B-9DF2ECA38FCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013724",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/366372",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oliverkarow.de/research/rsaxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13168",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/366372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oliverkarow.de/research/rsaxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka \"double expansion error\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0",
            "matchCriteriaId" : "A1795FAF-0500-4B9C-BD60-683E3C48F18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84373192-14CC-44E3-BEC5-60D10C15E286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF12CBB-9196-4E04-800A-1C00F23D122E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C164D0-C8E8-42A4-A32F-703DCFBE143C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D5B8BF-43EB-4D50-9791-B22B77651787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C877910B-52A8-4B0F-9306-B7BED762B97F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE29F0D-7E7C-4A02-98AC-673E2E96ED6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87631C2-ED8C-446E-B3C6-72A2DF672397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE8E88-383E-403C-9FE0-B303FD8DA937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27D9B36-43BD-4573-9E1C-3D65D458BD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE9AD22-98BA-4780-904A-765A1E331B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F19324-8BBE-4244-9AD2-99A8E537F867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D761DCC9-C21C-46A5-8CFF-66AE0AA9E858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C51E11E-E608-4648-A137-934D60441463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4AE960-E143-4B73-BDB9-22C070A29E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.4:2:*:*:*:*:*:*",
            "matchCriteriaId" : "E5283F7B-5BC6-4213-B5D3-93B963024FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A53C73D-4BBB-47C7-AF5B-D81FDA93C83D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=87916",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-14.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15511",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=87916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which allows remote attackers to obtain sensitive information and crack passwords via a direct request to these files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sphpblog:sphpblog:0.4_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD52447E-9A53-42F8-A43E-52FC9518400B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv12-y3dips-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111359320312609&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/ftopict-651.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://echo.or.id/adv/adv12-y3dips-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111359320312609&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/ftopict-651.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed and can facilitate phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D4682E92-E5E7-4351-959E-25A79CA4271B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.geotrust.com/resources/advisory/sslorg/index.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.geotrust.com/resources/advisory/sslorg/sslorg-advisory.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_31_opera.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13176",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40503",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.geotrust.com/resources/advisory/sslorg/index.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.geotrust.com/resources/advisory/sslorg/sslorg-advisory.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_31_opera.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A585A1-FF82-418F-90F8-072458DB7816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F7EB61-55A5-4776-B0E7-3508920A6CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "A442DE97-4485-4D95-B95D-58947585E455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE31DFF8-06AB-489D-A0C5-509C090283B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8A6564-129A-4555-A5ED-6F65C56AE7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "237174A4-E030-4A0B-AD0B-5C463603EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF49BF03-C25E-4737-84D5-892895C86C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7F8F11-1869-40E2-8478-28B4E946D3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2019E0E-426B-43AF-8904-1B811AE171E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "9062BAB5-D437-49BE-A384-39F62434B70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1504C-14FE-4C21-A801-944041F2946F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "6E53C673-9D6D-42C8-A502-033E1FC28D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5FC1A-1253-4390-A4FC-573BB14EA937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4AC452-6042-409D-8673-ACAD108EE3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE1009B-371A-48E2-A456-935A1F0B7D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C844A170-B5A7-4703-AF3B-67366D44EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44308D13-D935-4FF8-AB52-F0E115ED1AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3D41CB12-7894-4D25-80EC-23C56171D973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD9C12-EDAB-473F-9CC5-04F06B413720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "09789843-6A1A-4CDB-97E8-89E82B79DDB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*",
            "matchCriteriaId" : "118211EF-CED7-4EB5-9669-F54C8169D4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*",
            "matchCriteriaId" : "58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "9A405AE2-ECC4-4BB0-80DD-4736394FB217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*",
            "matchCriteriaId" : "E5612FB0-8403-4A7E-B89A-D7BDFAC00078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*",
            "matchCriteriaId" : "FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "AFDA151E-E614-4A24-A34D-B6D5309110CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "09BFA20B-2F31-4246-8F74-63DF1DB884EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3B4BA2-8A61-4F9A-8E46-7FA80E7F5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE93D3D-34B4-47B7-A784-61F4479FF5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "43E84296-9B5C-4623-A2C4-431D76FC2765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "F177AE1C-58C2-4575-807C-ABFFC5119FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A612F6-E4EB-4E34-8F55-79E16C74758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "5C19B266-8FE7-49ED-8678-2D522257491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "15C4D826-A419-45F5-B91C-1445DB480916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9F2B04-A1F2-4788-A53D-C8274A758DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5309ED-D84F-4F52-9864-5B0FEEEE5022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BC012-ADE4-468F-9A25-261CD8055694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:04.ifconf.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14959",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:04.ifconf.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in myBloggie 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the comments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE6763A-BD4B-4A6B-8AF3-04B4BCEC4FDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/395988",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:optical_character_recognition_project:optical_character_recognition:0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44D6D0A-F07F-47A6-98F1-6405C4D89F78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111358557823673&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.overflow.pl/adv/gocr.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111358557823673&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.overflow.pl/adv/gocr.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than implied by its width and height values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gocr:optical_character_recognition_utility:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA591B69-3336-443D-8FBC-23AE40853667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gocr:optical_character_recognition_utility:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F6B430-EC77-4970-98AB-69575461BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gocr:optical_character_recognition_utility:0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DE789F-CF85-48F0-B282-C72752E8B46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gocr:optical_character_recognition_utility:0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CAF27E-073A-4617-BC94-98DF1C685497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gocr:optical_character_recognition_utility:0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9C2E8-5EF0-44FA-9AD5-0C883A8A5668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111358557823673&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.overflow.pl/adv/gocr.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111358557823673&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.overflow.pl/adv/gocr.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F35F0F1-B742-4782-A699-FA90A36D0B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DCA47-E367-42A3-BDFE-DA7CFC38663F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "329602D7-8D1B-4A1A-B321-84D663F7B0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EFBDF5-A875-41D9-B5D7-8DF6E699D879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242D2FE6-501F-41A0-BC73-5DFD4BE57C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2436AAC-E418-4ABB-8A1E-2C0FBFAA284D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949C40-048C-4B4A-AB7C-E40DF6DE2E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:4.0.4_2004-05-24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC75CB96-B75D-4A5F-AACC-4106CB5ADE58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D128BAA3-AD52-4140-A416-ABB84309BD86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0752",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-04-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-34.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13228",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100024",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10279",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0753",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-04-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA94DE3-B1DA-40CC-BD60-291B0563500F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A305C6F7-35DA-48E2-B345-14671629226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F7CA6E-7D45-46C9-A437-0D0C4D3F25CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62135DD0-140D-42C2-9302-31B5E2DE1A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B53C85-AA0E-40DD-B477-058586197714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D1234F-1BB0-432B-B7B7-A97E3ADD5561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D472B97-F7C2-4973-9D71-AB3CF1F8774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0DCF26-59A8-46AC-99D7-97C203A0D702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31BAACA-7518-48D2-ADEE-F59F4569D3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2748A8-5047-4338-A08E-986497AE4B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525C4E91-2186-4D3A-9DF0-1C6A75A3F919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB231E7F-1A6F-4A79-8ED2-F6CAD311A5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7105E4-25F8-4AE3-9EDD-D44BF3E17145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C22BAF3-7B9C-4B2E-B5C6-1F37B896C301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFFAE96-873A-4253-BCC7-1049DA81D9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1163535-583A-4504-BE7B-8919143CDF9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/attachment.cgi?id=54352&action=view",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14976/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-16.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_cvs.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-387.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9688",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/attachment.cgi?id=54352&action=view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14976/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_cvs.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-387.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable protection by modifying certain files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22BB62-9790-4D89-B1B4-D5E0F4FFB3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=233&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=233&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service (CPU consumption) via certain e-mail messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D26DCD-85B0-4908-A414-119862437C28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B58BAF1-CF68-4F8C-8BCD-FF3C015FE72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9C9084-B518-44F2-9F65-032A644FEC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55CFA68-E07E-46CE-87F6-00AE9A268CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58ECCE69-EAB9-427E-8922-F463E184C9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E50A0F-7AFF-4F17-8833-839DDBD538C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9063B23B-E585-41E4-98FF-DF18602C6E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB993B9-0CF5-4E71-A612-F3033F4F202B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B079207-FAF3-4FE2-B420-342440958C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A82C0BC-50D5-4FAC-A654-387B49CB7047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC1748E-32F0-4144-A597-89E8B8705FFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C92F3B-23E3-4978-89AA-FC17B8EDF580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1FA201-CBCF-4D61-9848-F661A16EBEF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2154DF-2306-4E8B-B78A-1BF20E697157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C4389A-4BF4-4C38-8FF5-72B92548EFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67230E76-2C30-4038-BC5B-BAC02EDDFAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEA1EB3-5F4F-40D6-833C-225AC348760D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC515E75-119E-4CB9-985E-00E6A9349178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937A6092-48C9-4721-B069-0B46D3520E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38A0AAC-ACA8-44D3-B36A-741D01BE166F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AE0CAA-B5A4-4E3A-B997-A2858E88CCC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AC0D46-2096-4006-8FED-A67AFCE2ED98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F931B5E-6F02-48F6-8DAB-C0D796DFC2A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013708",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kerio.com/kms_history.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kerio.com/kms_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0755",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-04-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "BA5D907A-72C4-463A-B989-2D6296B3204A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6051B4-1B15-44C0-B2CD-5504E68C60F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:mac_os_x:*:*",
            "matchCriteriaId" : "50511368-4765-489B-B2ED-8214887BCB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:unix:*:*",
            "matchCriteriaId" : "28E2C43D-3BF4-44FA-A6D2-275BF5FB33DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:de:*:*:*:*",
            "matchCriteriaId" : "EF2A171E-6E39-4FCC-88CC-655D18232FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*",
            "matchCriteriaId" : "4EBB6E97-C8C0-49A7-BCDA-794C4986BAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "0C9031C2-95D1-46D0-965A-F4BAA76FB29F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B6C4B6-9031-451B-B58B-45DA88173E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01513F87-049E-46A9-A573-A7AF27EB30C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111401615202987&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://pb.specialised.info/all/adv/real-ram-adv.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/050419_player/EN/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-April/msg00040.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-363.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-392.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-394.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11205",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111401615202987&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://pb.specialised.info/all/adv/real-ram-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/050419_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-April/msg00040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-363.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHProjekt 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatroom text submission form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprojekt:phprojekt:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B506A0-DFAC-40C6-9959-923C194AD745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111402374504496&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15720",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111402374504496&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the (1) dir or (2) file parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_labs:profile:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7314D686-811B-4D92-9351-0696DC3FABCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15027",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15697",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13276",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv7.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv7.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via \"..\" sequences in a GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:castlehill:secure_net:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACCF31CC-8B46-4F29-ABC2-AB27F8AD30FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via \"..\" sequences in a GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powertech:powerlock_networksecurity:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D9FA21-CD68-4AB2-87FA-B6F5B8341D32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via \"..\" sequences in a GET request.  NOTE: the vendor has disputed this issue, saying that \"neither NetIQ Security Manager nor our iSeries Security Solutions are vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:pssecure:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4946B4D2-ACD7-4BA2-AEA9-490BAD41FD22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013810",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0754",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-04-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:quanta:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0716B886-DF42-4BB2-BE9F-423A4CBE5001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4007B0D-9606-46BD-866A-7911BEA292BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F69843-978D-4686-BC5B-1D09DA4A21BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE0AED-7918-41E9-A902-AC4070E03132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E19472-47B4-4398-A188-CA5A5D3E7060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17407A2-089E-43A5-9BD5-EFF966F5CC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4B436D-8D6A-473E-B707-26147208808B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E26B353-4985-4116-B97A-5767CDC732F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7180B3-03AC-427C-8CAD-FE06F81C4FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442021C9-BE4D-4BC9-8114-8BEFA9EC1232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "6E94583A-5184-462E-9FC4-57B35DA06DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E905FAAD-37B6-4DD0-A752-2974F8336273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "3BD12488-1ED8-4751-ABF5-3578D54750A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "AE3733CF-4C88-443C-9B90-6477C9C500D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9C500A75-D75E-45B4-B582-0F0DF27C3C04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdewebdev-kommander.diff",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111419664411051&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15060",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050420-1.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13313",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdewebdev-kommander.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111419664411051&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050420-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than CVE-2005-0367."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:argosoft_mail_server:1.8.7.6:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "07FA7F76-B59E-4E14-88C6-B9BAD88E90C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111419001527077&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111419001527077&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.1",
            "matchCriteriaId" : "D06CF554-9443-4425-B8EE-CC9513069569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111420516900814&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013790",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111420516900814&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bk_dev:bk_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4",
            "matchCriteriaId" : "A1EA4A04-A643-4AFD-B41B-D72AAE1B343B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111428133317901&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013793",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/bkdev.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431659/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431863/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111428133317901&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/bkdev.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431659/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431863/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) addToCart.asp or (2) productDetails.asp, the (3) priceFrom, (4) idCategory, or (5) priceTo parameter to searchResults.asp, or (6) the idParentCategory parameter to productCatalogSubCats.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cartwiz:asp_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C541A44-E2BE-4D81-864B-A032759A183F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111428393022389&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013792",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111428393022389&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaden_mckee:bblog:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F5AC1-E91D-4787-BBB2-48B520DFD3DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013811",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15756",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the snmppd_log function in snmppd_util.c for snmppd 0.4.5 and earlier may allow remote attackers to cause a denial of service or execute arbitrary code via format string specifiers that are not properly handled in a syslog call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vladislav_bogdanov:snmppd:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F084D61D-B123-4A32-BFCF-08B133544BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vladislav_bogdanov:snmppd:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0EB5A4-DCAE-42FB-8567-71599F2BB572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vladislav_bogdanov:snmppd:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE75327D-2A61-4C1E-B7E6-C6A3BC140720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vladislav_bogdanov:snmppd:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9562A021-37B7-40BB-BCC3-5C00BA1B00EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vladislav_bogdanov:snmppd:0.4.3_special:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6B4D4F-0745-4DAA-B0D3-AF93AA5858F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vladislav_bogdanov:snmppd:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB031853-BCF3-4F4E-A268-36997971B895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vladislav_bogdanov:snmppd:0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F1219F-16EF-4CF6-B091-61FD178FF330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2005-0x82-027-SNMPPD.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2005-0x82-027-SNMPPD.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a negative protocol value, which is used as an array index."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.0",
            "matchCriteriaId" : "89CC2DDD-9B57-4B4E-BE21-F34B11451677"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://affix.sourceforge.net/patch_hci_3_2_0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445064725591&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0423a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://affix.sourceforge.net/patch_hci_3_2_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445064725591&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0423a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citat.pl:citat.pl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273AEC45-E3A5-41AB-9020-F111CD3B2979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445477910178&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445477910178&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEF4BFD-3D4E-42AB-A14C-F5182D733EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFC653F-2CE5-4B7F-9667-0812F4088E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFA483A-55E3-4369-B98E-CCE29FE83D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332716BF-5B78-4020-B8E2-78C3507ECC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561439C7-E9C7-4DCF-BAEF-71FB13629B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E4B3F3-4CBC-4693-825E-F19050CA3448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF553D1A-F969-44E3-A630-43450019DF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24725EFE-1EFA-46C2-9AC0-64750981CA6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B95056-7F35-49EA-85B5-A656EFF91736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8F0328-C502-47C0-A57A-D40AE89E1DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3C25B3-8E5F-4FF8-A126-5E1857C3D7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEF89F9-71DA-4845-B867-487866F44A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62495452-BE3C-4B50-BB7B-3B652D9A6B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E24D0C0-ADFE-4926-AD21-7F969848F5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE910A6C-25DB-462F-80A9-7D30AFA44BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071E25C1-D6DF-4357-86EC-21A03091A3BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15107",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=323206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13371",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=323206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent (\"%\") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBA6898-4D32-4A3D-8529-1FC7A63894B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2635818-D83B-4C7A-9693-4EB202DA16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E5409-B8F1-4A9E-9A1E-0B023E5190DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E23371-678E-476B-B067-FCD655861CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6C9B28-F515-4F47-83F6-F2D4164B8D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160A9738-B169-4022-85BC-14B0BBFD1C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8442206-133D-4048-8064-D5724FDF0E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EAE96CE-D059-4C87-A7EC-5578EFD93849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B406A8D-48C1-4E62-BD40-2EA7D1A1A1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F2163D-2A4E-4471-974B-36304ACE1F80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.mysql.com/doc/maxdb/changes/changes_7.5.00.26.html#WebDAV",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=234&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=235&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.mysql.com/doc/maxdb/changes/changes_7.5.00.26.html#WebDAV",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=234&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=235&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1275",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-04-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a PNM file with a small colors value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3834A3-8A7E-4914-A20C-EE694150D044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7E2792-B4BC-4C71-990D-0B7462919568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F2FD22-4058-45D6-8352-0AA6382746C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF103AE-6F15-4F2D-A375-F2AF91171EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65929D5C-31B1-4A70-8E9C-AC6749332480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC45DB14-ABB2-4116-930D-349A81CDB982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A27CAC75-BFE8-4865-A6AE-20225BFCDBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6393827E-8F17-4C95-B1E2-D6049B8AA63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F682CD-0117-4770-877F-1F3903BAFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5717E4CF-15CD-4369-801F-7E113F0FAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34B9CBD-54BC-4131-820F-9483E50086BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD7EB24-20F1-493F-BD38-DF39638C319B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E62DFAA-1EFC-40D6-A4B5-9113DF0656B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BD0D69-A809-4DD3-824B-C68E3EF4F724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC271B0-ACAC-478E-B00B-FFBAAE33B5E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9BACC6-DEF1-4C20-B627-3AA55471B372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA96D5B-FD43-418E-980C-22DEBA4FC03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12378D7-6A7E-4636-9551-C224907A3219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55053EA-780E-46A9-91AE-F983DD54D154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8168249B-863D-44E3-8BC3-B877A64981B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A688471B-3A88-410B-AAD3-20A75E1A767E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F76B8D-D105-4106-B52C-FC201F5930AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB7AE5B-83D9-4DF5-A9A0-B0412D8C0B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600590DA-A2F4-488F-B85B-9B3B86A8FC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096FC2CB-49A7-444A-BDA6-802E123A9ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB2E37B-323A-4336-B081-56BD32260E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AB4F80-4136-4007-8C33-E1C8A84C11B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03ADE3A3-8FA5-439A-97ED-6EE93ED43699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A48433-240E-4555-966B-4BA767AA3C6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=90423",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Apr/0407.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.imagemagick.org/script/changelog.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:107",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.overflow.pl/adv/imheapoverflow.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-413.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13351",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10003",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A711",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=90423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Apr/0407.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.imagemagick.org/script/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.overflow.pl/adv/imheapoverflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-413.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:include.cgi:include.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF35D2EB-CD2B-416D-A5D2-6E447A76B3F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445189816161&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445189816161&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:include.cgi:include.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF35D2EB-CD2B-416D-A5D2-6E447A76B3F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445189816161&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445189816161&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:include.cgi:include.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF35D2EB-CD2B-416D-A5D2-6E447A76B3F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445189816161&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445189816161&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inserter.cgi:inserter.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B8C074-1911-4753-826A-BDD2EDB26C92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111444807013846&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111444807013846&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:inserter.cgi:inserter.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B8C074-1911-4753-826A-BDD2EDB26C92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111444807013846&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111444807013846&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the inserter.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inserter.cgi:inserter.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B8C074-1911-4753-826A-BDD2EDB26C92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111444807013846&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111444807013846&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:chora:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "42B7C526-3BCB-475D-9A0A-44B087C3DD75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:chora:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD80717A-BEB2-4D46-B8D2-00818010976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:chora:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "840064DC-5DEE-490C-B7A2-62DD32131096"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/chora/docs/CHANGES?r1=1.45.2.34&r2=1.45.2.37&ty=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/chora/Week-of-Mon-20050418/004050.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.horde.org/diff.php/chora/docs/CHANGES?r1=1.45.2.34&r2=1.45.2.37&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/chora/Week-of-Mon-20050418/004050.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:rootkit_hunter:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CDA13-51E1-4918-AE61-80F01E8431FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:rootkit_hunter:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA51771E-A4A7-4C90-B24A-89D56A79D1FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:rootkit_hunter:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CEF897-59B1-4E1A-A5ED-C48DD6ADB933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:rootkit_hunter:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5883890-8CAA-4E55-8173-DD99A775A02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-25.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13399",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long \"If\" parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.00.23",
            "matchCriteriaId" : "76E015F0-AF14-4850-A1BA-0F341D4499AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E18C3F7-EC51-4164-A092-90E4AB6C3FCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=236&type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=236&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1281",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-04-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/396930",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en hztty 2.0 y anteriores permite a usuarios locales ejecutar órdenes de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yongguang_zhang:hztty:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F97BF3A-698C-47BA-89FE-C1143680B5A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-675",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12518",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ht://dig (htdig) anteriores a 3.1.6r7 permite a atacantes remotos ejecutar script web de su elección o HTML mediante el parámetro config, que no es limpiado adecuamante antes de ser mostrado en le mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htdig:htdig:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1B424C-CCA5-41F5-A022-A57F31E5A8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htdig:htdig:3.1.5_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED8D3ED-DC4B-4D4E-B0C3-61A5723C4EF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htdig:htdig:3.1.5_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "447995AE-E56D-4C78-9842-D0C380D5B36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htdig:htdig:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8A8C9D-5667-42CB-8C6D-9FB6896E05C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htdig:htdig:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A77C93-4737-451F-95FA-529D706E5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htdig:htdig:3.2.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC385F4-2846-48F4-8BE1-403B9CE362AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htdig:htdig:3.2.0b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EBEB9A-82D9-4B18-85F3-85A8C8CB3D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htdig:htdig:3.2.0b4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEF5A3E-91AF-4D19-887A-2629432B7873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htdig:htdig:3.2.0b5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B7F9FD-8F58-4ACF-9787-4EBF906C1623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htdig:htdig:3.2.0b6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C1D7AC-17E8-480C-B2B4-F76F13691494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3528DABD-B821-4D23-AE12-614A9CA92C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9E661D58-18DF-4CCF-9892-F873618F4535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F0D201-B1DC-4024-AF77-A284673618F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "052E3862-BFB7-42E7-889D-8590AFA8EF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB0B27C-04EA-426F-9016-7406BACD91DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CD54FE-D682-4063-B7C3-8B29B26B39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "37F124FE-15F1-49D7-9E03-8E036CE1A20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C55338-3372-413F-82E3-E1B476D6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/SCOSA-2005.46.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-680",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-16.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-073.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-090.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12442",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/SCOSA-2005.46.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. These issues did not affect the versions of htdig as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=144263",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library."
      }, {
        "lang" : "es",
        "value" : "El paquete alsa-lib en Red Hat Linux 4 deshabilita la protección de pila de la librería libasound.so, lo que facilita a los atacantes la ejecución de código arbitrario si existen otras vulnerabilidades en la librería."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alsa-project:alsa-lib:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C02A388-52B1-4518-9C9B-454820DE6CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6172AF57-B26D-45F8-BE3A-F75ABDF28F49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-033.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10355",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files."
      }, {
        "lang" : "es",
        "value" : "Los scripts tpkg-* en el paquete toolchain-source 3.0.4 de Debian GNU/Linux 3.0 permite a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque de enlaces simbólicos (symlink attack) en ficheros temporales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:toolchain-source:3.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48ECA472-981F-420E-B64C-921DC153674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:toolchain-source:3.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E2FD0C-89A1-4B6C-BA8B-E30267FBC65D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:toolchain-source:3.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8462411-03BF-4E6C-B710-A72D57D55668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:toolchain-source:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA464BB-244D-42F3-8A13-76319467B412"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "A6B060E4-B5A6-4469-828E-211C52542547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "974C3541-990C-4CD4-A05A-38FA74A84632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "58792F77-B06F-4780-BA25-FE1EE6C3FDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "C9419322-572F-4BB6-8416-C5E96541CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "BFC50555-C084-46A3-9C9F-949C5E3BB448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "9C25D6E1-D283-4CEA-B47B-60C47A5C0797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "AD18A446-C634-417E-86AC-B19B6DDDC856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E4BB852E-61B2-4842-989F-C6C0C901A8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "24DD9D59-E2A2-4116-A887-39E8CC2004FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F28D7457-607E-4E0C-909A-413F91CFCD82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-679",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12540",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "El parche para corregir las vulnerabilidades de desbordamiento de entero en Xpdf 2.0 y 3.0 (CAN-2004-0888) es incompleto para arquitecturas de 64 bits en ciertas distribuciones de Linux como Red Hat, lo que podría dejar a los usuarios de Xpdf expuestos a las vulnerabilidades originales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ascii:ptex:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE020D3-0F38-4F53-AFB7-B4E98EAC659F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cstex:cstetex:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E16058D9-AC8B-4A7C-865F-93B476348363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BD578F-CCAD-4515-9205-EB4F297C6DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3182CA2-7375-43BC-A0E5-DE11D4B65EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF4C8D0-3030-4DD5-800B-76A582A4CD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734D0C2C-F71F-461A-87EE-202C6B706753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0F402D-5CD0-4477-8B59-C753CECB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959F7AFA-ED20-434C-993F-06C2A8574662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F5A0A4-2884-46CA-A846-8B954EB80CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1741CC9D-C4A8-48F9-86CF-EC20AE2A6BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35E65857-12C7-49DE-AD27-3CACD456231C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CEF035-57A6-470B-916A-E5562C28E866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E26BB15-4CF8-4496-A7F7-EB34C444EF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D414984E-4F6B-4278-8346-968587E4B18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C36DCB-2FDD-44E6-85E8-875575AAE69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4B7C23-0C54-4FBA-A774-9CC1E148376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA0EF14-33E6-4D44-B86E-F04014EA3C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5428EE6-F90A-4BB6-9D8C-8B99E80AB6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A786A770-919E-4E23-949D-D836F316618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A2249C-73DE-434E-A41F-4EDB0ADC0845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.19_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73AB4D3D-FF35-4A50-A144-3AD41F6F2E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB7653F1-70E2-423F-A6A9-30333644B506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gpdf:0.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB6AE42-D493-43E5-A97C-76C8450E5881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gpdf:0.112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E70576E-C253-4F8B-A93E-14CC2EE7114D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gpdf:0.131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832C5512-B473-40E8-BF4F-EC6ABFE46749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053435DD-BFDF-4C39-9919-11C42D569085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9BB1A3C-3348-4545-A513-E504B33F72AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD45E2C8-0B0E-484F-8050-94BF77798183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EAA654E-9DD4-4614-92D7-EF4D676B3A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89C96FC9-40DB-467D-A701-49F97A1B887D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76128BDC-2CA7-4AE7-8C4F-BCB3835CA938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2517C7-27EF-4961-91C3-CA33219AFF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kpdf:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAF6452-F3B0-4F62-893E-BCFA6AB7AE3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdftohtml:pdftohtml:0.32a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE346726-71D6-438B-B600-A7E107332816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdftohtml:pdftohtml:0.32b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E85020-B4DB-4011-BDD0-1C8967D45A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdftohtml:pdftohtml:0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8189A9AB-F685-40E2-944F-8BD3DD6FA0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdftohtml:pdftohtml:0.33a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C33B8585-FA5F-4210-A997-615BCEE1726F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdftohtml:pdftohtml:0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AE4C34-C497-426F-AC0D-1805A50582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdftohtml:pdftohtml:0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2989EFF-07B9-4EF2-B6C1-59E4F52FDC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdftohtml:pdftohtml:0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3970101-5E83-49FD-BCB6-D9176D46B5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC217F-C257-4A3C-9CBD-08010C30BEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "739A56F5-B19A-4B92-B9CB-04ECE4FFE204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86C7D6F-C39E-4403-86C6-F87599570E97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236005A1-C175-44D3-8D0C-C48F943F3D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF2AD80-5E65-4B57-933B-C395E98EF10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C92A0E-1DDA-4F83-A904-24A35C38883A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CC6233-E207-40CC-81FF-A8670EEA4295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64DD9B5C-3DB8-4E15-B4A6-541E4E221C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0304E1E3-8766-40D0-8879-A652B4E9E72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188F1343-8082-4B54-8DA4-E344818ABD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95DA7DE-B786-4EE7-A3F4-C077A7986D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5306C05-4A71-4175-8C22-F2DE0F2FE4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9DEF16-ECD5-4BBE-8986-52A6171B3D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFDBEEC-B2C1-47F0-82D3-FC9147B590A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354487CF-0086-4AE2-872B-0032E3EB89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1169B802-7279-437F-AF59-621A67DC92EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B93B3ED-AF82-49A9-8C7F-E5F652F19669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:advanced_linux_environment:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05AC3EE-6292-4ECC-9680-048A12FCE723"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "A6B060E4-B5A6-4469-828E-211C52542547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "974C3541-990C-4CD4-A05A-38FA74A84632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "58792F77-B06F-4780-BA25-FE1EE6C3FDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "C9419322-572F-4BB6-8416-C5E96541CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "BFC50555-C084-46A3-9C9F-949C5E3BB448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "9C25D6E1-D283-4CEA-B47B-60C47A5C0797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "AD18A446-C634-417E-86AC-B19B6DDDC856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E4BB852E-61B2-4842-989F-C6C0C901A8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "24DD9D59-E2A2-4116-A887-39E8CC2004FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F28D7457-607E-4E0C-909A-413F91CFCD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F69843-978D-4686-BC5B-1D09DA4A21BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE0AED-7918-41E9-A902-AC4070E03132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E19472-47B4-4398-A188-CA5A5D3E7060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17407A2-089E-43A5-9BD5-EFF966F5CC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4B436D-8D6A-473E-B707-26147208808B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E26B353-4985-4116-B97A-5767CDC732F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB0B27C-04EA-426F-9016-7406BACD91DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "409E324A-C040-494F-A026-9DCAE01C07F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
            "matchCriteriaId" : "6474B775-C893-491F-A074-802AFB1FEDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*",
            "matchCriteriaId" : "81B543F9-C209-46C2-B0AE-E14818A6992E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "DB89C970-DE94-4E09-A90A-077DB83AD156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C84296C-2C8A-4DCD-9751-52951F8BEA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6996B14-925B-46B8-982F-3545328B506B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "84A50ED3-FD0D-4038-B3E7-CC65D166C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*",
            "matchCriteriaId" : "777F9EC0-2919-45CA-BFF8-78A02537C513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EE2D72-B1E6-4380-80B0-E40A23DDD115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111575DE-98A2-4C54-BDE1-CACC74D22B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1976D15D-9EE6-4A49-B59F-34F0505FD5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962FC8D7-BE5D-4E7D-9ADC-511681C593BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "451453AC-65FF-4E3B-9AC1-2DDB2E2182E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7716120D-5110-42B0-A574-9AA2AC8D3C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4C8426-CAF2-4366-94C0-1BA1C544FB6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC7D746-B98B-4FAF-B816-57222759A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830D48B8-D21D-4D31-99A1-20C231804DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC94EF9-5872-402F-B2FC-06331A924BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F163E145-09F7-4BE2-9B46-5B6713070BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124E1802-7984-45ED-8A92-393FC20662FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F08806-9458-439A-8EAE-2553122262ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B67020A-6942-4478-B501-764147C4970D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E74E0A28-7C78-4160-8BCF-99605285C0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "76159C25-0760-47CB-AFCE-28306CDEA830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7786607A-362E-4817-A17E-C76D6A1F737D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "8A206E1C-C2EC-4356-8777-B18D7069A4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "6E2FE291-1142-4627-A497-C0BB0D934A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "49BC7C7E-046C-4186-822E-9F3A2AD3577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "2FE69F6F-6B17-4C87-ACA4-A2A1FB47206A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "467A30EB-CB8F-4928-AC8F-F659084A9E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "714C1439-AB8E-4A8B-A783-D60E9DDC38D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAE5B0-4D46-4A93-A343-C8E9CB574C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819868A7-EB1E-4CA9-8D71-72F194E5EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*",
            "matchCriteriaId" : "FB647A8B-ADB9-402B-96E1-45321C75731B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0944FD27-736E-4B55-8D96-9F2CA9BB9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "373BB5AC-1F38-4D0A-97DC-08E9654403EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E71DA3-F4A0-46AF-92A2-E691C7A65528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0519FF7D-363E-4530-9E63-6EA3E88432DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "1975A2DD-EB22-4ED3-8719-F78AA7F414B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "19F606EE-530F-4C06-82DB-52035EE03FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A0E896D5-0005-4E7E-895D-B202AFCE09A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5A8B313F-93C7-4558-9571-DE1111487E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CD54FE-D682-4063-B7C3-8B29B26B39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "37F124FE-15F1-49D7-9E03-8E036CE1A20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C55338-3372-413F-82E3-E1B476D6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "6E94583A-5184-462E-9FC4-57B35DA06DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E905FAAD-37B6-4DD0-A752-2974F8336273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-034.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-053.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-057.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-132.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-213.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11501",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-053.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-132.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-213.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt."
      }, {
        "lang" : "es",
        "value" : "CitrusDB 0.3.5 y versiones anteriores almacenan el fichero de datos temporal newfile.txt en el directorio raíz, lo que permite a atacantes remotos robar información de la tarjeta de crédito mediante una petición directa a newfile.txt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D783C42-422D-4D30-8964-1351DC475F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC024508-ACFD-405E-A98F-D78334B86ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD1D644-40BC-4D8A-B378-EC5B63747B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA66669C-6E8D-4352-B9C3-744CF3769E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45EC24C-DCAF-4A0B-B663-EA3CE56EBB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9232AB-6EBA-44CB-9037-4493A9BD6AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=110824766519417&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.citrusdb.org/forums/viewtopic.php?t=49",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12402",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110824766519417&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.citrusdb.org/forums/viewtopic.php?t=49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Spidean PostWrap allows remote attackers to inject arbitrary HTML and web script via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en PostWrap permite a atacantes remotos la inyección de HTML arbitrario y web mediante el parámetro 'page'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spidean:postwrap:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E356B51-70B2-4BE4-9D6B-CCFFAEFFC448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-02/0065.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013130",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-02/0065.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php.  NOTE: it was later reported that vector 2 exists in 3.0 and earlier."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades por inyección de SQL en MyPHP Forum 1.0 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el fid en forum.php, (2)el parámetro 'member' en member.php, (3)el parámetro 'email' en forgot.php, o (4) el parámetro 'nbuser' o el 'nbpass' en include.php.\r\nNOTA: posteriormente se informó de que existe el vector 2 en 3.0 y versiones anteriores.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_forum:myphp_forum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF9BC75-9F03-4398-BC6B-7D02B1753B6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_forum:myphp_forum:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7471B313-A6A2-4D1B-BE21-CB14A20F1400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_forum:myphp_forum:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B9CD454-EFE4-4F73-A25E-B9012DFCCAAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Feb/0125.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14205",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013136",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/27083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Feb/0125.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/27083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with (1) the t parameter or (2) the qu parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en post.php de MercuryBoard 1.1.1 permite a atacantes remotos ejecutar órdenes SQL arbitrarias mediante una acción de respuesta a envío (post) en index.php con (1) el parámetro t o (2) el parámetro qu."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2473C711-A505-43C7-81B4-48EE7D32395C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sunsite.dk/viewcvs.cgi/mercury/func/post.php.diff?r1=1.68&r2=1.70",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110661795632354&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110797495532358&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013137",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sunsite.dk/viewcvs.cgi/mercury/func/post.php.diff?r1=1.68&r2=1.70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110661795632354&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110797495532358&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote attackers to cause a denial of service (memory consumption) via malformed MQL statements."
      }, {
        "lang" : "es",
        "value" : "Múltiples fugas de memoria en el procesador MQL de Emdros anteriores a 1.1.22 permite a atacantes causar una denegación de servicio (consumición de memoria) mediante sentecias MQL malformadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB1FEE3E-768F-4D36-9115-ABC79FE38BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3665D487-7725-4BDF-93CA-417014A6AB10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5187D292-1BF0-45C7-A271-A286FCEC9009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC25016B-F47C-4331-891C-65D66B0E9CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B34481-BBE4-44C0-983A-EE189E411654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F3F336-F1B6-43F2-A343-EA8424204234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452E4720-F8A1-4E83-87C0-34391EB23E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F97B20-A289-49CA-8D65-C95F0B2676D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=303465",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1116935&group_id=37219&atid=419458",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=303465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1116935&group_id=37219&atid=419458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "La capacidad de Cursor Animado de Windows (archivos .ANI) de Windows NT, Windows 2000 hasta SP4, Windows XP hasta SP1, y Windows 2003 permite a atacantes remotos ejecutar código de su elección mediante el campo de longitud AnimationHeaderBlock, lo que conduce a un desbordamiento de búfer basado en la pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "237D7C18-C8D6-4FDB-A160-FA17DD46A55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "35346A7B-2CB5-446D-B0C3-1F21D71A746D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "064F4E76-1B89-4FA5-97ED-64624285C014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*",
            "matchCriteriaId" : "089A953C-8446-4E6F-B506-430C38DF37B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EA262C44-C0E6-493A-B8E5-4D26E4013226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*",
            "matchCriteriaId" : "416F06DD-980E-4A54-822D-CBA499FD1F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F66DC6FF-2B3D-4718-838F-9E055E89961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*",
            "matchCriteriaId" : "656AE014-AEEC-46E8-A696-61FEA7932F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*",
            "matchCriteriaId" : "A08D0EA1-DA1B-4C52-883A-3F156F032517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "DA267420-56C5-4697-B0AA-52932F78B24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*",
            "matchCriteriaId" : "93BA426E-DD51-44AC-BE78-3164670FF9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "224F8968-9F4C-4727-AAA3-61F5578EF54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*",
            "matchCriteriaId" : "02BE9817-E1AE-4619-8302-CA7AA4167F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "363E3895-A19B-42EC-B479-765168DC0B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*",
            "matchCriteriaId" : "FBBBF25A-709B-4716-9894-AD82180091AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "407DA6E8-0832-49FE-AE14-35C104C237EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*",
            "matchCriteriaId" : "88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "81B7961D-151D-4773-80CB-CCD0456BFEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*",
            "matchCriteriaId" : "82781A72-A34F-4668-9EE8-C203B04E3367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "AFE612D2-DF38-404F-AED1-B8C9C24012DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*",
            "matchCriteriaId" : "12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B5CAF64E-98AA-4813-A2A2-5AC3387CF230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*",
            "matchCriteriaId" : "BCDFDBBA-6C4F-472A-9F4F-461C424794E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "BCC5E316-FB61-408B-BAA2-7FE03D581250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*",
            "matchCriteriaId" : "EDDD8DA8-D074-4543-AEDF-F856B5567F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "CA7BA525-6DB8-4444-934A-932AFED69816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*",
            "matchCriteriaId" : "90CFA69B-7814-4F97-A14D-D76310065CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*",
            "matchCriteriaId" : "AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eeye.com/html/research/advisories/AD20050111.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110547079218397&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110556975827760&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12233",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://eeye.com/html/research/advisories/AD20050111.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110547079218397&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110556975827760&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown \"high risk\" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors.  NOTE: due to the delayed disclosure of details for this issue, this candidate may be SPLIT in the future.  In addition, this may be a duplicate of other issues as reported by the vendor."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida de \"alto riesgo\" en DB2 Universal Database 8.1 y anteriores con impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489B0F5D-2D6B-4599-BE7A-41A491E6318A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6EA810DB-104E-412A-8B6E-DBB5BEE743A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "56D0096E-8145-4A36-BC18-A9C5C780D1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "80DE2026-D9F0-4AAA-97E6-F4FB0EBDB265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B4EC24E8-4E4F-4D93-88E6-B27FEB663823"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110801212422825&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/db2-09-05-05.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12508",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110801212422825&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/db2-09-05-05.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en 3Com 3CServer permite a usuarios remotos autenticados ejecutar código de su elección mediante comandos FTP largos, como se ha demostrado usando el comando STAT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3com:3cserver:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB16EB1-684B-490C-A610-CE86BE5958E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110780306326130&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780306326130&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application."
      }, {
        "lang" : "es",
        "value" : "Microsoft Outlook Web Access (OWA), cuando se usa con Exchange, permite a atacantes remotos redirigir usuario a URLs de inicio de sesión de su elección mediante un enlace a la aplicación owalogin.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E2337C2B-EEC2-48B3-93C0-FE1FE7D41273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "01E472FC-3001-48A5-908D-B42467B3DBA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14144",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12459",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0105",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19225",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges."
      }, {
        "lang" : "es",
        "value" : "DelphiTurk FTP 1.0 almacena nombres de usuario y contraseñas en el fichero profile.dat, lo que permite a usuarios locales la obtención de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delphiturk:delphiturk_ftp:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CDDB8C-C558-4DC5-8F9E-A0363E6FE4DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013139",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which allows local users to gain privileges."
      }, {
        "lang" : "es",
        "value" : "DelphiTurk CodeBank (también conocido como KodBank) 3.1 y versiones anteriores almacenan nombres de usuario y contraseñas el la clave del registro Codebank, lo que permite a usuarios locales la obtención de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delphiturk:codebank:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "86C542D8-A3ED-4983-8DE9-C5D1F8312A7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013139",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por inyección de SQL en login.asp en ASPjar Guestbook permite a atacantes remotos la ejecución arbitraria de comandos SQL mediante el campo password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspjar:aspjar_guestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE12EEC-916A-4E9B-A312-1E61DD7408BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110809687921701&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14225/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12521",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110809687921701&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to delete messages.  NOTE: there is insufficient information to know if this is the same issue as CVE-2002-1730."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en el programa delete.asp en ciertas versiones de ASPjar Guestbook permite a atacantes remotos eliminar mensajes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspjar:aspjar_guestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE12EEC-916A-4E9B-A312-1E61DD7408BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110809687921701&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14225/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12521",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110809687921701&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-04-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consumption) via certain attacks that force the product to \"compute unexpected conditions\" and \"perform cryptographic operations.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC515E75-119E-4CB9-985E-00E6A9349178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937A6092-48C9-4721-B069-0B46D3520E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38A0AAC-ACA8-44D3-B36A-741D01BE166F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AE0CAA-B5A4-4E3A-B997-A2858E88CCC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AC0D46-2096-4006-8FED-A67AFCE2ED98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F931B5E-6F02-48F6-8DAB-C0D796DFC2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66920-4A4F-4335-B052-44E1F92F585B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658F01AE-C211-473C-BF70-E524E4310F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F769FAE-CC31-4C8B-B785-1423DFC2BA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7202BC-AD0B-41B1-B7C1-7665498C967B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E60288-F9E6-4E7C-9B48-352277A34C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19EA5978-64EC-4B54-BC06-20324DB0E6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B9D00A-6598-4BC0-B058-7598657274D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C076C7D-D833-42CF-9FEF-F3654013AB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FEB6DB5-851E-4EDF-AC1C-CBA502C6D5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563E83E1-74C0-4312-A5C5-0223ADE55F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE079B94-A8C6-41E7-98B1-29A4DE4F66EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AC89E5-8B9C-4C6B-8976-6A4A6F922858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99A154-D3C6-4B1C-BEC9-7D1AEAFCAC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADAAD5F-3286-464E-A309-9454EE9A663F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1437DE-E19A-4C2C-9077-DB1FF48772C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0089BE-856D-4998-BBFE-1F626A43377E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE81F49-05CE-4987-90C0-B6D077B65DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650E19BC-6545-45E9-BE2B-0900323C80C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173804A3-04EE-484B-A0CF-8DFFE060EFA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.tic.udc.es/scg/advisories/20050429-2.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kerio.com/security_advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/397220",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://research.tic.udc.es/scg/advisories/20050429-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kerio.com/security_advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/397220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F3945-21ED-44C6-86D2-B7755A87014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B3D5AE-05A8-433C-98DD-2711423D3FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67735E5-E43E-4164-BDB2-ADC6E0288E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB70F82-52BB-4D0D-9A24-9AF67278466D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isec.pl/vulnerabilities/isec-0022-pagefault.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110554694522719&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110581146702951&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-017.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-043.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://isec.pl/vulnerabilities/isec-0022-pagefault.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110554694522719&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110581146702951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:poppassd_pam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "760D34EB-E7F2-4231-92A2-F21FB488C067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-22.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3834A3-8A7E-4914-A20C-EE694150D044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7E2792-B4BC-4C71-990D-0B7462919568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F2FD22-4058-45D6-8352-0AA6382746C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF103AE-6F15-4F2D-A375-F2AF91171EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65929D5C-31B1-4A70-8E9C-AC6749332480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D83FADC-4C7F-4C16-BBAA-9883D7449744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45B5EE8-00FB-46FE-9A26-7468AD30B540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD06A99-7CBF-4593-9EA1-5D1A800D8C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A27CAC75-BFE8-4865-A6AE-20225BFCDBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6393827E-8F17-4C95-B1E2-D6049B8AA63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F682CD-0117-4770-877F-1F3903BAFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5717E4CF-15CD-4369-801F-7E113F0FAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34B9CBD-54BC-4131-820F-9483E50086BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD7EB24-20F1-493F-BD38-DF39638C319B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E62DFAA-1EFC-40D6-A4B5-9113DF0656B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BD0D69-A809-4DD3-824B-C68E3EF4F724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC271B0-ACAC-478E-B00B-FFBAAE33B5E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9BACC6-DEF1-4C20-B627-3AA55471B372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA96D5B-FD43-418E-980C-22DEBA4FC03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12378D7-6A7E-4636-9551-C224907A3219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55053EA-780E-46A9-91AE-F983DD54D154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8168249B-863D-44E3-8BC3-B877A64981B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A688471B-3A88-410B-AAD3-20A75E1A767E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F76B8D-D105-4106-B52C-FC201F5930AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB7AE5B-83D9-4DF5-A9A0-B0412D8C0B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600590DA-A2F4-488F-B85B-9B3B86A8FC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB2E37B-323A-4336-B081-56BD32260E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AB4F80-4136-4007-8C33-E1C8A84C11B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03ADE3A3-8FA5-439A-97ED-6EE93ED43699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC217F-C257-4A3C-9CBD-08010C30BEC3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "A6B060E4-B5A6-4469-828E-211C52542547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "974C3541-990C-4CD4-A05A-38FA74A84632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "58792F77-B06F-4780-BA25-FE1EE6C3FDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "C9419322-572F-4BB6-8416-C5E96541CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "BFC50555-C084-46A3-9C9F-949C5E3BB448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "9C25D6E1-D283-4CEA-B47B-60C47A5C0797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "AD18A446-C634-417E-86AC-B19B6DDDC856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E4BB852E-61B2-4842-989F-C6C0C901A8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "24DD9D59-E2A2-4116-A887-39E8CC2004FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F28D7457-607E-4E0C-909A-413F91CFCD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980553F2-8662-47CF-95F0-645141746AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40EBF1CD-B392-4262-8F06-2C784ADAF0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C00F84A-FCD4-4935-B7DE-ECBA6AE9B074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "960DC6C2-B285-41D4-96F7-ED97F8BD5482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1FD0EB4-E744-4465-AFEE-A3C807C9C993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "57772E3B-893C-408A-AA3B-78C972ED4D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CD54FE-D682-4063-B7C3-8B29B26B39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "37F124FE-15F1-49D7-9E03-8E036CE1A20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C55338-3372-413F-82E3-E1B476D6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110608222117215&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-646",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-37.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=184&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-070.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-071.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608222117215&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-37.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=184&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-070.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-071.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (infinite loop)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from assertion)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause \"memory corruption.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by triggering a free of statically allocated memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4B436D-8D6A-473E-B707-26147208808B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E26B353-4985-4116-B97A-5767CDC732F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7180B3-03AC-427C-8CAD-FE06F81C4FF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14306",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-23.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050215-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050215-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94E9AC3-5835-4E79-AB34-637185421292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE609C2-1FD6-40AA-B1F7-FED9234431AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09C6A52-1942-42EB-AD41-29D34FB82825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F9E9E2-3A5D-4266-A3A9-64CA0B0EF942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB0B919-02AD-4A21-B2A7-BD25A3FD3DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680ECD1A-67C7-442B-AD53-4310E08FCA57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8428562-6417-49E8-9DF5-F36DEDB2E880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67B9FA0-AFC5-4479-92A8-FEEF3C31F0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A25A402-A797-4253-B684-62C4571152EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5D942B-70E4-4090-AE16-CA6CC0FDBF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47080B2-A1D9-4DB0-A667-CD04E642845C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F43925B-6247-4096-8FFB-AAF8A76B25C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EADF0B3-5F69-4B08-B7D5-5F9240745925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188F1458-0C93-4FBC-B111-0EF32C327319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0C785B-3582-4493-A22C-E33E9496BFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68220468-E7B4-4D39-BAE7-D69F79F08967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D187FCC6-AD81-404F-9F69-D58A0AF6D3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819FE3D5-CFFD-48B0-BECB-607E48636F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3FCCF6-23C3-404A-9091-C669B6E9D81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6C9FBB-4CF3-4B7B-95EA-126ADFDA9747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "535320B4-9BE9-4395-80A4-9A857E46837A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F398046-E2C3-444A-9899-191043E90225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB1BD70-F755-4280-916F-AFFF0B18D581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE1A226-9F33-4906-8227-FA97DCC4E509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo_web_browser:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC05DE5-659B-4C0F-A2B3-B941698F2341"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13760/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/13764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-11.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12203",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13760/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/13764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncpfs:ncpfs:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D956354D-5E8F-4EC2-9A7C-6CAF2A9134F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncpfs:ncpfs:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D6F9518-FF7D-442C-88A5-F4773B5674B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncpfs:ncpfs:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA84E591-DC5D-4731-8FF0-3CAC537317F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncpfs:ncpfs:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7115A87-A09A-4636-8109-6DFABBE387E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncpfs:ncpfs:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE729A3-968A-4925-9924-53954D14C218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-665",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/13297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-371.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433927/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/13297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-371.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433927/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncpfs:ncpfs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.5",
            "matchCriteriaId" : "8856661D-1109-420B-A430-FC4AF817C8D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncpfs:ncpfs:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D956354D-5E8F-4EC2-9A7C-6CAF2A9134F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncpfs:ncpfs:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D6F9518-FF7D-442C-88A5-F4773B5674B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncpfs:ncpfs:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA84E591-DC5D-4731-8FF0-3CAC537317F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncpfs:ncpfs:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7115A87-A09A-4636-8109-6DFABBE387E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/13298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433927/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/13298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433927/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crosswire_bible_society:sword:1.5.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40AFD343-71BC-489F-8293-58BFD483ABC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-650",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:f2c_open_source_project:f2c_translator:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16C635B-BCB6-417A-A190-337DFF0AA498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-661",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-43.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-43.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f2c_open_source_project:f2c_translator:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16C635B-BCB6-417A-A190-337DFF0AA498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-661",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12380",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.40",
            "matchCriteriaId" : "3F9C6432-7FDB-4DF9-A1D8-ED454D9FE322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_cambridge:exim:4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11FE354-D770-43E4-85EF-582BCC344D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_cambridge:exim:4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7F88AF-13F0-4236-A87E-52768636A972"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-23.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-635",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-637",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=179&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=183&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/132992",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=179&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=183&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/132992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function, may allow attackers to execute arbitrary code during SPA authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.40",
            "matchCriteriaId" : "3F9C6432-7FDB-4DF9-A1D8-ED454D9FE322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_cambridge:exim:4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11FE354-D770-43E4-85EF-582BCC344D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_cambridge:exim:4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7F88AF-13F0-4236-A87E-52768636A972"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110824870908614&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-23.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=178&type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110824870908614&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200501-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=178&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries that trigger the overflow in the q_usedns array that tracks nameservers and addresses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:8.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B37CC5B9-90B2-4C01-831B-715C6B45C3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:8.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4061C7CC-9AE2-472B-9500-41AA76601277"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.1/SCOSA-2006.1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.isc.org/index.pl?/sw/bind/bind-security.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.isc.org/index.pl?/sw/bind/bind8.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/327633",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/al-20050125-00059.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.1/SCOSA-2006.1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.isc.org/index.pl?/sw/bind/bind-security.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.isc.org/index.pl?/sw/bind/bind8.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/327633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/al-20050125-00059.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An \"incorrect assumption\" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (named server exit) via crafted DNS packets that cause an internal consistency test (self-check) to fail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847C1017-F964-4A33-BEA8-DDB202DD0FB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.isc.org/index.pl?/sw/bind/bind-security.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.isc.org/index.pl?/sw/bind/bind9.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/938617",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/al-20050125-00060.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.isc.org/index.pl?/sw/bind/bind-security.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.isc.org/index.pl?/sw/bind/bind9.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/938617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/al-20050125-00060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile ActiveX method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AED985D-60D7-489E-9F1E-CE3C9D985B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EAA22-CED2-4379-9465-9562BACB1C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF742B8-5F7A-487B-835C-756B1BB392F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B9351C2-16ED-4766-B417-8DB3A8766C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74667860-0047-40AD-9468-860591BA9D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331465.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-06.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050401-00264.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331465.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-06.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050401-00264.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/13804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=180&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/377368",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/12833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/13804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=180&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/377368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/12833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the \"Input Validation Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A826707-2E9E-4BA0-836D-BF41A1F766B6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/927889",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/927889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the \"Server Message Block Vulnerability,\" and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "237D7C18-C8D6-4FDB-A160-FA17DD46A55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "35346A7B-2CB5-446D-B0C3-1F21D71A746D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "064F4E76-1B89-4FA5-97ED-64624285C014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*",
            "matchCriteriaId" : "089A953C-8446-4E6F-B506-430C38DF37B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EA262C44-C0E6-493A-B8E5-4D26E4013226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*",
            "matchCriteriaId" : "416F06DD-980E-4A54-822D-CBA499FD1F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F66DC6FF-2B3D-4718-838F-9E055E89961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*",
            "matchCriteriaId" : "656AE014-AEEC-46E8-A696-61FEA7932F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*",
            "matchCriteriaId" : "A08D0EA1-DA1B-4C52-883A-3F156F032517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "DA267420-56C5-4697-B0AA-52932F78B24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*",
            "matchCriteriaId" : "93BA426E-DD51-44AC-BE78-3164670FF9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "224F8968-9F4C-4727-AAA3-61F5578EF54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*",
            "matchCriteriaId" : "02BE9817-E1AE-4619-8302-CA7AA4167F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "363E3895-A19B-42EC-B479-765168DC0B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*",
            "matchCriteriaId" : "FBBBF25A-709B-4716-9894-AD82180091AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "407DA6E8-0832-49FE-AE14-35C104C237EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*",
            "matchCriteriaId" : "88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "81B7961D-151D-4773-80CB-CCD0456BFEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*",
            "matchCriteriaId" : "82781A72-A34F-4668-9EE8-C203B04E3367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "AFE612D2-DF38-404F-AED1-B8C9C24012DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*",
            "matchCriteriaId" : "12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "CA7BA525-6DB8-4444-934A-932AFED69816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*",
            "matchCriteriaId" : "90CFA69B-7814-4F97-A14D-D76310065CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "2FECD4B0-23A0-4C0B-9888-D28A5941D848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*",
            "matchCriteriaId" : "AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110792638401852&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111040962600205&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=ntbugtraq&m=110795643831169&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/652537",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110792638401852&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111040962600205&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=ntbugtraq&m=110795643831169&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/652537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows 2000, XP, and Server 2003 does not properly \"validate the use of memory regions\" for COM structured storage files, which allows attackers to execute arbitrary code, aka the \"COM Structured Storage Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111755870828817&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.argeniss.com/research/SSExploit.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/597889",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111755870828817&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.argeniss.com/research/SSExploit.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/597889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the \"IP Validation Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/233754",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/233754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_portal_server:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D097177-318D-4751-9FE5-007DB9E7A859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_portal_server:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "515A3057-E0E9-496E-B36A-D837BE970148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_team_services:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83ADDF33-AC0A-43F1-8250-EC84221F02D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/340409",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/340409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an \"unchecked buffer\" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the \"License Logging Service Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:2000:*:small_business_server:*:*:*:*:*",
            "matchCriteriaId" : "1DF610DF-6AE4-4CF3-A9AB-823228BEF157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:2003:*:small_business_server:*:*:*:*:*",
            "matchCriteriaId" : "EC8C7AFA-3D80-4E4D-906E-AC51BD055D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "237D7C18-C8D6-4FDB-A160-FA17DD46A55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "064F4E76-1B89-4FA5-97ED-64624285C014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*",
            "matchCriteriaId" : "089A953C-8446-4E6F-B506-430C38DF37B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EA262C44-C0E6-493A-B8E5-4D26E4013226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F66DC6FF-2B3D-4718-838F-9E055E89961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*",
            "matchCriteriaId" : "656AE014-AEEC-46E8-A696-61FEA7932F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "DA267420-56C5-4697-B0AA-52932F78B24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*",
            "matchCriteriaId" : "93BA426E-DD51-44AC-BE78-3164670FF9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "224F8968-9F4C-4727-AAA3-61F5578EF54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "363E3895-A19B-42EC-B479-765168DC0B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*",
            "matchCriteriaId" : "FBBBF25A-709B-4716-9894-AD82180091AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "407DA6E8-0832-49FE-AE14-35C104C237EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "81B7961D-151D-4773-80CB-CCD0456BFEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*",
            "matchCriteriaId" : "82781A72-A34F-4668-9EE8-C203B04E3367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "AFE612D2-DF38-404F-AED1-B8C9C24012DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B5CAF64E-98AA-4813-A2A2-5AC3387CF230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*",
            "matchCriteriaId" : "BCDFDBBA-6C4F-472A-9F4F-461C424794E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "BCC5E316-FB61-408B-BAA2-7FE03D581250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "CA7BA525-6DB8-4444-934A-932AFED69816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*",
            "matchCriteriaId" : "90CFA69B-7814-4F97-A14D-D76310065CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "2FECD4B0-23A0-4C0B-9888-D28A5941D848"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/130433",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/130433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the \"Named Pipe Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/939074",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/939074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the \"Drag-and-Drop Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Internet Explorer 5.01, 5.5 y 6 permite a los atacantes remotos ejecutar código arbitrario mediante eventos de arrastrar y soltar, también conocidos como \"Vulnerabilidad de arrastrar y soltar\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/698835",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11466",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/698835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the \"URL Decoding Zone Spoofing Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110796851002781&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/580299",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110796851002781&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/580299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the \"DHTML Method Heap Memory Corruption Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/11165/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2004-12/advisory/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/843771",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/11165/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2004-12/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/843771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the \"Channel Definition Format (CDF) Cross Domain Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/823971",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12427",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/823971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an \"unchecked buffer\" in the library, possibly due to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "La biblioteca de objetos Hyperlink para Windows 98, 2000, XP y Server 2003 permite a los atacantes remotos ejecutar código arbitrario a través de un enlace diseñado que activa un \"buffer no controlado\" en la biblioteca, posiblemente debido a un desbordamiento del buffer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/820427",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/820427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el componente Message Queuing -cola de mensaje- en Microsoft Windows 2000 y Windows XP SP1, permite a atacantes remotos ejecutar código de su elección a través de un mensaje manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento del búfer en el componente de procesamiento de fuentes de Microsoft Windows 2000, Windows XP SP1 y SP2, y Windows Server 2003 permite a los usuarios locales obtener privilegios a través de una aplicación especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111343529426926&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/ms-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111343529426926&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/ms-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows 2000, Windows XP SP1 y SP2, y Windows Server 2003 permite a los usuarios locales obtener privilegios a través de determinadas solicitudes de acceso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111755356016155&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=231&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5YP0T0AFFW.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111755356016155&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=231&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5YP0T0AFFW.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D33C2A-E803-4575-B4CF-D5E484A22D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A7B432-CDA1-472C-8FA4-30952A5A542D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DFDA2C-4518-4491-A8B5-DFD08997D2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB22C0B-E48E-4AD7-92BC-6DFB2D1F121C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A668276-7AE1-4395-90EE-E5A7B84657C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D90CF9-30BC-4F64-9A90-3B8160BB1737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "172B87AF-5263-46CA-A9C2-AC08CCBC2960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F57D8D-E95C-4E80-B99C-475CB4D866F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756DDE44-2E0C-4209-ABBF-B9F73E4308C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CC6233-E207-40CC-81FF-A8670EEA4295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64DD9B5C-3DB8-4E15-B4A6-541E4E221C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BB7E29-D56E-4B1B-ACFF-012B9B1E3187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9AA00B-7910-426C-BA4F-56476C101E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25102E75-6D76-4DBF-B559-3C514B79D710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0304E1E3-8766-40D0-8879-A652B4E9E72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D8F3B8-255A-41BF-9A6D-8D44796FFC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F432DC7-26C9-4645-B297-625F2D4C6F01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D5BC8E-8877-4277-BF7F-2021E9F20146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7DBEC5-478B-4AF5-ADC5-F95650DB90BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC1A6C4-145B-49A4-A6B7-5DB9C8C5DF3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188F1343-8082-4B54-8DA4-E344818ABD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4377ECA-92FE-4E39-B9F3-4220262CB989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3D4DA0-C4B0-4727-AADF-522A7C4ECA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC59A29-3F4E-4667-9966-E94F5FC3036D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95DA7DE-B786-4EE7-A3F4-C077A7986D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5306C05-4A71-4175-8C22-F2DE0F2FE4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9DEF16-ECD5-4BBE-8986-52A6171B3D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFDBEEC-B2C1-47F0-82D3-FC9147B590A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354487CF-0086-4AE2-872B-0032E3EB89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96767060-505A-42D2-A68A-6AD810DE800A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1169B802-7279-437F-AF59-621A67DC92EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B93B3ED-AF82-49A9-8C7F-E5F652F19669"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl3.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000921",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110625368019554&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-645",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-648",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=186&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-026.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-034.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-053.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-057.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-059.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-066.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2352",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2353",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/200501-28",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/200502-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl3.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110625368019554&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=186&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-053.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-059.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-066.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/200501-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/200502-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged (aka \"TCP sequence number checking\"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E69CF1-D657-4511-8726-D122211B9002"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synaesthesia:synaesthesia:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "0F4C5E94-FFEF-4C54-A24B-6A185BEA06F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-681",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vdr:vdr:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240F01F-A1F3-4A20-BC31-0860816B7C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vdr:vdr:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98815A91-FA06-4A94-8CD3-C11C5F0F3CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vdr:vdr:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5070A3-DBF5-4B9F-81A4-DDD77CAC42D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vdr:vdr:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AB935-16DD-4A66-B900-074079ACFC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vdr:vdr:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5443223-A970-4353-9ADB-3DDB8145B1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vdr:vdr:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "414C63BA-E823-4714-B2CB-A559B79FCD5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-42.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-42.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:sympa:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145B117E-93AD-45D5-9B00-27AB8289AE1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-677",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the library."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:woody:*:*:*:*:*",
            "matchCriteriaId" : "436B1E58-17E8-495B-A2DD-FB1626B9D35B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62EF915-CA7C-4D75-BC67-E015772BB9CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110667936707597&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-658",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-072.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426530/30/6600/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110667936707597&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-072.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426530/30/6600/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:woody:*:*:*:*:*",
            "matchCriteriaId" : "436B1E58-17E8-495B-A2DD-FB1626B9D35B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30661C23-9BE4-4F6E-AEB9-1B9D7DAA6FC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B38F8C-9451-441B-BCD8-E41C1A2231DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04A4717-229D-4E20-8FD2-DC13757B0AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F472ECE0-821E-4A20-B6FC-CC4FC5D1BA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6671EEE2-8CEC-41C7-9CF2-23D92A1B3DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F3ACDA-8DB4-4E59-B673-021CEBD03D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5E480F-A87E-4583-BC75-8596206C0895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:2.1_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C9BFA6-4AB0-49ED-8413-55E6678B6275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD88E0D-DF56-459D-AAE4-CD03E9CC7C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DBFB51-48EB-41E5-9712-0A5368EE56A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAE9343-7A7F-4CB0-8CEF-52D61BD689C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:2.2_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D288C0E-8052-4198-AFA0-3DE20BB985FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEED379-3111-4451-B782-8C66CE568A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B146FCD3-F6E7-4412-94FD-F9E66089C227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C629F0C8-C765-4076-B426-80929F9CE285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671D1461-4AB4-4FB6-977D-733888A1BA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE64619-1AD6-4FBE-B201-73C565BB052F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF4F0D1-A718-4989-805C-DA7DBAE3647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*",
            "matchCriteriaId" : "81B543F9-C209-46C2-B0AE-E14818A6992E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "DB89C970-DE94-4E09-A90A-077DB83AD156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F9BE3AC-B583-4AED-A940-E95F808D1BFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-660",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xtrlock:xtrlock:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD63686-FA4E-446B-8889-790B49C6B03A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-649",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C53260-503F-4934-B1FE-9FACD8E0EE66"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62EF915-CA7C-4D75-BC67-E015772BB9CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110549296126351&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://qa.debian.org/bts-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110549296126351&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://qa.debian.org/bts-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service (application crash) via invalid parameters to the (1) DBMCli_String::ReallocString, (2) DBMCli_String::operator, (3) DBMCli_Buffer::ForceResize, (4) DBMCli_Wizard::InstallDatabase, (5) DBMCli_Devspaces::Complete, (6) DBMWeb_TemplateWizard::askForWriteCountStep5, or (7) DBMWeb_DBMWeb::wizardDB functions, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:7.5.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBA6898-4D32-4A3D-8529-1FC7A63894B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=218&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=218&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E737F77-ABE6-4E3E-9156-4FAF841E8314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.17a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C25FB130-5D15-47EB-97B6-F368EFF958BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934E636C-5EC3-436C-990F-D9434776CEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73117E69-715B-4779-A5D8-218E15122A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-653",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13946/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*",
            "matchCriteriaId" : "81B543F9-C209-46C2-B0AE-E14818A6992E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "DB89C970-DE94-4E09-A90A-077DB83AD156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-068.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=145527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-068.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=145527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.8",
            "matchCriteriaId" : "0359C038-B61F-4640-ADFA-7B8038DFCD9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:1.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5509C23E-30C8-47E5-A0D6-5DBABD357203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253A9B1A-5E40-4BF3-A181-DD8EC86EB119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD7D5B0-DB5C-4C92-B701-84274A2D8FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C96ED2-1B85-4B1F-AAAB-5FC90BF5AB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490DC20E-7A70-4095-82D2-2E8ED23C5BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B27C447F-2883-464D-AC9C-22AFF1278E8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E83757F-81A1-48CF-93FE-3F2B8C2E9EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F845DD2D-7DCB-4CB4-A70C-ABE10DC136D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26E30A3-747D-491D-9930-63488AE5E768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6DBB-C557-4C43-8573-217134A1D44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29FD9AA-7B11-4B7D-BA40-B7F488D83892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9E0311-B2B6-4770-8393-8A65CC3D5BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D35BAD-EE65-46E7-845A-DE58D8A1EFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310A5F62-EF40-462A-B1CD-251704B74C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399203BA-6661-4451-A667-1EBCC0310FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9604D18-BFA4-4725-8810-8D2BAD9E0DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA1FA8-74C2-4473-B121-C9C958547501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695F589B-1CEA-4974-9E47-FB7E5DF5B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1045B136-428A-461C-98BA-3E4C818DE27E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BFBBA5-750F-43B4-BE5F-BDBA2E2FDF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:2.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C3FE2B-C056-4FE5-A8AC-A0BC9B69E454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110815313218389&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-14.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-689",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/356409",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-100.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-104.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430286/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110815313218389&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/356409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-100.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-104.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.5",
            "matchCriteriaId" : "947C0E11-0B3B-439D-AE55-C8AF48A2013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE315FF0-8715-4FF6-ADBD-AD99AB0D0882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110746469728728&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://python.org/security/PSF-2005-001/patch-2.2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14128",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1013083",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-666",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:035",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.python.org/security/PSF-2005-001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-108.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12437",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19217",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9811",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110746469728728&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://python.org/security/PSF-2005-001/patch-2.2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1013083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.python.org/security/PSF-2005-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-108.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an \"access check,\" which allows local users to cause a denial of service (crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12599",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:09.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to read the recovered files of other users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helvis:helvis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8h2_1",
            "matchCriteriaId" : "2B85479A-1F62-42F6-A99D-7D9F8756A1CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helvis:helvis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8h2_1",
            "matchCriteriaId" : "2B85479A-1F62-42F6-A99D-7D9F8756A1CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:helvis:helvis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8h2_1",
            "matchCriteriaId" : "2B85479A-1F62-42F6-A99D-7D9F8756A1CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://people.freebsd.org/~niels/ports/korean/helvis/issues.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://people.freebsd.org/~niels/ports/korean/helvis/issues.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name command line argument or (2) a long username as recorded in the USER environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_siegel:golddig:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F416BC-FB54-4CE1-86CA-931214005408"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vuxml.org/freebsd/949c470e-528f-11d9-ac20-00065be4b5b6.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vuxml.org/freebsd/949c470e-528f-11d9-ac20-00065be4b5b6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"at\" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to (1) delete arbitrary files via atrm, (2) execute arbitrary programs via the -f argument to batch, or (3) read arbitrary files via the -f argument to batch, which generates a job file that is readable by the local user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110685027017411&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0127a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/678150",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110685027017411&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0127a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/678150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/980078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/980078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardware being used, which allows remote attackers to link mail messages to a particular machine."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/464662",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/464662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB72ED94-7832-43CF-81CF-27F88CAC6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802BFF6B-5D9F-49AE-B96A-86A85E0F1034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7B2943-BC22-4735-8AA5-AADBEA685FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257524-7FC5-40CA-9BDA-82B8565C5BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AACCC-C20A-4BC1-BF62-D40FF71B7360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F52C121-B8B8-43A8-AFAB-E85474021919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659B4C39-0F0F-40C5-9B7E-0D00330611F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000928",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=300116",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=300116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of service (system crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4041f2beablXVnAs_6fznhhITh1j5hZg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15019",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148868",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4041f2beablXVnAs_6fznhhITh1j5hZg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a \"missing Itanium syscall table entry.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peid:peid:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AED2D7-839C-4A0A-877A-2A7B948095A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=189&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=189&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links \"with a custom getter and toString method\" that are middle-clicked by the user to be opened in a new tab."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=249332",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=249332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=251297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=251297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an insecure page is being loaded, which could facilitate phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=262689",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=262689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-08.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265728",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-09.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=267263",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=267263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabilities in the version of Internet Explorer that is installed on the user's system.  NOTE: since the invocation between multiple products is a common practice, and the vulnerabilities inherent in multi-product interactions are not easily enumerable, this issue might be REJECTED in the future."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=263546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=263546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30E072-9E6A-49B4-A5C7-63A328598A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110737149402683&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110779723332339&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-163.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0131a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-13.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-103.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-105.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12426",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110737149402683&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110779723332339&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-163.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0131a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-103.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-105.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42803349-C7C2-41AB-984C-BBB6F30B8702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696ADF4-3055-498A-B3D7-5EFCBA943AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C4F88F-22A1-4158-9836-D6E42F399C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3048C0-8F53-404F-A63A-350A2C632879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3490CB-1E91-4246-B5E2-491438929357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66BF389-11F3-45F3-8278-356143339D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "651E1672-99C0-47DE-8B1B-4FBBB621E56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5E06B1-ECD5-4894-A70B-A9D6B4F4CCB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EAAB8AA-FDA4-4E6E-9F08-8C3261703DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3DA7D4-6740-4CC6-AD45-06CFBBBD1027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF595DA5-E9E1-47C1-A7E2-A7CB48716F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7634AD9C-C987-455B-BAAF-3D40F03781B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2ACE37-8106-481B-B0BA-36BFDB9343E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4FA5DBD-27A3-4809-88BA-1388624A4056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF58764B-CD3A-4E66-B2A9-9AC5313E735D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2074907F-E936-42BC-AAEA-16480A24C4E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C47607-E2E1-44FC-A2FC-3ABC337FCB73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174F6B53-E8C7-4629-8A07-74FC6A693A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9C1831-B2B9-4D2B-AC43-5566BB4D4CFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDB59E4-7550-4A13-B2DE-E2855DDD670E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F19799-8617-469B-82EA-318EAFCEEF8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2C03E7-8CD2-4001-A5AD-4271B505DFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8755EDA-18B8-4733-8BE5-3C8C897707A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E57B45-BDE1-4AF1-BEE2-D2A432A52CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE23A588-4A27-4B49-B351-649350F5E752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-687",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-06.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0771FC-F8FB-4065-B6E1-EA21ECE77AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B81A56D-3F2E-455B-A960-69728437B31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7799D4-7B04-463B-BA19-AE36CD9DD694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8093EE-AA6A-4E2C-A891-163A42EA89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3655286B-D44A-4DCB-8DF4-D45A36398933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDCE5E-6D74-4E13-B830-E412C33EF337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E71F3AC2-E633-41D2-B49B-A92E5FB974F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87284115-14F4-4FB6-A8D9-7C7A3B5151E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB618BD-9C6D-458D-A521-FE436C428A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8717751-A250-49F6-97E9-C14C8A44E550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D360F838-C65C-4E76-B460-ADE1AB7657C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67618D3A-9C74-4701-B42F-385E0221D75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C501D54D-5294-4BFD-9858-BE70C411B928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CB5358-7833-4D1E-8F22-CB2714E36F3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2265D309-4E50-45A3-A884-9F1FA361D453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45663027-1EFD-415A-8AB3-BCE544F4AD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EAAEE-BAB5-42EC-B171-93D9E32AC6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9E1D6A-2C46-4062-87B2-726FCC5967B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D24DCC-6C2A-466A-B59F-3D07F62175D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC7B751-34D9-4BBB-8608-97823E5F5F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADF48B4-C9DA-41B7-9124-882ADF625F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446879FE-02A7-4576-A726-6E7C918C4E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F495D6-7734-411D-B527-14C74A345E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EFA76EB-C5A5-4652-8EF1-66E2B061BE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB6D7E3-697C-4AA9-9925-371AB99CA395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DD635-BB74-4311-9E62-0DFAEB8DC121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E006EBC-5624-4AEE-85A8-10E33FCB20A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8DC1BE-EA6C-41B8-9D50-AACE2F2BA424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155CB225-3F1B-4841-90F7-49C4CF90B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21905542-2429-4695-B253-AEC648B0BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317FED1B-9C39-40E5-980D-C5ED808D8FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48242DB9-5EB2-4C95-A944-C52B798A32A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-667",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/924198",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-ldap_spaces",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-ldap_spaces.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/924198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-ldap_spaces",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-ldap_spaces.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute arbitrary commands via shell metacharacters in a command line argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:vacation_plugin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.15",
            "matchCriteriaId" : "B901FE8C-31E7-4526-A2D1-14BED3BE2365"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110549426300953&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squirrelmail.org/plugin_view.php?id=51",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110549426300953&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/plugin_view.php?id=51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to read arbitrary files via a .. (dot dot) in a get request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:squirrelmail:vacation_plugin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.15",
            "matchCriteriaId" : "B901FE8C-31E7-4526-A2D1-14BED3BE2365"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110549426300953&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squirrelmail.org/plugin_view.php?id=51",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110549426300953&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/plugin_view.php?id=51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a LinkDown-Trap packet that contains a long OCTET-STRING in the Trap variable-bindings field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mnet_soft_factory:nodemanager_professional:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88770403-6350-4346-8701-BC9BB9D408F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110599796118583&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13881/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.org.sg/vuln/nodemanager200.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110599796118583&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13881/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.org.sg/vuln/nodemanager200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the SetSkin function in AtHoc toolbar allows remote attackers to execute arbitrary code via a long skin name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:athoc:athoc_toolbar:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520D2ACD-FFF3-46A2-BA9D-061638EA3E8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=109710974324742&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616363415176&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/athoc-01full.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=109710974324742&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616363415176&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/athoc-01full.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warnings."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0771FC-F8FB-4065-B6E1-EA21ECE77AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B81A56D-3F2E-455B-A960-69728437B31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7799D4-7B04-463B-BA19-AE36CD9DD694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8093EE-AA6A-4E2C-A891-163A42EA89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3655286B-D44A-4DCB-8DF4-D45A36398933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDCE5E-6D74-4E13-B830-E412C33EF337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E71F3AC2-E633-41D2-B49B-A92E5FB974F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87284115-14F4-4FB6-A8D9-7C7A3B5151E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB618BD-9C6D-458D-A521-FE436C428A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8717751-A250-49F6-97E9-C14C8A44E550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D360F838-C65C-4E76-B460-ADE1AB7657C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67618D3A-9C74-4701-B42F-385E0221D75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C501D54D-5294-4BFD-9858-BE70C411B928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CB5358-7833-4D1E-8F22-CB2714E36F3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2265D309-4E50-45A3-A884-9F1FA361D453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45663027-1EFD-415A-8AB3-BCE544F4AD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EAAEE-BAB5-42EC-B171-93D9E32AC6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9E1D6A-2C46-4062-87B2-726FCC5967B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D24DCC-6C2A-466A-B59F-3D07F62175D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC7B751-34D9-4BBB-8608-97823E5F5F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADF48B4-C9DA-41B7-9124-882ADF625F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446879FE-02A7-4576-A726-6E7C918C4E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F495D6-7734-411D-B527-14C74A345E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EFA76EB-C5A5-4652-8EF1-66E2B061BE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB6D7E3-697C-4AA9-9925-371AB99CA395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DD635-BB74-4311-9E62-0DFAEB8DC121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E006EBC-5624-4AEE-85A8-10E33FCB20A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8DC1BE-EA6C-41B8-9D50-AACE2F2BA424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155CB225-3F1B-4841-90F7-49C4CF90B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21905542-2429-4695-B253-AEC648B0BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317FED1B-9C39-40E5-980D-C5ED808D8FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48242DB9-5EB2-4C95-A944-C52B798A32A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110901183320453&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-667",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/260421",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-empty_acls",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-empty_acls.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1166",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110901183320453&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/260421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-empty_acls",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-empty_acls.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6 packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11A2BE-19E7-4148-B3CC-B4956B07273E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41E5674D-D1D3-4597-8105-F787465E00A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56365432-1E57-4D35-B764-DDDA878B96ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390755B3-30B7-4086-8FB2-A41614F747D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550709E5-9302-4FCB-A969-2DA54BCB2184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB57AAA9-4715-468F-A734-A12209A6069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D480A-80A3-4113-A1A6-194A8DD47F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A310F30-F94D-4A70-94BD-6B94D7B5F5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A668D08-14C4-4438-A59C-CE60498BEF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A9B6F-A5D8-403C-9018-0E627FBC9A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050126-ipv6.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/472582",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-026A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050126-ipv6.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/472582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-026A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service (device reload) via a malformed BGP packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F86F790-6247-42F2-9487-3D60A2842F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12434A88-88C6-4749-981F-E2B4D725F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932C1AC0-0BD1-46DF-A241-AA71BBD785BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEA01D2-B985-4575-AF00-144CE2E3024D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11A2BE-19E7-4148-B3CC-B4956B07273E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E78DEE-1125-4183-A0CD-947B850E956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0w5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A92DCEF-C205-4145-91B0-DB9991130457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B5CC91-144D-4818-871E-E6120A7E1050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E5F43E-20DA-4C5C-B8C5-1A5512CA07B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6333F9A-2605-41EE-9AB4-1D04C5825BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1050ACB3-E5B2-4710-910B-F3DF4B49907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABE71F9-17D4-47C4-A762-18CC8716E477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7977DA9F-41DE-4482-B0CD-896EEEFB5689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADAB898-7728-4C14-B69A-7B8B06AFC894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBE69A0-85B1-423B-88FB-CDA80E9186EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54424787-34AC-410D-985F-511ADB2BB144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F54F0C-AC91-4CB7-9FEB-257F03547864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0D017-F26F-4429-891E-C7E1C66B6588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA075D-4A9E-44EE-90CF-23947C9040EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3DFAEC-4534-4A8D-9886-0723F57C7A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5451772-87D4-42E2-8F48-D137670DA3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D162976F-87A3-42BF-8C9F-A981B14F4673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2606209-91BE-4BEB-A163-0D3873A033FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43581A57-418A-4A35-ACF2-1380A8DA8A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC17E231-9256-4600-A33B-238E7E83CF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6D5468-BB6A-4665-964F-D8F636359CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0AB67FC-88F4-42BB-BB90-54521950DE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0082D5-CE3E-433A-84E9-1311C8B7899A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442972CD-50D3-4C46-AB73-44AED94B9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19077C39-A27B-4EC3-A882-9AC826E61570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B31AFC-9C72-4737-B6B7-E938C13695BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9427851-B0DC-4CE6-8BFA-60619D1DC87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D07DD94-0925-4FEE-9565-5F36B9AAF448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3A67F5-05C6-4097-A88E-0A0F165C12EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C0554-1A50-4341-AB07-80AA854673D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FF39C5-CC37-4573-BB18-36254D38509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896A71EC-9508-406F-8DE8-58953D9A30FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B15FCC-1BB3-41CA-9550-6D55DD381F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A85892-C3AB-4920-A949-A71BD0332D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6330829-9A7B-479D-B38B-BC64148EC172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297FAD97-60C0-473D-A18D-03657B81B7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD4A33B-B13E-40C6-B47F-A406ACC6664F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E488E6E-87F0-4292-B97B-31087FDB4655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D199CB1-A2A3-4678-9503-C5B61281755C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19952DC6-1186-4754-BB1E-BA1D78A19C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E8AF76-0A1D-4BAE-BF10-D63080352E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B674647-4438-4450-9DCA-25184D4E2682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB7128-CF11-4903-97D7-418403A03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EFB20A-78E2-4BA1-B87C-BB74E8982D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A273401-9394-4BC3-879C-DE3EFC09B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77886493-C30E-439E-BBB4-3D34A8938378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DC4B6-8B3D-4A0D-9934-743FD7494DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88DCCDE-6A81-473F-B4FE-95A84F8DF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7C6FB8-8393-4916-BB2B-3097B1995C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B27825D-099A-4733-8D3F-8EF2B050E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8A1FE0-F74A-4C92-8625-7C933128B567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1975B29A-42E5-4DB8-928C-F8F775DAA3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D717498-4DF9-4D15-A25B-D777FF460E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972EC35D-B727-49A0-A0F1-654FD4E9576C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7918C59-1678-4F24-A7C2-68824D1B59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5B9BAF-59BA-4282-B387-489264D44429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41E5674D-D1D3-4597-8105-F787465E00A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00462296-DF61-4438-818D-C240BFFCCD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD345EA-D5E8-420B-98D0-92674BEBEEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56365432-1E57-4D35-B764-DDDA878B96ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390755B3-30B7-4086-8FB2-A41614F747D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D480A-80A3-4113-A1A6-194A8DD47F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72732395-1B82-4E4F-9D63-D1CA0C6BD929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CF930C-6871-4BCB-8605-B71F82455123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A9B6F-A5D8-403C-9018-0E627FBC9A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2BCA9F-5D56-4EF4-8675-7B76129B994B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050126-bgp.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/689326",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-026A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050126-bgp.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/689326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-026A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows remote attackers to cause a denial of service (device reload) via a crafted packet sent to the disabled interface."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050126-les.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/583638",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-026A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050126-les.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/583638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-026A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:uw-imap:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B695CCC4-D8B4-42CA-BA5C-28262FFAAD9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-02.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/702777",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/CRDY-68QSL5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-128.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/702777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/CRDY-68QSL5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-128.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barton:ngircd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.2",
            "matchCriteriaId" : "6BAD97DE-3E0A-4D1B-87DF-DE3C30E812BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://arthur.ath.cx/pipermail/ngircd-ml/2005-January/000228.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=79705",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://secunia.com/advisories/14056",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/14059",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1013047",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-40.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12397",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19143",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://arthur.ath.cx/pipermail/ngircd-ml/2005-January/000228.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=79705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://secunia.com/advisories/14056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/14059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1013047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-40.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "E4003F93-8AE6-461B-BDB9-D55A1683B6B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tikiwiki.org/art102",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-41.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/13948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tikiwiki.org/art102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-41.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via \".../....///\" sequences, which are not properly cleansed by regular expressions that are intended to remove \"../\" and \"./\" sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D6A976-FFEA-4DB6-B002-8036E778C78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8894855-E303-4B55-B3BC-DCBE3A0AB703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1500D8-952A-46C6-920C-096760C36A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503D7346-4891-40B1-A0CD-0FACC5359431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643610C6-99A9-43C9-A8FC-463A244C08DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C53260-503F-4934-B1FE-9FACD8E0EE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085C333C-E2E7-4ACD-9CC8-C37C67725954"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031562.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110805795122386&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-11.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_07_mailman.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-136.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-137.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031562.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110805795122386&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_07_mailman.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-136.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-137.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18784",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bernd_wuebben:kppp:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF32485-71A9-4B7F-BECB-9163E4E66821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F98A556-D640-40F1-92C2-FC262F50F5C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E2C256-8E9F-4D12-ABF4-FECE06B52CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33AF934D-B51B-4A81-BC47-FFEAB9A62C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3096F2-B0F1-45E1-806D-6434DE56619A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5560AA-372B-4462-AFF8-8F27A980E507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4904CFFD-4CE1-4D65-A7BA-9B06E5B35D07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000934",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-692",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=208&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050228-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-175.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=208&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050228-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F04081-D672-488E-A91D-5088DD04AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB59EF-74EF-462E-BC84-89201F734380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0755A136-3DE3-4B61-B5EF-F6282AACD38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D950C3-0DDC-4549-99F8-1E206768219A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195A133A-26C9-401E-913F-285BA220D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D68E21-6C58-46A7-96F2-9A79DD880803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D11B12-AFD7-4055-A366-D932CA1BA8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC990132-9DF2-4D23-B9DA-0819809A3CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA51D40-E72C-40A4-B238-70F6806FA1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1B7D68-E41E-4A5A-9606-F14F057B39E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BCB10C-FD72-4F18-84C9-AE0603402426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF742FF1-5504-41BB-8FAA-D71B83C791B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C6D04-3226-4654-9A41-0325B48A2F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072A77AD-BB27-4C24-91A0-A12D6E741593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF900D1D-E351-4407-8269-80E5403432B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44915F9F-88DF-4304-8F66-58A869654BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC2D90D-2115-406C-B609-870B241F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF681CC1-B3EC-467A-A10D-10840D3D4575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8660C030-328E-4221-847E-AC4BDA08CE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47AEC277-F9A4-412F-B2EA-C1AEA336A46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7234AF29-BCDA-4728-A141-C169EE59CEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374851C5-C61D-4964-8B4A-473B0A008F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD55C81-3687-46BF-880E-58D7E005A185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2953267F-16BF-404F-83F1-73E0908979B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D953B61-3457-4A0E-A668-BA4937B79784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5F3607-C0DD-494C-AB6E-46E383A6B17D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19138F52-25EA-42B6-89DC-692A8AF0A720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2EBADC-0817-4E38-9F49-8446D8A20CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340368E7-0005-4F8A-8AF1-C20A1198288C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC860DD-57DF-4474-AE2B-9AADB9060175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1D576A-0763-4611-B3CF-CD8514F18783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F570226-CA89-46F4-8C68-9A59BC0602A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162A88DA-E2EA-4E92-B174-9AD86BE8D983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE5C4F5-C64D-4714-B02E-689B435E3E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164F4483-9F28-491A-8F99-4242C9B9CBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34803A7D-45C4-4DBE-BF18-19CE9DE62A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1178D6EE-A462-4CC1-B430-9A44C75D2336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4360530E-6E07-48F9-B8F8-B36622331052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17508D09-AE14-4458-93A2-E2764452EA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F2CD4A-CCA9-4743-86C4-7675D2487E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C1504C-03C5-49E4-8192-E1E698CF07A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3172A-E663-42F6-90E7-51C3850AF9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F6692C-494F-44ED-97C6-A6CD05334DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77231F8B-137F-4FAE-BCD9-658F32943CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552ED77A-F09A-4923-A907-8E0DF8445363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF940EA-676A-42C8-A6E0-7F53C8A34340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DCCFB1-054F-4BF0-92F1-78A2063415D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D3222C-7469-42F6-984D-3223BCD8080E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697B7069-D08D-41BD-8285-A1ABA0E1142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72173CFB-BAB6-456C-B5F2-3AA31D799E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD08A67-195F-431B-98A5-42B2966055DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658C7317-D50B-475A-9E0E-E68AECD49B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1270F454-8E05-413C-BAF4-35D062CA5803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*",
            "matchCriteriaId" : "C7EAAD04-D7C4-43DE-B488-1AAD014B503E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D2E2EF3C-1379-4CBE-8FF5-DACD47834651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C55338-3372-413F-82E3-E1B476D6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000930",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/7880",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12330",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/7880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes \"an invalid memory access,\" a different vulnerability than CVE-2005-0473."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F91275-123E-412C-AA15-B2010D656D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2842937-2275-4C1C-85FE-9C1246B2A06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478EA6B8-99D9-4378-8839-AC85F281F630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6F9FB-C9DA-44BB-9AF7-E8D828788873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://gaim.sourceforge.net/security/?id=12",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110935655500670&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14386",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/795812",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-215.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://gaim.sourceforge.net/security/?id=12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110935655500670&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/795812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-215.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-366.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-663.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2914D032-6969-4522-8D2F-B93D55CB4231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBDF00F-0FCC-4C6B-8541-7FBF2FF79CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1460A9BC-464D-47FC-9CDE-08E094E84520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA370C48-58E9-4A66-8CEB-01ABB90DDDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D47FF1-44FC-4798-B7DB-45B3825496AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFABF40-3269-44D6-98BE-30030002BB40"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14076",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://securitytracker.com/id?1013045",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-667",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/886006",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/13319",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12432",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-wccp_buffer_overflow",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9573",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://securitytracker.com/id?1013045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/886006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/13319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-wccp_buffer_overflow",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero byte UDP packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amp:amp_ii_3d_game_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "755CBEDA-12AE-47A6-850D-6E98E9AED838"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/amp2zero-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110503597505648&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12192",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/amp2zero-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110503597505648&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in WinHKI 1.4d allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a zip file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webtoolmaster_software:winhki:1.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F4E55E-B5F0-4AA3-A85A-AB4684B3D1AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110505334903257&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110505334903257&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitrary files via a .. (dot dot) in the entry parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.3.7c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A47B4-46A9-49DF-A06B-D76FA67318EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0210.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110512850603989&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12193",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0210.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110512850603989&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service (application crash) via a XBM (X BitMap) file with a large (1) height or (2) width value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110512665029209&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110512665029209&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:woltlab:burning_board_lite:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FEBFAB-8F11-4592-BCC8-C54B6ADE783D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:woltlab:burning_board_lite:1.0.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35CFD5C-42EB-4D74-887A-30118A0A7D1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110537385427004&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12199",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110537385427004&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_community_blog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C85BCF-92B3-4D21-BD75-86D373950E49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110538277223800&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/12817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110538277223800&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/12817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 2397) URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB72ED94-7832-43CF-81CF-27F88CAC6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802BFF6B-5D9F-49AE-B96A-86A85E0F1034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7B2943-BC22-4735-8AA5-AADBEA685FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257524-7FC5-40CA-9BDA-82B8565C5BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AACCC-C20A-4BC1-BF62-D40FF71B7360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F52C121-B8B8-43A8-AFAB-E85474021919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659B4C39-0F0F-40C5-9B7E-0D00330611F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Jan/0332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Jan/0537.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13900/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=300116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Jan/0332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Jan/0537.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13900/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=300116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the index field in add_comment.php, (2) set_albumName, (3) slide_index, (4) slide_full, (5) slide_loop, (6) slide_pause, (7) slide_dir fields in slideshow_low.php, or (8) username field in search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.3.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AC096-B500-48C9-8909-E7E25D8081BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the username field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA0436A-8294-44B4-B7D1-62A73BE4DFAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13887/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-45.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13887/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-45.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView parameter, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A43A4-F48B-4780-9F4C-1006F8963FFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:rte:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF482C1-8992-4C75-9BF2-761259068D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:rte:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E16DB80A-7F7B-4A9F-97FA-B7EB2E360AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED545E2-AE1C-45A1-8DF0-9674EF5295BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002CA86D-3090-4C7A-947A-21CB5D1ADD98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:compaq:tru64:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12341036-C023-44A5-BF61-94AD1918E41D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110719624029320&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110719624029320&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users to overwrite arbitrary files via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA95E21-B962-45B6-BAAA-16FF48B7E79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D27A49-9290-42DF-BFA5-817C986A2C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C416C-98FD-4933-8663-2A3B14453A98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDA2381-F51B-4602-8DCC-6792AD2EAFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "418E5005-7D12-43C0-8D76-85CD4D16BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF6AD28-6F83-4C51-9E75-501E5DC858B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDC5AE1-4E22-4C80-97F4-BA5FB3357C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC64107-B9A9-4A7C-8991-A34884491C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FEDDF0-C8E6-4692-A351-AA425DBAC6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A843E2BE-DEB9-4227-BF67-5F99D24AB18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7365D19-F155-4532-8CBA-1A623FCD4B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1FA46EE-0214-4851-AD99-55FF56F6CABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D9E55D-9A58-48AD-8F0A-0113C0177B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597AC80A-4056-4C99-AD34-E02DFE25276D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1CF818-5BB7-4C3E-9BFC-ED0753E9E0BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1542DCC5-77ED-4398-AD97-2A72B264DAAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9CB728-4215-4EB0-8A23-B9A24136D861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59858ED6-98BB-43A7-8D72-FF04DFB5BD67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B96463D-5077-4DB3-92EE-C737EB77A8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D97812-95AB-47EF-8496-F64BB7147E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D662796E-E2A6-46AE-9394-10854A45B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B3E8FA-B50F-4B43-9E18-99D3144E9BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3222EF9-6201-4BF3-95F0-1EB312CA8FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60AA1C19-A9D8-4722-99EA-69A4D2E4655B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF35809-BB43-45ED-8ABE-970E8209345C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE269DAE-EDF4-4830-80A6-C13DA22F9B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E47EC0-8C65-433E-9298-48A755848D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C521AC-41CA-434A-AA3A-073783190D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D138462B-E6F3-4EAC-972C-CD75D2D54F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEC3D53-ECE5-4A59-A75C-D34B61F57DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC90EB9-D128-4631-BABC-81D9A8151C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22AF48B5-C484-4DDB-8167-7A4176C7B6C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDCCC53-84B2-4131-9BE8-DCB84D13D4BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67DB61B7-8611-474A-9F92-01266366BAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E609DB8-9B0E-4F58-A738-09E538FE31EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66BD4F9-1AEA-4E97-A1E2-60D9610405E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7638132B-C3B4-4BA6-8D51-8198EA3C4B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "300898D4-D510-4928-8DA0-AEE87F6AE535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732B277F-25B6-48F4-AA53-276EE1F0A40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD9A0C7-A3B2-4C96-BFFA-C1C660194916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4079350-0F35-40F4-8F5D-30BD5637DD6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684F4DD5-6A24-49D8-A3E3-0975A14A057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6007A35-1D8B-4E8A-A7BB-72994D0AAC4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6F9FADC-A145-4C04-9662-1DB01DD8F27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203D14D9-02B7-4C2F-9F32-69000B231441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7896EE03-A681-4217-8B57-BE14D2FDECF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ECCCB1C-3AE1-4B76-8A78-E88DBE4B52FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00795E59-70C3-46AF-BC62-03CB9DEB0F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCC1E9E-9739-404C-823D-96C98E0A05C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1091D1B-01B3-4832-99FD-97D6FD36E5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A38A33-19DF-4E48-A5CC-ACB9D2C60AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "210E6BA4-B79E-457A-ADF3-4A84F83C2508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51D7F51A-FA0B-48F2-93E6-6C6FF4F4FA39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD18AE4-799D-4D77-BEDA-FE67DE3FADA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C83BC7-EBC6-47A4-A11E-C07CBE631F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF120516-2173-454A-95DD-9CD0FDED2D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104770D0-E363-4644-9DAA-3DBBAA19F4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E432625B-62CD-4A6D-A174-5A056B0B1F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969479D3-DD8B-483B-A02F-C901B16AF011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323772F6-99CA-4878-8EF1-2B81C4C12E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096E0768-DFD7-4AB7-B0BC-E96DD1D888C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2F741-5A97-4A7C-8BBC-A7F4F9E5AD77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "953FA8BD-7607-41CA-9B16-0D9E22E60960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4D7C5C-F919-44F5-A4D6-BBDACDF78AA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB8ADC5-EE39-4773-A140-E2293B060B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AB0CBA-69B0-4A94-8A5A-E8908B66F42A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2A9EB4-6982-44CD-B352-16201A363C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B576397-4A9A-4439-B5BC-4DA94C7B0E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9903994E-D5A3-4FDC-A49C-85BEDA61F490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC76AF9-1344-409E-929A-DDE9F4157BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886D52D8-DFDE-456B-BAE3-D7DC5278ED8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21A9989-2E30-4909-8FEE-3B157A7900F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436E4B27-2A16-46DF-876B-8C59D851FE72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D9DE04-3208-466E-8058-2160AB4D6D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584B4D6F-4761-4128-9A8D-54814AB418E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBE1B6C-21BD-4CB7-A1BE-4858FB09DE1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECB3267-1D5E-49B0-A016-06178E00CC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5254D5-6986-48BC-9156-DD5F163D6A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E0E0C1-BB3E-426D-A341-4AC6DE8A99D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611BAB73-64B4-43FA-8991-CAD4AEF0DC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF1A2DE-AE57-4C74-BB55-55B56F48E703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70FDC23-CF53-4D3D-865D-948ED3AB173A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D5B99F5-0D0A-41C5-AD2A-EAFCBC9DC6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81BD89A-4B20-48DE-A7FF-701779395166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484E51F1-B011-4EE5-B916-CB15486A174D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112F2E86-1FAE-400D-B36D-23928A124460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0FB4487-3E20-4FDA-87F4-A48343B5EB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9B5039-58A6-4DAC-B63A-3A724C84BFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB79C6F-436A-45FD-8303-1033BB1E535B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FC03BB-A18D-441B-A58C-66138350B268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EDDF86-2BE3-4F89-B5C7-8AE06090E1E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F935F48-C281-4DB1-8C32-D2533B4AA866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55AC92EE-6EDE-429E-B5E7-14CBDF77C029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6445663A-4083-461F-8E14-57336465D43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEE3614-7BF0-4288-8B11-3711DFC5842C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9306648-D9A3-4306-82DE-94E46B7B9B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA525A1E-F252-49D0-AF4C-FF0222FD482F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180C127A-B743-406A-ACE6-B55F27E72BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2EA55CF-965E-4450-A0BB-E918ECC9B6A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE88FC22-5571-46B2-B36D-9CE846AC6452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9F6331-D88F-4B84-B7CD-42DABC48F927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CA5505-5558-4805-BF19-5063FF2836A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F0D128-8EA0-4601-9E0C-86A3D1EE5C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E45162-DFAE-4159-BC17-F8907A9A0E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54CC8C2-981E-4456-BFD6-6BEB2B1BE753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568B7053-7540-4C6D-98A8-EECB83956158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEEA023-DC7F-4C00-BBE4-05EA33237EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B106107-F4E1-4DD3-9CBB-556D8DAF1B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9214DC4-0D90-45A2-9AC8-06C1239087EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80DFA577-D3B5-4FF6-A2FC-8B33D30A5C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B626B1A-4155-494A-9A6E-82DF1A5AE303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B555257B-60A7-4B3B-BBC6-7F33A60C8677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823C3DC4-4536-4BFD-9C58-5DAFBA2563D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.113:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C1DC7-3C6A-4807-B1FF-75EAF6F6BFDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.114:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7084E509-4A6D-44FA-B4E3-984ADBBABC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A3FAFD-352F-41E1-8A46-6FB9267DAE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.116:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C2E545-D369-438B-A4D7-4F5C80F30B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.117:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80D5D0A6-5AE0-4AE2-9D1E-644C64A91B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.118:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5A2767-D79A-435D-A59D-E1D2D3DD2DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.119:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071B4283-CD90-44CD-9A52-0D3D476B35DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747D4833-5D12-4298-BB0A-9CB020A72A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.121:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92C4247-E145-4D73-AAD9-E13EFC114A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884121BA-71F4-46FB-8578-8C494501A2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.123:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F25AE5-3314-4532-B6A3-381DB8BF5CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C2A815-2C55-4B5F-88CE-AB11F9A03D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05282200-DF02-4D3F-B34A-127EFD37EEDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.126:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54BE0B37-1D2B-47C2-989B-56A169575E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.127:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2C2246-18D9-4F5C-BA15-07926BA0F9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.128:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869906D2-A1D4-419A-913F-8CD7B63AE9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.129:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD767A5E-1220-401C-922F-F7F2979438D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FC2130-0254-4305-8BED-50E890574C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B698D3-24DF-4AD8-AB60-FFD8EBF0DE37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A582ABB5-3FFC-45BD-9A19-E7B12065A4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.133:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D933FB0-D418-49E9-8576-A17CAFBCB87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.134:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1B0D4-ACA9-4B00-973C-6970EE34DFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.135:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A77E663-A56E-414A-B3A7-44C91FB58CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.136:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033B8ABA-BD21-4AB5-88FD-E5547AAA7BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.137:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585F923B-7170-4D33-9E41-98CAA9773FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED560111-71CB-48BE-B698-31C97E4A9244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.139:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB373CE-886B-4D23-AFD8-BAF0CDECE346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BDE744-1946-4C1E-A669-2FBAB8713F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.141:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DBF861-C77E-418E-9B72-EBA3FCAD3720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.142:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46A19515-E685-40F0-9D07-D26089D98591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.143:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9F6DEF-E5FD-4F46-B5DE-DE189B7BCAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.144:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17283E9-CBDC-4D7A-A605-8F8BCFE088FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.145:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FC6021-259D-47BA-9C33-8B200F4C64A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B424D18-84F5-445E-9D59-8D5DFDF36DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.147:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F127B1B8-7F41-484B-82A5-C2EE02DEFA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.148:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03229A7-6197-4609-B42D-3714F1436CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.149:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E556F73-381C-4904-BCAB-56FB9986C776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364B977C-0AE0-4F29-927A-234FFD1463AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.151:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE24A44B-9472-491B-8D21-EE6642E00C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.152:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713744EE-69EC-4423-AC03-04A15B436D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.153:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72BE19F-E3CB-4E4C-B578-66234D3056D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA42BE7B-246A-4919-924B-1B139FF88033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579BA4B2-D75D-4072-98A2-794DF10F7F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.156:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6589EE99-3F63-4FAD-920F-5C575839BF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.157:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC94DB48-99D2-4F94-B42E-EFE1891837D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.158:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D71E084-1042-453F-B0BC-28AFD7313AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.159:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B225A6-F6C2-4958-8A8C-26EF6AA4E331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37CE981-2EAE-485D-8010-4A110821754B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.161:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F34F7E3-CAF8-4563-BC63-9E4826A0EE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.162:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53382D98-5884-41A6-A6EE-3B9F351F8322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.163:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F015B1-522D-4035-BD9E-144A4361BE7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.164:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E212CB51-02D1-400F-874D-7016CC2C09EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.165:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56C0ACB-8583-4B6A-8492-892B2CCD50E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.166:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06828006-2F45-4800-A07D-2B67318B44B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.167:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3998CD7D-60A3-41A9-A47B-6D3B4F898F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64DBCFC8-B55A-4E8E-B864-7094FA3C2CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.169:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A57A764-1C8E-4D09-80AE-E1DB6CF2C297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C2FBFF-20F2-4875-A1BA-B9AA58765D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.171:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3430EC57-48E2-4C0E-9C53-4E7D69430F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6720F108-5901-4973-9402-C8A188C57734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.173:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DDA136-0005-4293-BD7C-0EC4209F609F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.174:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0E43BF-9A2F-4FB6-AC5A-CA7D057D8D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.175:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9368D119-A35F-47CD-A0F6-00A9AA510D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.176:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E481B7B-7F29-4A4F-8E2F-62050565DCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.177:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6021144D-9673-4D49-9D4F-AFB99FB9F62B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.178:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B90A05B-52A7-4006-B274-4E483583A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.179:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19BD107D-EA3C-46A0-9088-9BB65981BB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DC100-2429-4951-A6D6-77DA1AF94259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.181:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE06FD1-10B2-4DBE-AB34-11F129C95A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.182:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC8414CE-2371-47DA-9370-1FDD831C6D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.183:*:*:*:*:*:*:*",
            "matchCriteriaId" : "068A1F05-A5FB-426B-BDFF-16411C73F2D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.184:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822EBE4A-68C0-4CD4-8F2C-22A2588E8DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.185:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0027731-ACCB-4D69-86B1-D13E23AC06F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.186:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F59552B-B47A-453E-9AE1-4E34926EB072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.187:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DEA045-9CC6-4720-A57B-E50E4DE8D408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.188:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A263AB2-F41A-4B74-A66A-0FDFBF06E34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.189:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D74686-DAF3-428E-8A46-80065E2ABDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312FFD60-159F-452D-A308-7259819C634B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.191:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6B7B71-5FBA-4167-8E6C-6D55942ED549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.192:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81F7D95-4076-4B03-837D-86C1E2436BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.193:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A81479-E968-4335-820B-18C15E0D61D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.194:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE21F4F-1C1E-4A0C-9E82-138A414C5A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.195:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5C97C5-974B-49C7-84F9-FE3427AABFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.196:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F26683-D4A6-4489-933F-F2F50C45A91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.197:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54EEB26E-EB0C-4FAF-8125-90DB245AD055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.198:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4D5D40-BF56-4857-8B8A-20B348DCB263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.199:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E47D5E09-243E-4555-8B9C-3EB608E37BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91168746-0794-4011-93E7-DC5E324A4792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.201:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90B47F8-A368-4535-B129-68EE388F2595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED55A517-7C0E-424C-9AD1-2B0155BB376C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.203:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086D0ECB-C975-467A-96A4-5193F56601C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21ED6AA2-4AED-4226-9F2D-069CAEED450F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3BEDC6C-F491-4166-88E6-07A3A45E1F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.206:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21532670-528C-4356-813B-E88522A8DB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.207:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905C057D-5901-4F14-A7C4-3E453002DABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.208:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60938EA3-F1E8-4D1B-9B7F-D23A903665BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.209:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65B5219-3B4F-4290-859E-96B9DD960862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E46C294-C533-452F-A1F6-037967BB465C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20C9A0-86BC-4AAD-9643-3B878D14921C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.212:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3717DEC-C51E-4903-94FE-2389D1D90DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.213:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C577C93C-3499-4FFB-B33A-89A59DECAFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.214:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D34EC03-184A-43AE-AD3F-CBDCEC06F312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.215:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07A4340B-E02A-47DB-A727-EA0F7601B175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.216:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B313ACD-4E3B-46FC-A8E2-86837BA1B9F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.217:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CDE8BC-7F5D-4304-8051-74D509814197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.218:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157D53D2-C96B-4E12-8E85-5A4C31E16ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.219:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158A94D7-8597-46A0-8694-344651FE6BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7CCC04C-CD39-462D-A131-CD7E48745724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.221:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99CCF9-E570-4AFF-A15B-ED3AEF86ADD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.222:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1AB7B80-3A46-437B-B7FD-0F48DD112A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.223:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FF4DC1-1431-4BC5-AF06-0B3C7BE3E4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firehol:firehol:1.224:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1F7704-44EF-43FB-956E-BBE2DE89FD47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/firehol/firehol/firehol.sh",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/13137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/firehol/firehol/firehol.sh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/13137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0227",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.3.9",
            "matchCriteriaId" : "4C486421-63ED-418C-BAE1-75690B1AC07D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4",
            "versionEndExcluding" : "7.4.7",
            "matchCriteriaId" : "7B6180C2-75D0-4196-AE96-9DA773C346E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.0.1",
            "matchCriteriaId" : "05B6F332-5104-4A52-A43E-24D70BC931C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.postgresql.org/pgsql-announce/2005-02/msg00000.php",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110726899107148&w=2",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/12948",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-08.xml",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-668",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-150.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12411",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10234",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.postgresql.org/pgsql-announce/2005-02/msg00000.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110726899107148&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/12948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-150.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:13.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-1388.  Reason: This candidate is a duplicate of CVE-2004-1388.  Notes: All CVE users should reference CVE-2004-1388 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files that can still be parsed by the Windows batch file parser, aka \"firedragging.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110780995232064&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/firedragging/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-25.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=279945",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780995232064&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/firedragging/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=279945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka \"Fireflashing.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110781055630856&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/fireflashing/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-27.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=280664",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110781055630856&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/fireflashing/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=280664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0234",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0235",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.54",
            "matchCriteriaId" : "BFE75E76-E20D-47A4-9603-0AF46F733AEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_31_opera.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_31_opera.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0236",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The International Domain Name (IDN) support in Omniweb 5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omnigroup:omniweb:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD3E937-C813-4564-9E3C-D009D39E8A8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0237",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0172B167-5780-4F80-ACC9-2FB8B60D6717"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE0AED-7918-41E9-A902-AC4070E03132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031460.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14162",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050316-2.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:058",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-325.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031460.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050316-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0238",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "078698FD-775C-4B73-998D-F6B4F601185C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D044E602-45A5-4B14-8B16-B0978D985027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "31063052-D74D-41D0-B63D-4A7BADAC9C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omnigroup:omniweb:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD3E937-C813-4564-9E3C-D009D39E8A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.54",
            "matchCriteriaId" : "BFE75E76-E20D-47A4-9603-0AF46F733AEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.shmoo.com/idn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.shmoo.com/idn/homograph.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the cert parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:s_mime_plugin:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FE85E7-C933-40E2-8D16-36C8050D62A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:s_mime_plugin:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "829D1404-B4F2-423C-9D10-F53DF0D8BB78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=191&type=vulnerabilities&flashstatus=false",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/502328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.squirrelmail.org/plugin_view.php?id=54",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=191&type=vulnerabilities&flashstatus=false",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/502328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.squirrelmail.org/plugin_view.php?id=54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67455",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67654",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0241",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling \"oversized\" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/14091",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/823350",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12412",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-oversize_reply_headers",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-oversize_reply_headers.patch",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1216",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19060",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10998",
        "source" : "security@debian.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/823350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-oversize_reply_headers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-oversize_reply_headers.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0244",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E0614E-0911-43EE-9F3D-2CF87E0F1851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF09CFB-F7CE-4659-BB20-83231539F765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE8C2A3-7575-41C6-896C-C367E6D35015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88ED8E8C-9044-4E77-923A-D5C6C02A1081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037FF208-82A1-4448-88FE-FACB922FE1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458F558C-7550-48B8-8318-A0D5FAF9ABF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1A6E7C-B1DC-45CC-90B4-AFD6F669AA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B710BA-91FF-47B9-BB56-4711CD50D50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4064A96D-84D5-4257-9981-1139CD4CD08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98290E4-2919-4492-BD14-BB24BA85C729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56E9F72-6CBF-4784-89CD-435A030AC0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEF0FE5-EFCF-448E-B6BD-95FDDD4E17FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B480F0-8FFC-4463-ADC6-95906751811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF44286-0DBF-4CCA-8FFB-993976C18CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629881D2-2A6D-4461-8C35-6EE575B63E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C91580-6428-4234-92DF-6A96108FCF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A19EB5-A1AF-4293-854D-347CD21065DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18ED293-B408-435F-9D1F-2365A2E51022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE2567C-BF48-4255-9E56-590A6F9DD932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C8302B-631A-4DF7-839B-C6F3CC39E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB318EB9-1B49-452A-92CF-89D9BA990AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5913A53B-7B72-4CBD-ADAE-318333EB8B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E58C0-327D-4F14-B496-05FC8179627E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF2D056-5120-4F98-8343-4EC31F962CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516E0E86-3D8A-43F9-9DD5-865F5C889FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F3BF0-9EB6-4A06-B6F7-DE95DD13EFBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.postgresql.org/pgsql-hackers/2005-01/msg00922.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/12948",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10927",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.postgresql.org/pgsql-hackers/2005-01/msg00922.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0246",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.3.9",
            "matchCriteriaId" : "4C486421-63ED-418C-BAE1-75690B1AC07D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.7",
            "matchCriteriaId" : "A44A4B35-A6B2-419C-859C-C95483E49826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.1",
            "matchCriteriaId" : "8EBCC126-D544-4D59-994F-99071F262808"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.postgresql.org/pgsql-committers/2005-01/msg00401.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/12948",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12417",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19185",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10148",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.postgresql.org/pgsql-committers/2005-01/msg00401.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/12948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0247",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E0614E-0911-43EE-9F3D-2CF87E0F1851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF09CFB-F7CE-4659-BB20-83231539F765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE8C2A3-7575-41C6-896C-C367E6D35015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88ED8E8C-9044-4E77-923A-D5C6C02A1081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037FF208-82A1-4448-88FE-FACB922FE1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458F558C-7550-48B8-8318-A0D5FAF9ABF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1A6E7C-B1DC-45CC-90B4-AFD6F669AA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B710BA-91FF-47B9-BB56-4711CD50D50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4064A96D-84D5-4257-9981-1139CD4CD08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98290E4-2919-4492-BD14-BB24BA85C729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56E9F72-6CBF-4784-89CD-435A030AC0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEF0FE5-EFCF-448E-B6BD-95FDDD4E17FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B480F0-8FFC-4463-ADC6-95906751811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF44286-0DBF-4CCA-8FFB-993976C18CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629881D2-2A6D-4461-8C35-6EE575B63E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C91580-6428-4234-92DF-6A96108FCF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A19EB5-A1AF-4293-854D-347CD21065DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18ED293-B408-435F-9D1F-2365A2E51022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE2567C-BF48-4255-9E56-590A6F9DD932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C8302B-631A-4DF7-839B-C6F3CC39E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB318EB9-1B49-452A-92CF-89D9BA990AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5913A53B-7B72-4CBD-ADAE-318333EB8B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E58C0-327D-4F14-B496-05FC8179627E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF2D056-5120-4F98-8343-4EC31F962CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516E0E86-3D8A-43F9-9DD5-865F5C889FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F3BF0-9EB6-4A06-B6F7-DE95DD13EFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-683",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-19.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_postgresql.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-150.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19375",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19376",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19378",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9345",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_postgresql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-150.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13803/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57717-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-096.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12260",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13803/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57717-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-096.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14198",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67472",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67519",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67802",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=193&type=vulnerabilities&flashstatus=false",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/896729",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12496",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=193&type=vulnerabilities&flashstatus=false",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/896729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guillaumegardey:biborb:1.3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC18EA31-1AFC-41F4-A6CC-CE9A89FE74AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guillaumegardey:biborb:1.3.2:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FDF2D1-D83E-41D2-88CA-60F46178C0E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12583",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guillaumegardey:biborb:1.3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC18EA31-1AFC-41F4-A6CC-CE9A89FE74AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guillaumegardey:biborb:1.3.2:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FDF2D1-D83E-41D2-88CA-60F46178C0E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12583",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary files via a Delete action and .. (dot dot) sequences in the database_name parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guillaumegardey:biborb:1.3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC18EA31-1AFC-41F4-A6CC-CE9A89FE74AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guillaumegardey:biborb:1.3.2:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FDF2D1-D83E-41D2-88CA-60F46178C0E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12583",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guillaumegardey:biborb:1.3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC18EA31-1AFC-41F4-A6CC-CE9A89FE74AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guillaumegardey:biborb:1.3.2:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FDF2D1-D83E-41D2-88CA-60F46178C0E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12583",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, which leads to heap corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=200&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-18.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-277.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-337.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=200&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:washington_university:wu-ftpd:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7196CF2D-8CCC-454A-A2C1-6408A9D636C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:washington_university:wu-ftpd:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D851CEBD-4FE5-46D9-99BD-CA3F3235B2E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.63/SCOSA-2005.63.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00637342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00637342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14411",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19561",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101699-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57795-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-705",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=207&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0588",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1271",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.63/SCOSA-2005.63.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00637342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00637342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101699-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57795-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=207&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  Red Hat Enterprise Linux 2.1 shipped with wu-ftpd, however we were unable to reproduce this issue.  Additionally, a code analysis showed that attempts to exploit this issue would be caught in the versions we shipped.\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=149720",
        "lastModified" : "2006-10-23T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37161BE-6AF5-40E0-BD63-2C17431D8B36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportconnectw.ca.com/public/enews/BrightStor/brigcurrent.asp#news1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=194&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://supportconnectw.ca.com/public/enews/BrightStor/brigcurrent.asp#news1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=194&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY66933&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67750&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67812&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=196&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY66933&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67750&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67812&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=196&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67124&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67136&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67807&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=197&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67124&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67136&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67807&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=197&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) expand or (2) order parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3012FBFA-B0A6-407F-AADB-F4AEA6080798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05ABB33-DD31-455D-A517-CB9EA7C75706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83A54AF-7414-4D66-85D2-BFDF491C0E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228741CF-B9B1-4025-8325-66F10CC75748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C0CBE-9AB2-4723-B996-1BE7D7A2DDBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110461644407935&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12114",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110461644407935&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL commands via the (1) parent or (2) sortposted parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05ABB33-DD31-455D-A517-CB9EA7C75706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB6B7DE-D724-43FE-BECF-73E7E778A872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110461644407935&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12114",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110461644407935&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via carriage returns and #10 in the url_avatar field, which is interpreted as a sensitive directive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263DBD5A-63AD-4568-B29A-AC9268D77067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110477752916772&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12150",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110477752916772&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-178"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sir:gnuboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.40",
            "matchCriteriaId" : "BFF591A1-0AFC-4182-9AC2-31933C6C9B33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110477648219738&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/13711",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12149",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18729",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110477648219738&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/13711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) si parameter to showcat.php, (2) cat or (3) page parameter to showproduct.php, or (4) report parameter to reportproduct.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:reviewpost_php_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.84",
            "matchCriteriaId" : "89C76644-1E84-434E-AD9E-B4DD7CB0DDEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:reviewpost_php_pro:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A201E3C2-98CE-493C-AD53-B33088954268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:reviewpost_php_pro:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "790D2CB2-EF2B-43C6-AE21-ECC5BA6C73C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:reviewpost_php_pro:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5424DC94-B8FF-47C4-B5C0-1BF891EBB7AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110485682424110&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13697/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00062-01022005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110485682424110&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13697/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00062-01022005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review file with multiple extensions, which bypasses the intended restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:reviewpost_php_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "BC8DE8E6-00CB-46CC-9C9A-537AEDF74A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:reviewpost_php_pro:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A201E3C2-98CE-493C-AD53-B33088954268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:reviewpost_php_pro:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "790D2CB2-EF2B-43C6-AE21-ECC5BA6C73C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110485682424110&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13697/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00062-01022005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110485682424110&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13697/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00062-01022005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) ppuser parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.85",
            "matchCriteriaId" : "7D6D629E-A1CA-42FE-B9FF-E126B0A982E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110486165802196&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13680/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00063-01032005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12156",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110486165802196&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13680/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00063-01032005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) via a GET request containing an MS-DOS device name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3com:3cdaemon:2.0:revision_10:*:*:*:*:*:*",
            "matchCriteriaId" : "1670B891-D496-41BE-871C-5501C9D0A738"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service (application crash) via format string specifiers in (1) the username, (2) cd, (3) delete, (4) rename, (5) rmdir, (6) literal, (7) stat, or (8) CWD commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3com:3cdaemon:2.0:revision_10:*:*:*:*:*:*",
            "matchCriteriaId" : "1670B891-D496-41BE-871C-5501C9D0A738"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3com:3cdaemon:2.0:revision_10:*:*:*:*:*:*",
            "matchCriteriaId" : "1670B891-D496-41BE-871C-5501C9D0A738"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110886719528518&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110886719528518&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3com:3cdaemon:2.0:revision_10:*:*:*:*:*:*",
            "matchCriteriaId" : "1670B891-D496-41BE-871C-5501C9D0A738"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Soldner Secret Wars 30830 and earlier does not properly handle the \"message too long\" socket error, which allows remote attackers to cause a denial of service (socket termination) via a long UDP packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jowood_productions:soldner_secret_wars:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "30830",
            "matchCriteriaId" : "9A249883-64CA-4BC3-93B9-455956E8C802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110486654213504&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12162",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110486654213504&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the web interface in Soldner Secret Wars 30830 allows remote attackers to inject arbitrary web script or HTML via a user message, which is not filtered or quoted when the administrator views the server logs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jowood_productions:soldner_secret_wars:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "30830",
            "matchCriteriaId" : "9A249883-64CA-4BC3-93B9-455956E8C802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110486654213504&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12162",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110486654213504&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the uid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110486566600980&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12161",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110486566600980&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bottomline:webseries_payment_application:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15362EE4-A086-46D6-A77E-A22CCB995473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110547396124885&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12216",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110547396124885&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a (1) . (dot) or (2) + (plus sign) at the end, which returns the source code for that file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emotion:mediapartner_web_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47EA527-E416-4A27-AC9A-171AD6445A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emotion:mediapartner_web_server:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1F0E86-650B-4819-B501-57942A88722E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110547824902053&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110547824902053&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP port 161 and before link-state change occurs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:airport_express:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "A4536747-1DED-4EAD-BB66-51D4BFB93BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:airport_extreme:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "D4CD0315-E2F5-49BE-B90A-721397CFE237"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030832.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110582124528867&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110582124528867&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the month parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minis:minis:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E95ED1B-D1F3-4E40-99D9-7A4AAB89A865"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110599953704025&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12279",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110599953704025&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C84852A-1153-46A7-9B82-D05F4A6043D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACC77BE-277F-47F9-B50A-2E9CF5D4A965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2109201B-89F7-4FF2-BFD1-2B220E3146FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E108197C-DCA8-4624-9FEF-621BFB299662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C63EC8-73D7-46AE-81E7-04DF212BC8B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CC3066-82BA-41AB-B6C8-D2E7D7AE7D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "553BAC35-0A37-40C2-A150-F34D59D097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54497B9-D154-4751-9871-BF2D650F76AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110608912525883&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpu-jan-2005_advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.petefinnigan.com/directory_traversal.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110608912525883&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpu-jan-2005_advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.petefinnigan.com/directory_traversal.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the (1) dir parameter to controller.php or (2) dir_name parameter to controlleroo.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gforge:gforge:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF5AB4B-9002-49FD-A02E-9537C73D97ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gforge:gforge:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE3B595-4902-4A29-83CC-B05932605B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gforge:gforge:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C5E4D8-0B12-4026-9818-173ADA040C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gforge:gforge:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11701B3-7DF7-4E2A-8D6C-8C97970B1145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110627132209963&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12318",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110627132209963&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBF5CC-D5C4-448F-B45E-74B6BD8E2DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5742AD4D-4FB0-4CC1-9CAD-6A6477326CC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110636597832556&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.comersus.org/forum/displayMessage.asp?mid=32753",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110636597832556&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.comersus.org/forum/displayMessage.asp?mid=32753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBF5CC-D5C4-448F-B45E-74B6BD8E2DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5742AD4D-4FB0-4CC1-9CAD-6A6477326CC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110636597832556&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110636597832556&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBF5CC-D5C4-448F-B45E-74B6BD8E2DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5742AD4D-4FB0-4CC1-9CAD-6A6477326CC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110636597832556&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110636597832556&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename in a ZIP file for a skin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:divx:divx_player:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C055B47-7DDC-4391-8803-E0A5C0B7C3AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/divxplayer-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110642748517854&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12332",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/divxplayer-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110642748517854&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteman:siteman:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BFBDB-D4CF-466B-AF01-69B7432D5795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteman:siteman:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD032BB-869C-4DAF-A54A-FADC314B9C16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110627350616949&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110643320814371&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/13131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12304",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110627350616949&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110643320814371&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/13131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php, (2) permissions.info.php, (3) security.info.php, (4) formcontrol.php, or (5) file_modules.php, which reveals the path in an error message because the pathos_core_version variable is undefined."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03041476-37D5-4DEB-8392-42806DF3DC70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110666998407073&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110666998407073&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, which could allow remote authenticated users to retain unauthorized access to resources."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367F6F04-0E45-4EED-AB36-D8D1E993D29B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8229DE3A-B9CB-44FF-8409-51E09DDED479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2699E7A6-7B3A-4C4C-9472-B8B6B547624D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E88A46-CEC7-46D5-9697-232E18531FD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110684375429946&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ingate.com/relnote-422.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110684375429946&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ingate.com/relnote-422.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3A562-CA49-4510-AE36-70D3421B1A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10B2D88-4019-4F3C-9500-482A2A9AFE97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110693950205007&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110693950205007&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3A562-CA49-4510-AE36-70D3421B1A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EFBAF4F-2B71-4BAB-A3C2-AB7249B1F81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10B2D88-4019-4F3C-9500-482A2A9AFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:7.6.4r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233BAEB8-F317-4962-8907-0FE439C15EE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110693950205007&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110693950205007&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Infinite Mobile Delivery Webmail 2.6 allows remote attackers to inject arbitrary web script or HTML via the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:captaris:infinite_mobile_delivery_webmail:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB449A-BE0A-4828-A953-2106CA1DB86C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110703630922262&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lovebug.org/imd_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110703630922262&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lovebug.org/imd_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that contains invalid characters for a Windows foldername, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:captaris:infinite_mobile_delivery_webmail:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB449A-BE0A-4828-A953-2106CA1DB86C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110703630922262&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lovebug.org/imd_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110703630922262&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lovebug.org/imd_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application crash) via a packet with large values that are not properly handled in certain malloc or memcpy operations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techland:xpand_rally:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C377411E-9056-4088-B763-51ED4EA9DD44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/xprallyboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031336.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110720064811485&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/xprallyboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110720064811485&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action parameter, which reveals the path in an error message when it cannot include a login.php script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EB588E-FC2B-4E10-86F5-33C2758BEED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110720365923818&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110720365923818&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action parameter that is used in an include statement for login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EB588E-FC2B-4E10-86F5-33C2758BEED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110720365923818&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110720365923818&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtain the IP address of the LAN side interface by pinging a valid LAN IP address, which generates an ARP reply from the WAN address side that maps the LAN IP address to the WAN's MAC address."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:rt311:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3653528A-E4EE-44AA-9EF9-EC6C58D8BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:rt314:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76508DEB-9224-46CD-9BB9-9F4B99E0850D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:zyxel:prestige:310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15AA9574-519C-4F2A-A666-64D8813BA468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:zyxel:prestige:314:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2377B1-5B43-45AB-A880-B1D3E74C1444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:zyxel:prestige:324:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF9F48F8-ACA9-4254-A3CD-7451F4EA7B23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110720465527599&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110720465527599&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify arbitrary files via a ZIP file with a file whose name includes .. (dot dot) sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zipgenius:zipgenius:standard_5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71ABFD93-F1FC-4B66-B3FD-E932C0B31A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zipgenius:zipgenius:suite_5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A055ABF-F2B7-4696-8F2C-8106E0DC0DBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110736990230696&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013542",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.7a69ezine.org/node/view/195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12419",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110736990230696&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.7a69ezine.org/node/view/195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:people_can_fly:painkiller:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01ECBCE-8896-4436-B694-96B2E57D8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:people_can_fly:painkiller:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C41CE39-51D8-4680-953F-BA447F8E4F15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/painkkeybof-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110736915015707&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14113/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12423",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/painkkeybof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110736915015707&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14113/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BDA79B-B1CC-479C-A1DA-41DDDE098EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A1E0B7-020F-4110-9603-58CA8CEB7581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE627C32-9F4B-4D36-AC4B-5D01A47BFD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3366C2D1-F30A-413B-94A2-7DBDACC083EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8585089C-A6B5-4BFE-BEA3-133B94F24F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1011521-AEF2-40EB-B671-66B20FF01CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9843D850-DC4C-49D5-AAEB-EF75FB54F08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9B3100-2223-4201-AE29-B4A4EAFF2595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B556-A1B4-4AEF-8223-5ED44819515D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110737609604210&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110737609604210&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ventia:desknow_mail_and_collaboration_server:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6044CCF-674D-4CDE-A3A7-70BA29874388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ventia:desknow_mail_and_collaboration_server:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD49EE81-7F8D-479C-BA45-744AE850D81E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110737616324614&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.org.sg/vuln/desknow2512.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12421",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110737616324614&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.org.sg/vuln/desknow2512.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LANChat Pro Revival 1.666c allows remote attackers to cause a denial of service (application crash) via a malformed UDP packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lanchat_pro_revival:lanchat_pro_revival:1.666c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA365537-172F-4DD5-81E9-4506BE5AE19B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110746524021133&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/LANChatRevival1.666c-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110746524021133&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/LANChatRevival1.666c-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service (device crash) via an HTTP POST request containing an unknown parameter without a value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:psus4_printserver:6032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DA82CF-775B-4BDF-9FCB-5A56752FA414"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110747234701646&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14136",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12443",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110747234701646&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emotion:mediapartner_web_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47EA527-E416-4A27-AC9A-171AD6445A88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110547214224714&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110547214224714&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emotion:mediapartner_web_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47EA527-E416-4A27-AC9A-171AD6445A88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110547214224714&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110547214224714&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wietse_venema:postfix:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13948D17-79FA-45FF-8820-5A833EB4D36C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CD54FE-D682-4063-B7C3-8B29B26B39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "37F124FE-15F1-49D7-9E03-8E036CE1A20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C55338-3372-413F-82E3-E1B476D6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110763358832637&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14137/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-152.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12445",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110763358832637&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14137/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-152.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:savant:savant_webserver:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6A595E-2779-46A2-A091-E01B5EA12CE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110756234611259&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110725682327452&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110728448025559&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12429",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110756234611259&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110725682327452&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110728448025559&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long MAIL FROM command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxmail:foxmail_email_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB66C043-0412-4041-976C-4CA5E5B89309"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110763204301080&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12454",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110763204301080&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (application crash) via a negative UAM string length in a FPLoginExt packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:afp_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC963DD-FFF6-47CB-872C-4F099F5BC499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110791369419784&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110791369419784&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HTML and perform cross-site scripting (XSS) attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25032A3A-9D05-4E69-9A22-C9B332976769"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110756965213819&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tigger.uic.edu/~jrockw2/safari_20050204.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110756965213819&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tigger.uic.edu/~jrockw2/safari_20050204.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a hard link from the .DS_Store file to an arbitrary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780124707975&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14188",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12458",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110780124707975&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicnow:perldesk:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1AE23A-BC32-4059-9C00-70FB302A9871"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110782042532295&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12512",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.security-project.org/projects/board/showthread.php?p=5172#post5172",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12471",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110782042532295&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.security-project.org/projects/board/showthread.php?p=5172#post5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute arbitrary files via a .. (dot dot) in the filename parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:software602:602lan_suite:2004.0.04.1221:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42FAFC38-1EE3-4AB8-85E0-9D0A96553BC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110793103506620&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14169/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.org.sg/vuln/602lansuite1221.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110793103506620&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14169/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.org.sg/vuln/602lansuite1221.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protected forums via the thread_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA28972C-57DB-4713-8CF1-29A44150E147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110788267311132&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110788267311132&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SafeNet SoftRemote VPN Client stores the VPN password (pre-shared key) in cleartext in memory of the IreIKE.exe process, which allows local users to gain sensitive information if they have access to that process."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet:softremote_vpn_client:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C384818-1B30-4EBA-99DE-E64008F72985"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110791865522076&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nta-monitor.com/news/vpn-flaws/safenet/index.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110791865522076&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nta-monitor.com/news/vpn-flaws/safenet/index.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in RealArcade 1.2.0.994 and earlier allows remote attackers to execute arbitrary code via an RGS file with an invalid size string for the GUID and game name, which leads to a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realarcade:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0.994",
            "matchCriteriaId" : "C4DBB318-3C49-412D-851D-033D01AC009C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110792779115794&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14187/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110792779115794&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14187/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in RealArcade 1.2.0.994 allows remote attackers to delete arbitrary files via an RGP file with a .. (dot dot) in the FILENAME tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realarcade:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0.994",
            "matchCriteriaId" : "C4DBB318-3C49-412D-851D-033D01AC009C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110792779115794&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14187/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110792779115794&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14187/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37161BE-6AF5-40E0-BD63-2C17431D8B36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportconnect.ca.com/sc/solcenter/sol_detail.jsp?aparno=QO63672&os=UNIX&returninput=0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=198&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://supportconnect.ca.com/sc/solcenter/sol_detail.jsp?aparno=QO63672&os=UNIX&returninput=0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=198&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_workstations:*:*:*:*:*",
            "versionEndIncluding" : "4.52",
            "matchCriteriaId" : "AD54BC7B-CBD8-4D02-8820-95B2167F0582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_gateways:*:*:*:*:*",
            "versionEndIncluding" : "4.61",
            "matchCriteriaId" : "6E42F017-98A7-4124-9D86-EA298F9EA25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_servers:*:*:*:*:*",
            "versionEndIncluding" : "4.61",
            "matchCriteriaId" : "43B1DC94-12A4-438E-8EF6-02CE3BDCD960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_client_security:*:*:*:*:*",
            "versionEndIncluding" : "5.01",
            "matchCriteriaId" : "F18B3BB2-60F6-4E24-869C-2A411C697668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_server_security:*:*:*:*:*",
            "versionEndIncluding" : "5.01",
            "matchCriteriaId" : "BA62B7FB-0C89-48F1-AC7C-1128702BD736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:windows_servers:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "D93C56CE-CFA2-40B4-9A35-7C413900EDB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:workstations:*:*:*:*:*",
            "versionEndIncluding" : "5.43",
            "matchCriteriaId" : "415DDB5B-7829-4971-BD1A-4C59FA930EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:mimesweeper:*:*:*:*:*",
            "versionEndIncluding" : "5.51",
            "matchCriteriaId" : "315C0071-C761-4DC3-8640-E9334350C2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:client_security:*:*:*:*:*",
            "versionEndIncluding" : "5.55",
            "matchCriteriaId" : "8D795DA7-D19B-4730-9995-E0953B858FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:firewalls:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "30A6D6C5-BDFB-41A6-A941-27529CF2BDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:ms_exchange:*:*:*:*:*",
            "versionEndIncluding" : "6.31",
            "matchCriteriaId" : "1B9E90E3-71D8-41B3-9E04-4DC115C16814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.60:*:samba_servers:*:*:*:*:*",
            "matchCriteriaId" : "C8C41338-0651-425E-A823-C8CBD91977D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:citrix_servers:*:*:*:*:*",
            "matchCriteriaId" : "095A03CE-6B8F-4275-87BE-44E807F97939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F996B07-8B07-42A6-86FC-B5B55F708861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2C1784-2482-4CBE-BE6D-4519C3FB64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0429B86A-F228-44E8-ABBB-D57BEE3679F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A0FDD3-3364-4452-BD6F-EB6F85D3119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_personal_express:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10",
            "matchCriteriaId" : "C7D56465-6411-449F-BF05-B303B0EF575E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.41",
            "matchCriteriaId" : "4AAB47F1-ACE9-417F-8FB4-480A5728D598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:2.06:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "33E76051-5D4A-4C8C-A911-3B78BFEA77CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.f-secure.com/security/fsc-2005-1.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/188",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2005-1.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0353",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet:sentinel_license_manager:7.2_.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E044A555-4CA4-483A-8F69-E5F0B3D66D5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111022094326772&w=2",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111072872816405&w=2",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/14511",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-30-advisory.pdf",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/108790",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12742",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19621",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111022094326772&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111072872816405&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-30-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/108790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0363",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255AE13F-5A3E-4A8E-B453-C9B10971E2E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312C3DA6-D34A-4566-923E-F2ECD613EF96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-682",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B5E71B-FBA8-472D-827F-078E337724E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB35C02B-9966-41CA-BB8F-61EACB777816"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.kde.org/show_bug.cgi?id=97608",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA-2005-245.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110814653804757&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-14.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050316-2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-325.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.kde.org/show_bug.cgi?id=97608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA-2005-245.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110814653804757&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050316-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is available to determine whether an integrity check failed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "893B46A3-9BAA-4AEF-9806-AD689E6E46F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eprint.iacr.org/2005/033",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://eprint.iacr.org/2005/033.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013166",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-29.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/303094",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:057",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_07_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/13775",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.pgp.com/library/ctocorner/openpgp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12529",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://eprint.iacr.org/2005/033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://eprint.iacr.org/2005/033.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-29.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/303094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_07_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/13775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.pgp.com/library/ctocorner/openpgp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) EntryID or (2) searchterm parameter to index.php, or (3) username parameter to authenticate.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmunk_scripts:cmscore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEF750C-967A-43A0-910E-9FC007F60222"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110803385223054&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14142/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110803385223054&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14142/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service (application crash) via a packet with a large (1) descriptor ID or (2) claim_id, which exceeds the boundaries of an array."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armagetronad:armagetron:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.6.0",
            "matchCriteriaId" : "E02DEC87-A8AA-4B60-A528-03A54EFD3899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armagetronad:armagetron_advanced:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.7.0",
            "matchCriteriaId" : "60E336F6-94E6-4977-9ED0-CDE0E4D8F4D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110811699206052&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110811699206052&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service (network disconnection) via an empty UDP packet, which is not properly distinguished from the \"no new packets\" state of the associated socket."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armagetron:armagetron:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.6.0",
            "matchCriteriaId" : "5C52FDC9-AC81-4F1F-9112-0C2C2512C308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armagetron:armagetron_advanced:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.7.0",
            "matchCriteriaId" : "8EBF70D5-B05E-4EDC-B74B-DD6C45163BBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110811699206052&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110811699206052&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service (freeze) via a large number of player connections that do not send any data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armagetron:armagetron:0.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1AD5B6-668B-4A0F-9459-DDE514354142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armagetron:armagetron:0.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F052217-0F4D-43B0-9C55-1927333BE47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armagetron:armagetron_advanced:0.2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597F64D9-AA8F-4738-AE1D-49D03C5BD361"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110811699206052&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110811699206052&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0372",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.18",
            "matchCriteriaId" : "67518D03-2944-40E5-8209-8C5BFB4440B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000957",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-686",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-27.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:050",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-410.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/8379",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/8380",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12539",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A717",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9923",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-410.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/8379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/8380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Bitboard 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via an [img] bbcode image tag with an event such as mouseover."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitshifters:bitboard:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F186529-2B31-4AC1-AF1E-4FA674FF9FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitshifters:bitboard:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF612A0-E8D6-464A-A7A9-EE897C7A9476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110555988111899&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12248",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110555988111899&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idalbum and (2) idimage unset, which reveals the installation path in an error message for the sql_fetch_row function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sergey_kiselev:sgallery:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE5AE46-E927-46C7-AFBF-A27432D96D15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110557050700947&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-39.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110557050700947&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sergey_kiselev:sgallery:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE5AE46-E927-46C7-AFBF-A27432D96D15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110557050700947&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13824",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12249",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-39.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110557050700947&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to prefs.php or (2) url parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF82BE80-C62C-4E1A-8AB9-5773E49142B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110564059322774&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-01.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12255",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110564059322774&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the _zb_path parameter to (1) _head.php or (2) outlogin.php, or the dir parameter to (3) write.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021147FB-D153-440D-95F2-B812FB9DEA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABAEFB19-C049-4C09-89CF-00E128FEC5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FC71F5-C279-40A8-ABC3-5A141D7DF419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837FA51A-A0C2-4BC0-9349-DB220BBB7A42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110565373407474&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12257",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110565373407474&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021147FB-D153-440D-95F2-B812FB9DEA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABAEFB19-C049-4C09-89CF-00E128FEC5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FC71F5-C279-40A8-ABC3-5A141D7DF419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837FA51A-A0C2-4BC0-9349-DB220BBB7A42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110565373407474&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13769",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/12928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/12929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/12930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/12931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/12932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12206",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12258",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110565373407474&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/12928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/12929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/12930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/12931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/12932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Breed patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via an empty UDP packet, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:breed:breed:patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673E7ABC-A255-43D3-975A-F526105FEAA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110565587010998&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13211",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12262",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110565587010998&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:control_manager:3.0_enterprise:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B89D07B-D6C5-49EB-990E-E477648704E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110564369316593&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110565281205427&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-28-advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110564369316593&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110565281205427&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-28-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0385",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in luxman before 0.41, if used with certain insecure svgalib libraries, allows local users to execute arbitrary code via a long -f command line argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frank_mcingvale:luxman:0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C134E2B2-53D2-40C2-A10A-B36CD8F723DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frank_mcingvale:luxman:0.41_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A08F9A96-796F-4FAC-8C79-36B02A939C1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14582",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-693",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0310a%5D.txt",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393195/2005-03-13/2005-03-19/0",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12797",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19680",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/14582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0310a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393195/2005-03-13/2005-03-19/0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0386",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web script or HTML via MIME text/enriched or text/richtext messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4973BA4E-9117-44F8-86AB-087378A6CC7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204F09AB-0001-4B2F-8129-D63CBFEF0328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6384049E-8303-426F-BC5F-11FC4B2C2A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E78F85-AC32-47D4-B7E0-CBF8183A4F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8C4860-B717-42BB-8162-37F8E9EA7664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807B68CD-503D-4DD8-8D9E-8C5EF4A225C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FA70B9-4498-4F97-A6B5-46A10337D98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D293C206-3E79-49ED-9CC5-80631EF7D9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BE2D1D-826F-4647-ADB1-EE654FEB62A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D160AC3B-E03D-4073-ADB3-5FC8309037E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14777",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-700",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0387",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "remstats 1.0.13 and earlier, when processing uptime data, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remstats:remstats:1.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF9E0765-EA4C-452A-B666-FCDCF6748D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remstats:remstats:1.0.9b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D40B3D-BE47-4518-89A5-BDD1E58C1F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remstats:remstats:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5F2D00-0E8D-4AFF-BEFD-0EDBBFD0B4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remstats:remstats:1.00a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59408088-7B19-4224-9AD9-ACA76C87FAE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-704",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0388",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands \"due to missing input sanitising.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remstats:remstats:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5F2D00-0E8D-4AFF-BEFD-0EDBBFD0B4BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-704",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0389",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:14.867",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0814.  Reason: This candidate is a duplicate of CVE-2005-0814.  Notes: All CVE users should reference CVE-2005-0814 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0390",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axel:axel:1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F25C9D0-ABA3-47B7-A1B7-1882AFA8BC83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14831",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-09.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-706",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/debian-devel-changes%40lists.debian.org/msg118978.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13059",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/debian-devel-changes%40lists.debian.org/msg118978.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0391",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_de_rauglaudre:geneweb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10",
            "matchCriteriaId" : "7379677D-74AF-446D-BC7F-74017E31809E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-712",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20176",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0396",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver consumption) by \"stalling the DCOP authentication process.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:dcopserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3",
            "matchCriteriaId" : "EA5DB323-F899-4F2F-A0A8-4DEB5DB2FD4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:desktop_communication_protocol_daemon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3",
            "matchCriteriaId" : "891B0EE8-FA0F-408C-8ABE-D2F36031526F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111099766716483&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-22.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050316-1.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:058",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-307.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-325.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10432",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111099766716483&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050316-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-307.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0397",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D520D77-FF71-465D-8F0E-DA7C28480249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50871879-EBDB-44A7-B953-352C0FD379BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998006D6-4335-400B-9E5F-95029AD16EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5B8016-B7E4-46AD-9FF7-90FC708CF1DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83542",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110987256010857&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-702",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-11.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-070.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-320.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10302",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110987256010857&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-070.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-320.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0399",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14654",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-160.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/557948",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-30.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-336.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-337.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12881",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0296",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/191",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-160.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/557948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0400",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.11.6",
            "matchCriteriaId" : "728AF243-44FA-4082-B1CB-AA5D21127E41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://arkoon.net/advisories/ext2-make-empty-leak.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111238764720696&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14713/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/103-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://arkoon.net/advisories/ext2-make-empty-leak.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111238764720696&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14713/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/103-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0401",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka \"Firescrolling 2.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111168413007891&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://mikx.de/firescrolling2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14654",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-32.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-336.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12885",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0296",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9650",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111168413007891&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mikx.de/firescrolling2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0402",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firefox sidebar panel, then using the sidebar panel to inject Javascript into a privileged page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14654",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-31.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-336.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0296",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=284627",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=284627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmail:kmail:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A330E4-EF4F-44D4-B817-13E532CD9047"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7180B3-03AC-427C-8CAD-FE06F81C4FF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.kde.org/show_bug.cgi?id=96020",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://mail.kde.org/pipermail/kmail-devel/2005-February/015490.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14925",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5GP0B0AFFE.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.kde.org/show_bug.cgi?id=96020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://mail.kde.org/pipermail/kmail-devel/2005-February/015490.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5GP0B0AFFE.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zakon_group:openconf:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D373E1-1E39-4F79-9E6F-72C85A1CF2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zakon_group:openconf:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6349190-A64D-49F9-B010-0B66D9675C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zakon_group:openconf:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37301935-1E96-4283-B8C4-DC816E008934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zakon_group:openconf:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599488FA-B290-49AC-8369-73AC9E881361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zakon_group:openconf:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3855A6-C652-4420-A4B6-5A702F71CAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zakon_group:openconf:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F0585-27D0-4BCE-B80D-9A3CBA4A13DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zakon_group:openconf:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCAF2D9-125C-46D6-B6EE-8085F74E7854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zakon_group:openconf:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FC00B8-9F3F-4FB8-B47B-12B495C5BFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zakon_group:openconf:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7BB3-57F6-403D-87EF-40EC30B75872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Feb/0347.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14294",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Feb/0347.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. NOTE: it is highly likely that this item will be MERGED with CVE-2005-0836."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "E2D500E0-A80D-4C9E-94F0-6B59AFEB186A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_01:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "BA17272A-FCA5-420D-8724-35F15190C1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_02:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "6D6E25CB-6C06-43D0-949E-BB3FEE886CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_03:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "B1DD35E9-9FED-49D3-8343-B9EF2C8A9C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_04:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "23F6CB66-75D5-472C-A6CD-8598376A065A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_05:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "641FA125-3979-4F12-9764-ADF06E243248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_06:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "9F5D9D33-F7D9-4A82-BA32-800A265B16CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en IBM Websphere Application Server 5.0, 5.1, y 6.0 cuando es ejecutado en Windows, permite a atacantes remotos obtener el código fuente de Java Server Pages (.jsp) mediante una URL alterada que hace que la página sea procesada por el fichero que sirve el servlet en lugar de por el motor JSP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DC6FE-BBB4-45AA-8A5F-F204E798DF07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14274",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008814",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008815",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via \"Heavy UDP Usage\" that triggers a NULL dereference."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en Solaris 8 y 9 permite a atacantes remotos provocar la Denegación de Servicio (DoS) mediante \"\"Heavy UDP Usage\"\" que lanza una referencia a NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57728-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57728-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password."
      }, {
        "lang" : "es",
        "value" : "Las compilaciones de Webmin anteriores a la versión 1.170-r3 en Gentoo Linux incluye la contraseña cifrada de root en el fichero miniserv.users cuando crea un tbz2 del paquete webmin, lo que permite a atacantes remotos obtener y posiblemente 'craquear' la contraseña cifrada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:webmin:1.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "708F7A39-3D58-4E48-AE71-A4892CB742F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:webmin:1.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE40C73-F154-4F99-B34D-48B1D090CF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:webmin:1.160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE77AF8-2706-40D4-B094-ECA970F7CE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:webmin:1.170:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0540FAE3-5D20-4417-B6F1-15E8BF856D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:webmin:1.170:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE50EE6A-5CD3-4F2A-BBE1-2F32F4FBFAB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=77731",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-12.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=77731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a random stream of bytes."
      }, {
        "lang" : "es",
        "value" : "El método DNSPacket::expand en dnspacket.cc de PowerDNS anterior a la 2.9.17 permite a atacantes remotos causar la Denegación de Servicios (DoS) mediante el envío de un flujo aleatorio de bytes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8A0122-81ED-4951-BE34-9E8240FD297C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7BEE9-06FF-487D-B77D-5F05AA5C6324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F03070D-C76A-4A31-AA0C-E32442EBE83B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ds9a.nl/cgi-bin/cvstrac/pdns/tktview?tn=21",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-15.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12446",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ds9a.nl/cgi-bin/cvstrac/pdns/tktview?tn=21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1A0EF6-1267-463E-B4F7-83D2ACB64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110840807415315&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110840807415315&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda as an open mail relay for spam."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDCA1D8-886C-405F-8BBF-50D4CC20BB3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110805534732492&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110805534732492&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14298",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24439BBC-DEDA-4309-B8B5-78289476052B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25550AA8-8C79-48EA-A904-896B5B00077B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14299",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390368",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24439BBC-DEDA-4309-B8B5-78289476052B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25550AA8-8C79-48EA-A904-896B5B00077B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14299",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390368",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24439BBC-DEDA-4309-B8B5-78289476052B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25550AA8-8C79-48EA-A904-896B5B00077B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14299",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390368",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24439BBC-DEDA-4309-B8B5-78289476052B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25550AA8-8C79-48EA-A904-896B5B00077B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14299",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390368",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF27C7ED-98A3-48A3-9DE0-376CB0FAFAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699E4BEE-A5B1-474C-892A-08680690E784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9266F578-79ED-48F9-A686-BBBBDF1CCB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF1F9C8-AC49-42E6-BAE3-9FC4BF1512C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1671B86-B1DC-49DC-9AE1-883EF3DF7E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74589737-6A1F-4F63-8330-CE1374A7F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BE6CD0-2901-44EC-A065-EDA5FF4831E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AC1C1A-DEC0-45DA-B09A-B029426732A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF8B8DF-A162-4603-B6BA-A1CC5D34AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E19C713-B881-4CC9-AB40-A5B12B7D14BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E77FC6F-10A7-489B-8644-FBFA8C9E5326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC97CEC-AF5B-4A69-928A-E1FFB9180CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B9943E-81C9-43A4-A5E2-9BDD62456EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB784D24-C980-4030-9E0E-9F7AE3FFD429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8B3C4C-BB31-43E1-A8F3-49A204AE6709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158E603A-4C79-4C29-85CE-0BEBB485F287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33629F82-9C9A-44C4-85A9-6B61F8760767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4E89CC-9CF3-4DC2-9829-3C215DC0C1D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://midas.psi.ch/elogs/Forum/941",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://midas.psi.ch/elogs/Forum/941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF27C7ED-98A3-48A3-9DE0-376CB0FAFAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699E4BEE-A5B1-474C-892A-08680690E784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9266F578-79ED-48F9-A686-BBBBDF1CCB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF1F9C8-AC49-42E6-BAE3-9FC4BF1512C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1671B86-B1DC-49DC-9AE1-883EF3DF7E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74589737-6A1F-4F63-8330-CE1374A7F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BE6CD0-2901-44EC-A065-EDA5FF4831E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AC1C1A-DEC0-45DA-B09A-B029426732A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF8B8DF-A162-4603-B6BA-A1CC5D34AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E19C713-B881-4CC9-AB40-A5B12B7D14BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E77FC6F-10A7-489B-8644-FBFA8C9E5326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC97CEC-AF5B-4A69-928A-E1FFB9180CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B9943E-81C9-43A4-A5E2-9BDD62456EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB784D24-C980-4030-9E0E-9F7AE3FFD429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8B3C4C-BB31-43E1-A8F3-49A204AE6709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158E603A-4C79-4C29-85CE-0BEBB485F287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33629F82-9C9A-44C4-85A9-6B61F8760767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4E89CC-9CF3-4DC2-9829-3C215DC0C1D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://midas.psi.ch/elogs/Forum/941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://midas.psi.ch/elogs/Forum/941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE60304-C846-4670-AC65-FB86EF7A0AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688CF04B-25E8-41EE-A5D3-56D8D5AFE99D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110842125901191&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111281888605580&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14272",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=5741",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12549",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110842125901191&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111281888605580&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=5741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS) attacks via an invalid language parameter, which echoes the parameter in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE60304-C846-4670-AC65-FB86EF7A0AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688CF04B-25E8-41EE-A5D3-56D8D5AFE99D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110842125901191&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=5741",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12549",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110842125901191&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=5741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the login page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53783E69-4E5E-4AAD-A280-338E131478C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F32A212-11C1-432A-9ECD-844CD4EC3EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D334D8-D50F-45DA-9267-F2A4722BF4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEC7B40-834B-4476-8A0D-FDEA86C436D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467BEC56-9C42-4180-B422-F0099AF77B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCF6241-3F7C-4867-8D2E-CCA1BEFCA9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A87C77-5F6E-497D-A6A0-7D68D5E27E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162770C7-AF47-437C-A0D7-9F92D86DC951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C718757-E831-4C17-A9E6-BB31A20AC8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE131E5-B180-4751-B81B-459CA0207DED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14253",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0771FC-F8FB-4065-B6E1-EA21ECE77AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B81A56D-3F2E-455B-A960-69728437B31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7799D4-7B04-463B-BA19-AE36CD9DD694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8093EE-AA6A-4E2C-A891-163A42EA89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AA7680-E004-44AC-9AE9-C0186459C4B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3655286B-D44A-4DCB-8DF4-D45A36398933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDCE5E-6D74-4E13-B830-E412C33EF337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E71F3AC2-E633-41D2-B49B-A92E5FB974F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87284115-14F4-4FB6-A8D9-7C7A3B5151E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB618BD-9C6D-458D-A521-FE436C428A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8717751-A250-49F6-97E9-C14C8A44E550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A4829D-4DC1-4CD2-B136-48719A254EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D360F838-C65C-4E76-B460-ADE1AB7657C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67618D3A-9C74-4701-B42F-385E0221D75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C501D54D-5294-4BFD-9858-BE70C411B928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CB5358-7833-4D1E-8F22-CB2714E36F3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2265D309-4E50-45A3-A884-9F1FA361D453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45663027-1EFD-415A-8AB3-BCE544F4AD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EAAEE-BAB5-42EC-B171-93D9E32AC6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9E1D6A-2C46-4062-87B2-726FCC5967B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D24DCC-6C2A-466A-B59F-3D07F62175D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC7B751-34D9-4BBB-8608-97823E5F5F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADF48B4-C9DA-41B7-9124-882ADF625F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446879FE-02A7-4576-A726-6E7C918C4E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F495D6-7734-411D-B527-14C74A345E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EFA76EB-C5A5-4652-8EF1-66E2B061BE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB6D7E3-697C-4AA9-9925-371AB99CA395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DD635-BB74-4311-9E62-0DFAEB8DC121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6BFB6A-0AFC-4E52-AD48-252E741B683B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9797A37-FD26-4527-B2FA-E458F7A88D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC6CCDC-237A-408E-9CAF-D41EC3A9D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540AA8A9-A4AB-4DB2-B37E-11876348DF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E006EBC-5624-4AEE-85A8-10E33FCB20A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8DC1BE-EA6C-41B8-9D50-AACE2F2BA424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155CB225-3F1B-4841-90F7-49C4CF90B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21905542-2429-4695-B253-AEC648B0BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317FED1B-9C39-40E5-980D-C5ED808D8FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48242DB9-5EB2-4C95-A944-C52B798A32A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F697BB-5C94-42CD-AD9E-72C3D3675D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE764CDC-1018-4502-8F41-8A48E38E7AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBAAC5B-6012-410F-B765-689A8D55B095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885123F3-346F-451E-B72A-D0405F0B72E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF792263-D6ED-4AD1-98C1-0E22670EF91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3969B3-02F1-480A-8E72-CC50CD14B573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C66D46-D3C7-4FCC-B80D-EBA542E77C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B6C02F-D194-4CA7-9DEC-A436A4E8C99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D86CB-EEAD-4C40-855D-E98E4ED8B58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F59C3E7-0AC0-4886-B4B4-56904AC93C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5207FB50-946A-4AB2-AED9-9BA78B88F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8096AB-99B9-4D08-AA13-6AFF0DD65BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A356D04A-7882-4A14-AD5F-2079EA0E79C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C4F43-0807-400C-890B-D13BF5B9BF72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110901183320453&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-688",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-25.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-173.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-201.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE8-dns_assert.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110901183320453&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-173.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE8-dns_assert.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0448",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30E072-9E6A-49B4-A5C7-63A328598A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "434F0580-985F-42AF-BA10-FAB7E2C23ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B179E0-C843-46C9-AAD2-78E998175E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5E5A51-ED4C-4927-8C4D-502E79391E19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "security@debian.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056",
        "source" : "security@debian.org"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/14531",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17079",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18075",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/55314",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-696",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:079",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-674.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-881.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/8704",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/8704",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12767",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/94-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/55314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-674.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-881.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/8704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/8704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/94-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://oss.sgi.com/archives/netdev/2005-01/msg01036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-283.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/82-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://oss.sgi.com/archives/netdev/2005-01/msg01036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-283.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/82-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) \"%2e%2e\" (encoded dot dot) sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sami:sami_http_server:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AADC03B-0704-45B3-A70E-B85B60E6ABDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which triggers a NULL dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sami:sami_http_server:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AADC03B-0704-45B3-A70E-B85B60E6ABDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid parameters to index.php, or (2) the mid or bid parameters to forums.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "84EE54DF-D100-4180-B39A-1B12BA384BBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110858497207809&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013216",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackgen.org/advisories/hackgen-2005-003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110858497207809&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackgen.org/advisories/hackgen-2005-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6051B4-1B15-44C0-B2CD-5504E68C60F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "003D7E29-9970-4984-9756-C070E15B7979"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01513F87-049E-46A9-A573-A7AF27EB30C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDC43D9-C93E-4FB4-B05B-9FB519B03DCA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348F3214-E5C2-4D39-916F-1B0263D13F40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169753E3-949F-4B7D-9955-A52240CB8E6A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336246FA-A06F-4792-9923-E6948F3494FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://service.real.com/help/faq/security/050224_player",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-265.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-271.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://service.real.com/help/faq/security/050224_player",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-265.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGE_TMPDIR (portage) temporary directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.54",
            "matchCriteriaId" : "BFE75E76-E20D-47A4-9603-0AF46F733AEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=81747",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=81747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote attackers to inject arbitrary web script or HTML via the enquiry parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2_ms2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C382022-5D4A-419E-9A6F-14A38094C187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110851122614995&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110851122614995&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59384A5A-F530-4417-8AFB-005EE4A54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CFC048-C7C5-47E6-A7E9-E1ED99142493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120A58AE-69B7-426D-947D-9C0D9D9CE1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980AC0DB-2759-49D3-8347-C119AFFF8DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CABC8407-173D-466B-B366-5F7F5D9F2F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666B78D-5DC9-4256-8A23-A4021AE7044A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096B01B4-3CD4-4CB4-8528-D1DB0D0BFB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229DE8B7-489B-4848-B1BE-2339CB771573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BC58E6-CA26-4760-A6A4-D65184A50539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE7C97E-60C6-417F-86F7-963ADE52A895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF189AE-9485-4F8C-AAAE-25088DF6F964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560BC57D-BDCE-4479-9847-6DB53A89FFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4859644F-E5FF-4AE4-B16D-CC2243964D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DE653E-E7FF-4DE0-A7C8-CC86C95550F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48888218-B238-4F0D-A4C2-E9877D3F3A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A393256A-A5BE-4467-8058-E9CA5D626D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9C4839-2356-4630-BDB3-4A0171F3A785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C55462-6370-45B3-8F00-50F4502981F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BBE005-1FEC-4178-A6A0-CAAB148948F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E7577-5F89-4B2C-9C28-A5268B539968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929F5CD6-51F3-42CF-8BA8-579120DD835D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B58A87-7A30-494D-9A9A-AF9FE6E59600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF345665-3C1D-4F44-B648-B695D88267BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C3F2E1-FEFC-4C04-B337-7AC3E38AE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C525B9-636F-49B9-B528-50AEB0E98F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704C4359-A80E-456F-AA69-D188E4DFDBA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013210",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAAB645C-2D52-4710-952B-0A4ED0008977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E42E9E-1C19-4ABE-99DA-A88B4D5C533D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2473C711-A505-43C7-81B4-48EE7D32395C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/02/mercuryboard-debug-information.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14284",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13787",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/02/mercuryboard-debug-information.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to \"take actions on comments.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D159AF-3475-49A1-8AC4-A2E94E6A433E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8F37F6-231C-4C57-A929-12FBE4DD7036"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93631354-0026-43CD-9A37-1C744CED55F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE2510F-4153-4D04-A412-A3AA3D702399"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFAA0DB-0E1B-4BF7-81BF-3AD39CE7D053"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F87E11-1C16-426D-806D-EA3578D22DD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D1B11A-6288-4DDD-A4A5-58A9FB52A295"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C161D257-63FA-481D-AEED-46B61F7A481C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://newsbruiser.tigris.org/servlets/NewsItemView?newsItemID=1016",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://newsbruiser.tigris.org/source/browse/newsbruiser/CHANGELOG?rev=1.283&content-type=text/x-cvsweb-markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14262",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://newsbruiser.tigris.org/servlets/NewsItemView?newsItemID=1016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://newsbruiser.tigris.org/source/browse/newsbruiser/CHANGELOG?rev=1.283&content-type=text/x-cvsweb-markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown \"major security flaws\" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in (1) host.php, (2) port.php, and (3) index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inl:ulog-php:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75870FA2-8E67-4BB2-B4D4-197F426E354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inl:ulog-php:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468A9C9B-D235-47B3-9091-3E0B0278EAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inl:ulog-php:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E2A7D7-F0BD-41D7-B3F4-4D48D986DD6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14321",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013220",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.inl.fr/article.php3?id_article=7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13853",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12610",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.inl.fr/article.php3?id_article=7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63CC83D-BF18-42BF-A5DF-3516508B072F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=226&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=226&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199F4D8C-2FB9-4AF7-B7A3-339513665616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D0212C-EA41-4DF3-9A93-4559545BCD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3567046C-FE3F-424D-A1B0-D7A43D00B79F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40511481-CD42-4EB7-BE2A-7A78964B7D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D926CDA1-AF2B-4DED-93AE-8F12091E0B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536CB843-5FF6-4BC1-A6DA-92A8CB69D6D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B4722F-1FBA-4A73-BF85-5920B94F833D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FD1CEC-9064-483C-A3C2-04E3C50EFBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B1518A-9BBC-4CDB-8338-4DCC9A1A91D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C26983FB-6FD7-4938-8025-E535A6505ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D01CD7-CE53-44D6-82C6-C72579BA089C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F04863-29CB-4E0C-838B-1C23E25C129C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA794C-C18F-48A4-ADCB-DC219DF259CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4B36C0-D3FF-4B33-B810-DB920062480B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.5_iop:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03CED73-9451-4DE4-A00A-7EAB24424CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.5_ipr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29446761-8ACE-4E05-82C3-3FF77C1E2CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20B3C51E-DE28-4B50-B841-31CCFEA88A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6930817-C758-4FC3-A3C2-CD08964C6D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC66EB2-FFC7-4EF1-9591-A5C5E1E7C919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D02672-84E9-4036-8ED8-FE6EF4D7E275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.5g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646483C9-6FFC-46FE-B9CD-40D733FABFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:4.0.5h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B71C71-FA29-4B4C-831C-63AE2797BA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333103D5-71B8-4DC1-90F7-15F2841955D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A889C10-0637-4133-AFBD-533C8397BE89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E292DA15-91BF-4957-9C0F-A69518538BED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26144F94-63FD-4907-B548-09B68C2FC9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*",
            "matchCriteriaId" : "92BF03B6-9CDC-4161-9C1C-3E73582C3D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26309EFA-0991-46B6-9818-F0FBB902D5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*",
            "matchCriteriaId" : "D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966C1A13-8007-408D-96BE-0DA3BB6CA401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D59247-56FA-46B4-BB51-2DAE71AFC145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B60E50-4F5A-4404-BEA3-C94F7D27B156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.2f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB113626-38E2-4C42-A6A9-4BBDA0AC4A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772E3C7E-9947-414F-8642-18653BB048E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D51EC29-8836-4F87-ABF8-FF7530DECBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440B7208-34DB-4898-8461-4E703F7EDFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.4f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CEC8518-4DBA-43AA-90B8-279F2DD4A2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.4m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8286F3-DF0E-4D8E-A27D-0C5182D5870C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5663579C-3AD2-4E5B-A595-C8DB984F9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306EE13-57CF-43A6-AA72-C641C53A2A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.5m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6291BEE1-73D2-4976-B065-E135880F73B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.6f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621C31D9-8102-4F2D-8008-B32020F0B831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.6m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF5E9B8-62F9-4A6F-9C0C-551980981366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29113D8E-9618-4A0E-9157-678332082858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.7f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F883CF73-CDA0-4B50-98E6-1B5DE0A4A816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.7m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C9F200-68AC-4B45-8AFC-F604429FDF3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313613E9-4837-433C-90EE-84A92E8D24E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.8f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1742BF2B-63C7-441D-9A01-DE65C95911D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.8m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30B7C42-CEE8-4377-957C-BCCE35C071A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AA1290-5039-406F-B195-3A4C018202D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.9f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B859D7F7-B0A6-4148-8146-F651ED3F99AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.9m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59EC5B1A-309A-4DE2-A197-F4DC07A8DC3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CC9410-F6B8-4748-B76F-30626279028E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7D3C74-CDD2-4DFF-A331-007E1669752A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FA10EA-F6E5-4A89-AC37-40FF6A147528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC67401-C85A-4E4E-AE61-85FEBBF4346B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E1480B-2183-45AD-B63F-16DEC9BF0398"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4427AC-07C1-4765-981B-B5D86D698C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D08345C-F945-410C-9DCB-8C358178F975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8764BE36-9377-486C-9198-DF79A5A60679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EF0CEE-74A9-45C8-8AFD-77815230ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25243FA1-7AF7-41D4-8FAD-A5AB289E120D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D89730-AA61-4FC9-A6AB-0574CA51EE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B24D34C-1F95-45C8-9A57-2D2622ED9019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B59E7C-B059-41CD-AE33-E9623ADA12BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF1B657-C910-4BB0-828C-09B6A59D988D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD69805-D021-4DCC-9FB6-A0BEA721408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C254FC5D-895D-4EFC-B9A7-74699D9FE65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13C07CC-F615-4F30-B532-4BF6F02F84DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.16f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27532639-37CD-4BD2-AE48-F741009D3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE3F77A-909E-4947-A808-BCAB7F96A108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED22734-8AAC-4897-BB71-438E19B8A005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA9C28F-18E6-4199-9740-FAB00563EBF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F1E3C7-0FDD-46E1-8748-6A5FF669C95C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E63313-9533-478D-ACC0-C050FBA3EACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2334FD6C-444F-4042-AF6D-D654C18C9950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.19f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61370032-AB21-4E93-B143-A92A342AFB1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.19m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C833FC19-D913-4C62-B14A-E1B3845D0275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCB9A7-9121-4FAE-B6FA-96C3A023ACEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90188D6-6C57-45C2-B266-50D65B4D33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DD839E-159B-43FD-A1E6-A22EE658BEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C1514F-A4DD-462C-9955-2AD8CF5B7F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9CF799-3B52-4694-A706-37FA08EC9ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63CC83D-BF18-42BF-A5DF-3516508B072F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C44E34-E074-4FB6-943D-547082A50126"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=225&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=225&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncsa:telnet:c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260BF25B-E86C-472B-8D4C-190F7E06FEF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050405-01-P",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.de/security/2005/dsa-731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-703",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=221&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/341908",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-327.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-330.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-224-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050405-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.de/security/2005/dsa-731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=221&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/341908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-327.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-224-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncsa:telnet:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CA584DD-D936-4EA3-A6E6-D39763480191"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050405-01-P",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.de/security/2005/dsa-731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-697",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-699",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-703",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-36.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=220&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/291924",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-327.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-330.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-224-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050405-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.de/security/2005/dsa-731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-36.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=220&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/291924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-327.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-224-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE80B46-33F0-4338-AF37-9E7E31FC5E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E3CB14-FB16-4F4E-9AD9-A02DC727FF6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000940",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110959085507755&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-20.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=202&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=203&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:048",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_11_curl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-340.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12615",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12616",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19423",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10273",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110959085507755&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=202&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=203&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_11_curl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC6D793-E8E5-4C0E-A33A-EB1A1F7EE2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7177DA-76DC-4FCA-BB22-C30BEE9C0121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3628E804-48B3-4DAB-A824-76926016E80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE77E54-2079-466B-8C27-BC90DABA93BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7186D6C9-AFEB-4419-A011-9557BB559AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEF0C5F-AEBF-4E19-83B8-19A11F1EB74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E3C8E4-3A0B-4FEA-B1B3-39D99035265F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BCD491-7961-4DCE-BF42-E7F4A9B02B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FDC7B7-EFDC-4DE7-A7AF-2732C85EE0D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110887325425794&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14327",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12594",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110887325425794&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 6.0.3 and 7.0.0 allows remote attackers to cause a denial of service (application crash) via a PDF file that contains a negative Count value in the root page node."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74667860-0047-40AD-9468-860591BA9D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110879063511486&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14813",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331468.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0310",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110879063511486&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331468.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seth_m._knorr:biz_mail_form:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "ED6BBE5D-5242-46C4-92D2-9E1584A4CE14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110876655521321&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110876655521321&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to newest version."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the ADPROOT environment variable to the root directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adp:elite_system_max_9000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A1949-E7A3-4E3E-BCA5-9D4BEB26315D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110901051420503&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110901051420503&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gigafast router (aka CompUSA router) allows remote attackers to gain sensitive information and bypass the login page via a direct request to backup.cfg, which reveals the administrator password in plaintext."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:gigafast_ethernet:gigafast_router:ee400-r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1166D62C-3E49-4A5E-BCD0-57A953C8DD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:gigafast_ethernet:gigafast_router:ee410-r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D39480F-DA8D-4A2B-8434-C179CCFF8C47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110900986022760&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110900986022760&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=110895997201027&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12602",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110895997201027&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Bontago 1.1 and earlier allows remote attackers to execute arbitrary code via a long nickname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digipen_institute_of_technology:bontago:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E635FD8E-131F-4CCD-96F9-2A2DEC13F9E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/bontagobof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14350",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/bontagobof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lionmax_software:chat_anywhere:2.72a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D0E032-8EFE-4A53-91CA-9C40D25FAB3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D4F9A7-FD48-49DF-B00A-B4E6E00C0BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "991546AA-154C-423B-B09A-B8A0DE0CCD9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D294781-2F00-4AAB-85F8-807FB0924DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8199A3-3789-463C-A8B9-4025F0368733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A3DA7D-AEBC-42F5-905D-78433E50FE1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B2413C-3186-421F-B5FE-831B559070B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD19C498-C99B-4CFC-9072-EEA1835D98EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A1466C-C264-4FA3-A993-E8EB31232263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129AAC35-D66C-4CC3-A8FD-7ED6305EAF35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://deicide.siyahsapka.org/exploits/proz_ex2.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-719",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5WP082KEUW.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://deicide.siyahsapka.org/exploits/proz_ex2.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5WP082KEUW.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a -8 size value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14792",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013619",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-405.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394797",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-405.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a JPEG image with an invalid marker value, which causes a negative length value to be passed to php_stream_seek."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14792",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-708",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-405.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394797",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-405.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary web script or HTML via (1) the search string to search.php, (2) the subject of a PM, which is processed by pm.php, or (3) the body of a PM, which is processed by pmpshow.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8178A159-1008-4DC9-A7EC-17C051D21896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110917641105486&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110917702708589&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110917768511595&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110917641105486&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110917702708589&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110917768511595&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load \"privileged content\" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka \"Firescrolling.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110935267500395&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013301",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mikx.de/?p=11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-27.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110935267500395&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mikx.de/?p=11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0529",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404201818eC6aMn0x3GY_9rw3ueb2ZWQ",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8994",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404201818eC6aMn0x3GY_9rw3ueb2ZWQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0530",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Signedness error in the copy_from_read_buf function in n_tty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40420181322LZmhPTewcCOLkubGwOL3w",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10960",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40420181322LZmhPTewcCOLkubGwOL3w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0531",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The atm_get_addr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/gnupatch%404208e1fcfccuD-eH2OGM5mBhihmQ3A",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10095",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/gnupatch%404208e1fcfccuD-eH2OGM5mBhihmQ3A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0532",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The reiserfs_copy_from_user_to_file_region function in reiserfs/file.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4, when running on 64-bit architectures, may allow local users to trigger a buffer overflow as a result of casting discrepancies between size_t and int data types."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042018227TkNpHlX6BefnItV_GqMmzQ",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042018227TkNpHlX6BefnItV_GqMmzQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:client-server-messaging_suite_smb:gold:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8C9AAAD5-E973-41CB-B7FD-85D1EA04F6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:client-server_suite_smb:gold:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "664CD81D-30AD-450B-A9FF-7C0FC61C938A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:control_manager:gold:*:as_400:*:*:*:*:*",
            "matchCriteriaId" : "CEEC709C-CE2F-435D-8595-3B7462F5D58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:control_manager:gold:*:s_390:*:*:*:*:*",
            "matchCriteriaId" : "416653F7-D8D5-4947-A097-8E1298DD0FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:control_manager:gold:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0416D605-20FC-4C87-8009-C240530A1B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:control_manager:gold:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4FFD939A-C783-4A02-9859-B823A57F8A5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:control_manager:gold:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "723E2C95-124F-422F-A241-AECA1D5E0D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:control_manager:netware:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A63C770-365B-4EAF-AF4B-1B379F943DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_emanager:3.5:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "9D2CAA96-4C71-482B-A033-E4AD0814C638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_emanager:3.5.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0DEAD496-BB59-464D-9BBA-29158CF65C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_emanager:3.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "8767F042-4333-404A-B7D7-6830B6959890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_emanager:3.6:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "C02396DD-CFBF-4019-8AC7-9C41821AF8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_emanager:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF73278-A5E9-4975-9C0B-DD9413A33FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_emanager:3.51_j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F86817-D352-452E-B80F-1402C8A76372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_messaging_security_suite:3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4086086F-4F57-4E73-B473-FFF33CD23F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_messaging_security_suite:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1E2358-2868-4D95-A783-0D7A591A691C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_messaging_security_suite:gold:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7E8ADD8C-2E58-4671-BECF-B02A5DE04A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_messaging_security_suite:gold:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "4CD5D110-5FA3-4F6C-A727-06A73676EC9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_messaging_security_suite:gold:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "CD824873-B625-4755-ADC9-C6657CD63208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.0.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "E4B9603D-79FE-4E7C-A9F9-E9A24FBBDF3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.0.1:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "475CED59-77F7-4E6B-8DB6-EFFC7F8D5929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.4:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "75734296-9435-4A96-B30C-572BF1BBAD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.5:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "61C0968D-D8F1-450C-B4E9-94535B4CF637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.6:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "106EB780-7455-41F7-ADB0-67C541F6C53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.6:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "A9EB55C4-00FB-4D2F-993D-27269F09CF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.6:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "1D8580C2-B757-4C4C-A9B6-960905101E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.6:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "D9AE5039-8467-48C2-8417-E7B18A48F0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.6.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "82425C25-4464-4C69-A7C9-6B7369661E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.51:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "15B05F1A-7AA1-46E5-947B-C422F9618F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.52:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "EB4F32FC-8391-4B3B-AA42-07E392053A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.52_build1466:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "1BF5CF24-83B8-4AC3-A849-C56979CB38DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:5.1:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "25D7EFC1-4053-46E9-9081-3BBAB0300C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:gold:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "8B678239-DD77-488C-82FE-27D6FC47B94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:gold:*:linux_for_smb:*:*:*:*:*",
            "matchCriteriaId" : "071EDC78-C902-4D79-8CDF-F5DD30BF7027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:gold:*:smb:*:*:*:*:*",
            "matchCriteriaId" : "55C6BD67-FE95-43A7-91F7-608DEC79C24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:gold:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "29EDFC0F-687B-4B56-8910-67C6E3907483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_viruswall:gold:*:windows_nt_for_smb:*:*:*:*:*",
            "matchCriteriaId" : "5A694256-BD24-4EED-9833-B15DCA874F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_web_security_suite:gold:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1DCB7541-8145-47CA-9F4E-4A600CA454EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_web_security_suite:gold:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "DB8B2F17-7C2B-4782-9492-D967A2AD8B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_web_security_suite:gold:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D1E65854-8869-41F7-BAFE-B7545FC98BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_webmanager:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C33920-9BC7-41BC-BB66-723D0BAF2839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_webmanager:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73B43D9-A721-4D48-A2D6-48A77355965F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_webmanager:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F3645D-2B7D-44ED-83DE-ABF9016CD0D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_webprotect:gold:*:isa:*:*:*:*:*",
            "matchCriteriaId" : "921B617D-F37E-4D10-A627-09F9678790B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:3.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4013BF7E-DE8F-4941-BF15-D17C8C88DB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_3.0:*:windows_nt_server:*:*:*:*:*",
            "matchCriteriaId" : "093EED07-F4C1-47B2-9D08-3DE0D57D5CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_3.1.1:*:windows_nt_server:*:*:*:*:*",
            "matchCriteriaId" : "CBA9F2BA-1274-465C-B723-ABB54CA17FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE60F5D9-35D0-4D0E-85D1-EE71E533622F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_3.5:*:windows_nt_server:*:*:*:*:*",
            "matchCriteriaId" : "6F37307A-7847-4D5A-99D8-8A4BE424CD21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF74A292-2B1B-43FC-AA82-CFB04D7644E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_3.11:*:windows_nt_server:*:*:*:*:*",
            "matchCriteriaId" : "925DA405-9719-452C-8369-D4A60CC916C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46575AE8-8718-44D8-AF5C-14F7981B3238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_3.13:*:windows_nt_server:*:*:*:*:*",
            "matchCriteriaId" : "F893D171-7AB3-4422-BA86-021B0211EE36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79FBAAA-D6B8-4A05-B8E1-D7549207EA5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CE3BB4-54BA-48DE-9CFC-C2241D99DA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6F25D89-826B-4FA0-AA8F-CD729F00F9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_5.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE87037-D7CC-480B-BBD2-F1802294D4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB43A95-60F8-425A-8434-C07EC799DC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:pc-cillin:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBAA86F-8DE4-4BC8-B295-89CF981C28D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:pc-cillin:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9994E64C-0E8C-4A9C-A321-6A73A16E33AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:pc-cillin:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A65282E0-2332-4CAA-9BA9-3794C2CDE960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:pc-cillin:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56D571B-649D-41E2-A502-6C1EBAB73F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:portalprotect:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C991F564-93D1-4E63-8B71-B0C9CD9BECA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:scanmail:2.6:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "195D657C-4A4B-4832-B1A6-056FB990401E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:scanmail:2.51:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "929BCF43-AC3A-43D0-8819-7673996D216D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:scanmail:3.8:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "3BFF861D-F544-4902-A958-BE566FB85738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:scanmail:3.81:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "3B282BE2-8116-48A7-B6D6-544983FF72C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:scanmail:6.1:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "C81AFD13-0883-48F5-BD6B-707CFFE07262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:scanmail:gold:*:lotus_domino_on_aix:*:*:*:*:*",
            "matchCriteriaId" : "B4963C96-FA13-4E54-8EE3-8E169CACBF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:scanmail:gold:*:lotus_domino_on_as_400:*:*:*:*:*",
            "matchCriteriaId" : "C3E0300A-27F7-47C1-B725-55FF0BE92FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:scanmail:gold:*:lotus_domino_on_s_390:*:*:*:*:*",
            "matchCriteriaId" : "FF365F03-F95C-4047-BBA4-42EBD02E823B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:scanmail:gold:*:lotus_domino_on_solaris:*:*:*:*:*",
            "matchCriteriaId" : "A2042D38-CF77-4149-9289-B3380F59D794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:scanmail:gold:*:lotus_domino_on_windows:*:*:*:*:*",
            "matchCriteriaId" : "D275C0DB-E942-4EB9-B6AA-3112C1A697DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:scanmail_emanager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CE79B6-B9E8-4775-B7BF-90C2758EECE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:serverprotect:1.3:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "FB28FE16-F163-4287-9A4E-843C2E67792E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:serverprotect:1.25_2007-02-16:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6E8704FA-AA3C-4664-A5AA-50F60AE77642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:serverprotect:2.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "BEDB64E2-6157-47C1-842E-26A40A885ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:serverprotect:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38695C1D-DC51-45EB-9EEB-6E04490AFE6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14396",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013289",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013290",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12643",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+VSAPI+ARJ+parsing+could+allow+Remote+Code+execution",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/189",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+VSAPI+ARJ+parsing+could+allow+Remote+Code+execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F54837-5004-4D10-B3B0-502CED4F6592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09F36C1-CBC0-489E-B62D-4590A2E5A4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F0067D-534A-4238-A244-D92A73845432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEC422E-49BC-41D4-9F71-B834D4108EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D854161-28AA-4386-B90A-97F9692CE37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A0FA49-99DC-4691-968F-6AEB76B74370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0C6A2C-992B-45A0-8E0C-1AE983881337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292A77C7-8C7B-4F3A-B7FD-3505A9F37E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77FC97A-3BB2-4AA5-B0D6-C0D1FBEA5FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9393EF-083A-4662-BC7A-89979C2B8546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DE6A4E-6BCE-499E-B017-1E0F8D1F65B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E70F32-2F26-4836-8A4F-0A0B06EAD371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE506B8C-245E-4A7E-A24C-FABB1D4531EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934382C1-088A-4AEE-A71A-E9802AC9C1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9028E-1BDE-4BA0-A479-7A30020331D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D02E4C1-2BA7-4BC0-9C11-D0F74181DF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728E2852-5658-4DCC-AF1E-718B292F06C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14360",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013260",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=307067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=307067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F54837-5004-4D10-B3B0-502CED4F6592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09F36C1-CBC0-489E-B62D-4590A2E5A4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F0067D-534A-4238-A244-D92A73845432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEC422E-49BC-41D4-9F71-B834D4108EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D854161-28AA-4386-B90A-97F9692CE37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A0FA49-99DC-4691-968F-6AEB76B74370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0C6A2C-992B-45A0-8E0C-1AE983881337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292A77C7-8C7B-4F3A-B7FD-3505A9F37E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77FC97A-3BB2-4AA5-B0D6-C0D1FBEA5FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9393EF-083A-4662-BC7A-89979C2B8546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DE6A4E-6BCE-499E-B017-1E0F8D1F65B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E70F32-2F26-4836-8A4F-0A0B06EAD371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE506B8C-245E-4A7E-A24C-FABB1D4531EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934382C1-088A-4AEE-A71A-E9802AC9C1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9028E-1BDE-4BA0-A479-7A30020331D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D02E4C1-2BA7-4BC0-9C11-D0F74181DF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728E2852-5658-4DCC-AF1E-718B292F06C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14360",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013260",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=307067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=307067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in (1) GinpPictureServlet.java and (2) PicCollection.java in ginp (Java Photo Gallery Web Application) before 0.22 allows remote attackers to read arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ginp:ginp:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4F3AF0-3571-456E-B772-5BAA1421C1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ginp:ginp:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16508F36-9AC2-4D99-986E-7E32CACFD287"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14373",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=307518",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=307518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:hardware_management_console:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703144C5-11C4-4D78-8978-B4E6E536463F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:hardware_management_console:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5240B5D9-1CF1-4635-B95E-51F3DD3D45A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14377",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://techsupport.services.ibm.com/server/hmc/power5/fixes/ptf_MH00220.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://techsupport.services.ibm.com/server/hmc/power5/fixes/ptf_MH00220.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /about.html page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyclades:alterpath_manager:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD6842B-F572-41B9-B8A6-1F3A5BB94CBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=110924450827137&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14378",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cirt.net/advisories/alterpath_disclosure.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110924450827137&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cirt.net/advisories/alterpath_disclosure.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyclades:alterpath_manager:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD6842B-F572-41B9-B8A6-1F3A5BB94CBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=110924450827137&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14378",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cirt.net/advisories/alterpath_console.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110924450827137&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cirt.net/advisories/alterpath_console.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain privileges by setting the adminUser parameter to true."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyclades:alterpath_manager:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD6842B-F572-41B9-B8A6-1F3A5BB94CBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=110924450827137&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14378",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cirt.net/advisories/alterpath_privesc.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110924450827137&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cirt.net/advisories/alterpath_privesc.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparser.lib.php, (3) select_theme.lib.php, (4) select_lang.lib.php, (5) relation_cleanup.lib.php, (6) header_meta_style.inc.php, (7) get_foreign.lib.php, (8) display_tbl_links.lib.php, (9) display_export.lib.php, (10) db_table_exists.lib.php, (11) charset_conversion.lib.php, (12) ufpdf.php, (13) mysqli.dbi.lib.php, (14) setup.php, or (15) cookie.auth.lib.php, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74632C65-6711-4425-A43F-CCF1664C8542"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14382",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive.  NOTE: this issue has been disputed in a followup post."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110935549821930&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391332",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110935549821930&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in \"cached header handling,\" (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:imapd:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F5B257-D090-462A-8C4A-B51AE424E6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:imapd:2.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CFAA27-464B-42F3-9A3F-9649E886B1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:imapd:2.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D6F471-3791-489A-BBD2-AD06B3109925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:imapd:2.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93608EE0-89AF-4211-8A2D-C8EE8CFACF99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:imapd:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6581BA-9B6E-4C8B-AF39-327DFB5EEE57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=82404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110972236203397&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14383",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-29.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-408.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=82404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110972236203397&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200502-29.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the \"View Log Files\" function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solaris_answerbook2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.4",
            "matchCriteriaId" : "856C7F59-1073-4B8A-8068-D5709E8BEACB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111205163531628&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57737-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000230.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111205163531628&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57737-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000230.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0550",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka \"Object Management Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1271",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2043",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4397",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4832",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0551",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=230&type=vulnerabilities",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1822",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A266",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3544",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A777",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=230&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0553",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka \"DHTML Object Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4336F0E-75FE-4592-9D98-4F689804956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14922/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=228&type=vulnerabilities",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/774338",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19831",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1695",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3100",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3752",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4874",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4985",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/14922/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=228&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/774338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0554",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka \"URL Parsing Memory Corruption Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14922/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=229&type=vulnerabilities",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/756122",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1196",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2253",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2559",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3817",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A789",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/14922/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=229&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/756122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0558",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBFF713-0884-43BF-9AB8-777664FD64AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D90B1E1-23CD-4595-AD78-DA1758E9896D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379C2A4A-78EF-473D-954B-F5DD76C3D6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-023",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19828",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1236",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2415",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2685",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4234",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0560",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FF429469-1B63-4BF3-A59F-F8180226BB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E2337C2B-EEC2-48B3-93C0-FE1FE7D41273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111393947713420&w=2",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14920/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/275193",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=15467",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/193",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-021",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4032",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111393947713420&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/275193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=15467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BC3223-5F53-42FA-B872-DCB30E46032E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9176513-170C-4B51-8495-9ED2FB7D929F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D431DA-8808-4DF2-BBD7-7BC6F5036DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D4F2D0-23BE-4460-9C4A-8A30B1F06623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72337C8-2B5C-4824-A3C0-D41A857DC9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454BEBD6-3EC7-4FFB-A51A-0199B5CCF097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A381433-9331-4424-B349-52D7F4BFEABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC225BD-FA8E-482B-9537-77797B7A88BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682290A8-AEB7-4652-A44C-A969AB937BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6946104-0AEB-429E-9AE2-8E7045DC28AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110928565530828&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14399",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013298",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-04.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110928565530828&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the (1) theme parameter to phpmyadmin.css.php or (2) cfg[Server][extension] parameter to database_interface.lib.php to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74632C65-6711-4425-A43F-CCF1664C8542"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110929725801154&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14382/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149381&group_id=23067&atid=377408",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12645",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110929725801154&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14382/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149381&group_id=23067&atid=377408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA57E8-B70F-40F6-83F4-A19A41A55952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB13EB2B-42EC-45ED-948B-7B2617C1B82C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110927288423807&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13289",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013291",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12650",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110927288423807&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) language parameter to register.php, (2) change email feature in profile.php, (3) posts or (4) topics parameter to moderate.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110927754230666&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14394",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14538",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12652",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110927754230666&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's password to NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110927754230666&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14394",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12652",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110927754230666&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110927754230666&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14394",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.punbb.org/download/patch/punbb-1.2.1_to_1.2.2.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110927754230666&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.punbb.org/download/patch/punbb-1.2.1_to_1.2.2.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_search_module parameter, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BC3223-5F53-42FA-B872-DCB30E46032E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9176513-170C-4B51-8495-9ED2FB7D929F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D431DA-8808-4DF2-BBD7-7BC6F5036DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D4F2D0-23BE-4460-9C4A-8A30B1F06623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72337C8-2B5C-4824-A3C0-D41A857DC9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454BEBD6-3EC7-4FFB-A51A-0199B5CCF097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A381433-9331-4424-B349-52D7F4BFEABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC225BD-FA8E-482B-9537-77797B7A88BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682290A8-AEB7-4652-A44C-A969AB937BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6946104-0AEB-429E-9AE2-8E7045DC28AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110935172116369&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://neossecurity.net/Advisories/Advisory-05.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-04.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110935172116369&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://neossecurity.net/Advisories/Advisory-05.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer in which the filename contains \"(\" or \")\" (parenthesis) characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6F9FB-C9DA-44BB-9AF7-E8D828788873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=110928380421841&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013300",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110928380421841&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cupidsystems:cis_webserver:3.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDA5B01-0294-46F2-9317-0248899B588F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/391560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12662",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormy_studios:knet:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F580C1BB-C5DD-45E3-918F-376413606B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormy_studios:knet:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76BBF9EB-F861-4DBC-9CB4-77A254659459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormy_studios:knet:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66B5EC8-E8EB-4E19-BFD5-C7DC59793A19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormy_studios:knet:1.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99B6E61-B083-4B45-A73C-0DC6CD4D6632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormy_studios:knet:1.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C013E6-C1A5-4AE8-B23E-6F88E7054006"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110943766505666&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14400",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/24897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/24950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12671",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110943766505666&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/24897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/24950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modify or delete arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14381",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57738-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12656",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57738-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dna:mkbold-mkitalic:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.06_1",
            "matchCriteriaId" : "7225C2F9-2480-4DDC-83C8-3A1A93691E08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14398",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freshports.org/x11-fonts/mkbold-mkitalic/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/32d4f0f1-85c3-11d9-b6dc-0007e900f747.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freshports.org/x11-fonts/mkbold-mkitalic/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/32d4f0f1-85c3-11d9-b6dc-0007e900f747.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users to delete arbitrary files of other users via a symlink attack on the plugtmp directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-28.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:license_software:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC7A79A-C702-4909-8054-0F5619F84DC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110979326828704&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=210&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=213&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=214&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=215&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110979326828704&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=210&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=213&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=214&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=215&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:license_software:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC7A79A-C702-4909-8054-0F5619F84DC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110979326828704&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=211&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110979326828704&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=211&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. (dot dot) sequences in a PUTOLF request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:license_software:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC7A79A-C702-4909-8054-0F5619F84DC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110979326828704&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=212&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110979326828704&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=212&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0584",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-24.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=277574",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100034",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11191",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=277574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0586",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13258",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-22.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/13258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0588",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-20.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=271209",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=271209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0589",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-19.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=270697",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100039",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10825",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=270697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0590",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long \"user:pass\" sequence in the URL, which appears before the real hostname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-17.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268059",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100041",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0591",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka \"Firespoofing.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110547286002188&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/13786",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/firespoofing/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mikx.de/index.php?p=7",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-16.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12234",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=260560",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18864",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10039",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110547286002188&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/firespoofing/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mikx.de/index.php?p=7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=260560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:working_resources_inc.:badblue:2.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "530A92EA-66F2-4F93-B55E-AD9B56E3A14E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-02/0599.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12673",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-02/0599.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.linuxcompatible.org/story42495.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.linuxcompatible.org/story42495.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (process restart) via a \"crafted TCP connection.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.0.17.6",
            "matchCriteriaId" : "15B91192-2B8C-41B3-B91A-2B57A8BA791D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndExcluding" : "5.1.11.6",
            "matchCriteriaId" : "A183029D-BFEE-46F0-AB06-0CC63A7BBF8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14395",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12648",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19466",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/14395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (CPU consumption) via malformed IP packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.11.5",
            "matchCriteriaId" : "EC1578E4-3CAD-4A47-85AB-FC9CA3036D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C11A917-8173-4266-8098-687A96937C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBF9A68-C8CA-4AB8-B831-89E63D1CCF0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D8DB6E-ED9E-4981-9DF3-7CD268E455B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFC2175-854C-4C6F-BBA3-22B130391DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6385CE52-78E9-401A-9CA4-D7DACCAB8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F39004-8977-4C4D-B278-1DCE564B9702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE863AC-3902-4BD2-90A8-12E4D19E63F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66527B05-A7BE-4582-A458-4EBB9F7B7E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2711B21-43C2-4EF9-BEFD-F0B4450E86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B2DF00-A45C-4615-B59B-715D1ABFBD38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14395",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, which allows remote attackers to gain access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C11A917-8173-4266-8098-687A96937C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBF9A68-C8CA-4AB8-B831-89E63D1CCF0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D8DB6E-ED9E-4981-9DF3-7CD268E455B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFC2175-854C-4C6F-BBA3-22B130391DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6385CE52-78E9-401A-9CA4-D7DACCAB8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F39004-8977-4C4D-B278-1DCE564B9702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE863AC-3902-4BD2-90A8-12E4D19E63F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66527B05-A7BE-4582-A458-4EBB9F7B7E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2711B21-43C2-4EF9-BEFD-F0B4450E86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B2DF00-A45C-4615-B59B-715D1ABFBD38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC27C87-0432-425E-B77F-81F7FE83BAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69332BBD-C689-4775-93B3-82F1A807E789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14395",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:info-zip:unzip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.51",
            "matchCriteriaId" : "864E5F1C-7C04-4EFD-BAA3-5C241514036F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:info-zip:unzip:5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E623D2F-C9DA-4937-BE64-236323A7C99E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110960796331943&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103150-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.info-zip.org/FAQ.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0053/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110960796331943&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103150-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.info-zip.org/FAQ.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0053/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider this a security vulnerability; this is the expected behaviour.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:languard_network_security_scanner:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6956B692-3B63-4A79-9E4A-EA6194CDB69C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110961644621528&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hat-squad.com/en/000160.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110961644621528&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hat-squad.com/en/000160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the (1) cat_id, (2) PHPSESSID, (3) view_doc, (4) product, (5) session, (6) catname, (7) search, or (8) page parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB7161F-55A8-42F3-BB9B-5E7C366EEE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE60304-C846-4670-AC65-FB86EF7A0AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1258D0-EC39-4A58-B74B-F8512154AB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3C6FE2-8074-4C5F-B8F0-6B11E5BC3D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE530337-EE60-4CD2-B22E-07DE0F42DB68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013304",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=6032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12658",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=6032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without parameters to (1) information.php, (2) language.php, (3) list_docs.php, (4) popular_prod.php, (5) sale.php, (6) subfooter.inc.php, (7) subheader.inc.php, (8) cat_navi.php, or (9) check_sum.php, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB7161F-55A8-42F3-BB9B-5E7C366EEE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE60304-C846-4670-AC65-FB86EF7A0AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1258D0-EC39-4A58-B74B-F8512154AB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3C6FE2-8074-4C5F-B8F0-6B11E5BC3D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE530337-EE60-4CD2-B22E-07DE0F42DB68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=6032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=6032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0611",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B288E1C-4511-482A-B39D-E6BB9585AF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "19BC5A59-BCBD-4859-8329-B4974D43DB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6051B4-1B15-44C0-B2CD-5504E68C60F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348F3214-E5C2-4D39-916F-1B0263D13F40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110979465912834&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=vulnwatch&m=110977858619314&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://service.real.com/help/faq/security/050224_player/EN/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-265.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-271.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11419",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110979465912834&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=vulnwatch&m=110977858619314&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://service.real.com/help/faq/security/050224_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-265.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify configuration."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ipvc-3510-mcu:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BE4B69-0F6F-4BBC-8782-C99B39D365FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ipvc-3520-gw-2b:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96BD25F-A9A1-42C7-B7C4-7CADDDDAA0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ipvc-3520-gw-2b2v:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD5DF29-BD68-4FD2-B017-F13C3E77FF00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ipvc-3520-gw-2v:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF9E55ED-0B77-4570-A27E-61ABBD9719C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ipvc-3520-gw-4v:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F84690C-3A42-4100-94A5-E261CBB7116E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ipvc-3525-gw-1p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448A9BC1-2D58-45DF-AF5A-970B45219DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ipvc-3530-vta:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E29D3F41-EFA3-46D7-B9A5-1CC32C17DFC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14122",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/public/technotes/cisco-sa-20050202-ipvc.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/public/technotes/cisco-sa-20050202-ipvc.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15A5879-39FE-4BFF-B391-52EAA58D1A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581594BF-92CE-4B16-95DC-200E11C64591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBFC1B3-8C7D-4B63-8E92-F1759EACA2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3575646-AF8E-4D33-97DE-E6EA468D9973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7717E4CC-C7D1-4DB3-8F15-A6DC3C957B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E7219-C05D-4269-990B-4B523564BF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A729BD82-D5BA-4BF9-812C-ADACEF42F68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110970201920206&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110999268130739&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?t=267563",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110970201920206&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110999268130739&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?t=267563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow remote attackers to execute arbitrary SQL code via the catid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3700514A-DB69-49F4-AB13-B9DAEB93F303"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110962819232255&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/Article2669.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013324",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110962819232255&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/Article2669.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7B5757-8E02-4764-BF26-B51AB98E141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3700514A-DB69-49F4-AB13-B9DAEB93F303"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110962710805864&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/Article2669.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013324",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110962710805864&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/Article2669.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network through an untrusted network."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nexland:pro800turbo:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E82EF14-BA0E-4F60-AC5F-25EAEF6584E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:firewall_vpn_appliance_200r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5081F382-CC20-4C7B-A3F8-08FAF31012D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security_360:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "857",
            "matchCriteriaId" : "648415B3-30CB-4712-95C4-ECB81405D75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security_460:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "857",
            "matchCriteriaId" : "CB952E4C-BE4C-430E-80D2-711C25B781E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.02.28.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.02.28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated as a fatal error by the server, as demonstrated using (1) signed integers for size values, (2) an invalid model, (3) a \"newpos\" value that is less than or equal to a size value, or (4) partial packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enlight_software:scrapland:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9864F1D3-B579-4DA5-8090-1A800B892D46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/scrapboom-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110961578504928&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14435",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/scrapboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=110961578504928&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB2B261-F31A-4EDF-89D5-1648E7698559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E995A0F0-E1BB-441D-B145-1FB0AF4330DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B868D0-B166-455D-A96F-8530853D83EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F354E5EE-0B83-4960-98DF-9DBBB504C1C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B546D37F-7115-4CA4-8A63-BFCC0B9E1E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA756A7-DE14-40F4-87F6-B3374E88B21A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD3DFD7-307F-4110-A412-D1C56836DF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D18E6C-5202-4406-AEC8-6477CDA7AE67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A881DD8-9B96-4581-B39B-7721CBCD5F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C314FF87-F182-4ABF-93D4-748EEF47C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63829009-5782-4671-8678-2F090CA5520A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trolltech:qt:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA116DA-DA3F-415C-88A7-3E65EAA2089C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=75181",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-01.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12695",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=75181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BBB39E-C916-49B0-B316-B67726CB62D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/golden_heap.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391987",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12704",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/golden_heap.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxmail:foxmail_email_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB66C043-0412-4041-976C-4CA5E5B89309"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14145",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013356",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391960",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12711",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and modify kernel memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA160D4-5CAB-44E7-880A-59DD98FEAD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14432",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013333",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#copy",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openbsd.org/errata.html#copy",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openbsd.org/errata35.html#locore",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12825",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#copy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata.html#copy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata35.html#locore",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to execute arbitrary SQL via an imported file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "358E054A-2298-486B-88A4-44AB6864904E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:antivirus_engine:4.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4BA9DA-01B1-4C51-A8B2-DF9804E114B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/10243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/10243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:antivirus_engine:4.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4BA9DA-01B1-4C51-A8B2-DF9804E114B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/361180",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/10243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/190",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/361180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/10243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the (1) CLIENT-IP or (2) X-FORWARDED-FOR header in an HTTP POST request to show_news.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7BF20D-34F9-453A-A54A-3A0B39EAAD58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110969774502370&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernelpanik.org/docs/kernelpanik/cutenews.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110969774502370&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernelpanik.org/docs/kernelpanik/cutenews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:panews:2.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF05F803-F6ED-492E-809B-CD475CE9CE0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110969774502370&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernelpanik.org/docs/kernelpanik/panews.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110969774502370&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernelpanik.org/docs/kernelpanik/panews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:panews:2.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF05F803-F6ED-492E-809B-CD475CE9CE0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110969774502370&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernelpanik.org/docs/kernelpanik/panews.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110969774502370&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernelpanik.org/docs/kernelpanik/panews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting (XSS) protection via (1) \"decimal HTML entities\" or (2) \"the \\x00 symbol.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixel-apes_group:safehtml:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2938B64B-44D8-4377-99F9-D329BF73B34B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pixel-apes.com/safehtml/feed",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pixel-apes.com/safehtml/feed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via \"hexadecimal HTML entities.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixel-apes_group:safehtml:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "2BB289DB-FE06-47CF-8C04-64E03D2FC89F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pixel-apes.com/safehtml/feed",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pixel-apes.com/safehtml/feed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) the pages parameter to divers.php (incorrectly referred to as \"drivers.php\" by some sources), (2) in the search feature text area, (3) forum name, (4) site name or (5) the maximum avatar size in the option section, (5) new category or (6) new forum fields in the forum section."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectbb:projectbb:0.4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA1B743-4F99-4781-8801-EBDA7528A02B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111031893610270&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013332",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12709",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111031893610270&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via (1) liste or (2) desc parameters to divers.php (incorrectly referred to as \"drivers.php\" by some sources), (3) the search feature text area, (4) post name in the post creation feature, (5) City, (6) Homepage, (7) ICQ, (8) AOL, (9) Yahoo!, (10) MSN, or (11) e-mail fields in the profile feature or (12) the new field in the moderator section."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectbb:projectbb:0.4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA1B743-4F99-4781-8801-EBDA7528A02B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111031893610270&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013332",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12710",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111031893610270&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:openvms:6.2:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5CC3F376-E18C-4C57-BD3C-51B94575ACC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:openvms:6.2:*:vax:*:*:*:*:*",
            "matchCriteriaId" : "A1774F7B-F877-4366-BF2E-CA6A57B7BD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:openvms:7.3:*:vax:*:*:*:*:*",
            "matchCriteriaId" : "7F43CC49-38A0-4A45-80C8-6129B3D5494F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:openvms:7.3-1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D5263519-EAA4-4BB6-8071-2CB7B119DD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:openvms:7.3-2:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "CF201B37-9A76-400E-B389-B4E58B3F0356"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110980700101451&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110980700101451&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74632C65-6711-4425-A43F-CCF1664C8542"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83792",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B91D5BC-A48F-44D4-AF28-5BA447D2365B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1F4DB0-6498-4B25-A017-0A7A18C4D6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5B762F-D398-43BE-AF1C-998EEF827FA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110995346018830&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110995346018830&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arif_supriyanto:auracms:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A0A9CB-6F69-4E7D-97E3-876E26AFA013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv011-y3dips-2005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110979842315750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013357",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://echo.or.id/adv/adv011-y3dips-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110979842315750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) hits parameter to hits.php, (2) query parameter to index.php, or (3) theCount parameter to counter.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arif_supriyanto:auracms:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A0A9CB-6F69-4E7D-97E3-876E26AFA013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv011-y3dips-2005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110979842315750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013357",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://echo.or.id/adv/adv011-y3dips-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110979842315750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or cause a denial of service (application crash) via a .. (dot dot) in an HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:computalynx:cproxy:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF240632-7C7A-4189-AE82-513CE26875D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:computalynx:cproxy:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC3ED16-93B5-4661-8CCE-830A83F2C532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:computalynx:cproxy:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F832E185-B8F9-4275-8D59-B02D084587E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110980096304013&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14461",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110980096304013&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_uid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmw_linklist:cmw_linklist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "03F1E748-E113-4A54-804B-6824DCEB71C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110987892618892&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110995289619649&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110996536620069&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14465",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110987892618892&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110995289619649&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110996536620069&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15A5879-39FE-4BFF-B391-52EAA58D1A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581594BF-92CE-4B16-95DC-200E11C64591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBFC1B3-8C7D-4B63-8E92-F1759EACA2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3575646-AF8E-4D33-97DE-E6EA468D9973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7717E4CC-C7D1-4DB3-8F15-A6DC3C957B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E7219-C05D-4269-990B-4B523564BF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A729BD82-D5BA-4BF9-812C-ADACEF42F68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110996579900134&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://neosecurityteam.net/Advisories/Advisory-09.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://neosecurityteam.tk/index.php?pagina=advisories&id=9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013377",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110996579900134&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://neosecurityteam.net/Advisories/Advisory-09.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://neosecurityteam.tk/index.php?pagina=advisories&id=9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adalis:d-forum:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95B9DCA-972D-46F0-A921-19E3B00FE43B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E11939F-3C0E-4976-A031-9C7BC5A63BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4504BE5-11F3-4AC9-B543-B8CA4DBE02D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1831391-E8DD-430C-8C51-FA34CC2A38A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BF2C7A-2689-4760-8CD9-387BD497789E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14450",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70279A6A-640B-4831-AB5A-D9C485A32EC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14414",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/14308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/14308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70279A6A-640B-4831-AB5A-D9C485A32EC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14414",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/14308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/14308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libexif:libexif:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D77F97-C618-43D2-B769-BBA0DBD0F441"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013398",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102041-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-709",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-17.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-300.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=7152",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/91-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102041-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-300.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=7152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/91-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_bradley:xv:3.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EA50F-7B52-4FF4-A460-9650CAEBE06C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_pax_team:pax_linux:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9954840-C7F2-4395-AC59-10B2C21246C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B22449-0C0C-45B3-9D7F-A778E179F57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDD01E4-A51C-4725-BA3A-F15A3CB40EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE17A36-1AA8-4CE2-92CD-3FD4EA7A2A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1377A5-B59B-4678-9F46-7698CD0807A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA43A4E-99F4-4FE6-866B-D279D261AD0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E954A75E-28D5-4C39-9AA8-6541B849C115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6805F737-983F-4E16-A2E5-3917AAD73E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D07EE2-488C-42CF-AF1F-404F26ABD4B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E68615C-5B26-47D8-A7EF-5732E803CA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_pax_team:pax_linux:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CE3B1E-D4CB-4829-B6B8-080BA6116FA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12729",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module, (4) the topic_id parameter in the articles module, (5) the ord_id in the orders module, (6) the dom_id parameter in the domains module, or (7) the invd_id parameter in the invoices module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FDCCE7-B76F-42EA-BD82-11D35AAED66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84AC0DD-109D-4E44-9673-668238545F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FECE4E8-3258-48E7-8F3A-F564512442CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4116",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013329",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12686",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to login.php, and possibly other scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FDCCE7-B76F-42EA-BD82-11D35AAED66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84AC0DD-109D-4E44-9673-668238545F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FECE4E8-3258-48E7-8F3A-F564512442CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4116",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013329",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12686",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=4118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca3de:ca3de:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D3A3C9-FB7F-452E-B94F-2B1420C7621A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/ca3dex-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013361",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12727",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/ca3dex-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the (1) allowhtml, (2) allowbbcode, or (3) allowsmilies parameters to inject HTML into signatures for personal messages, possibly when they are processed by privmsg.php or viewtopic.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://neosecurityteam.tk/index.php?pagina=advisories&id=8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14475",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://neosecurityteam.tk/index.php?pagina=advisories&id=8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) frommethod parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB559F1-D8A6-4265-963C-1265FC7997A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE0A89A-6DB5-482F-985C-C314DC4D5E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D1D438-86A5-4224-852F-EC1E5DB83DC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/9497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013365",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/9497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D1D438-86A5-4224-852F-EC1E5DB83DC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013365",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stadtaus:form_mail_script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "9D2B5079-FB5E-4E7E-86F4-625DE6CF5E1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110996489800035&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14505",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013378",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.stadtaus.com/forum/t-1579.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110996489800035&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.stadtaus.com/forum/t-1579.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.  NOTE: it was later reported that 2.4 is also affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stadtaus:tell_a_friend_script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "7668AFBC-DC8F-4262-97CF-A3146C62D3F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://arfis.wordpress.com/2007/09/13/rfi-02-openelibrary/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013390",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/14628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/474954/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.stadtaus.com/forum/t-1578.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.stadtaus.com/forum/t-1579.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://arfis.wordpress.com/2007/09/13/rfi-02-openelibrary/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/14628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/474954/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.stadtaus.com/forum/t-1578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.stadtaus.com/forum/t-1579.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFF99BC-5E1D-4ADA-8BE7-07F7761C972C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA805CAF-A678-43A9-932D-EE35DBCCA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18331C39-0ACE-4651-9D9F-1533AAD7C58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5093F703-13AA-4EEC-8659-C5EB29A54AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/drupal-4.5.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/files/drupal-4.5-xss-fix.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14515",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/drupal-4.5.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/files/drupal-4.5-xss-fix.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:18.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0659.  Reason: This candidate is a duplicate of CVE-2005-0659.  Notes: All CVE users should reference CVE-2005-0659 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0704",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12762",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10447",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0705",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the \"ignore cipher bit\" option enabled. allows remote attackers to cause a denial of service (application crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12762",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10565",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0706",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grip:grip:2.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E99DB53-A99B-44E3-A48B-3F84415181BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grip:grip:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6C3D47-437C-4255-B466-34E85AF9D05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grip:grip:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B200809A-CFD0-45B7-B50B-C09C1FD894D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grip:grip:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BB6BB2-E8F0-4BC0-930A-054C973D6F3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/32803",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33389",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-21.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1160134&group_id=3714&atid=303714",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=834724&group_id=3714&atid=103714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-304.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12770",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152919",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19648",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10768",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00429.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00490.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00188.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1160134&group_id=3714&atid=303714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=834724&group_id=3714&atid=103714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-304.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00490.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00188.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the IMAP daemon (IMAP4d32.exe) for Ipswitch Collaboration Suite (ICS) before 8.15 Hotfix 1 allows remote authenticated users to execute arbitrary code via a long EXAMINE command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.15",
            "matchCriteriaId" : "BD392FB9-AC56-40A1-AF5D-A9383979AB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14546",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013410",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=216&type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=216&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dragonflybsd:dragonflybsd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE8937-E1BD-4601-AF1C-6DD20BB132AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dragonflybsd:dragonflybsd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D676C769-17D1-48B2-98F4-AC3BDF2C882B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A585A1-FF82-418F-90F8-072458DB7816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F7EB61-55A5-4776-B0E7-3508920A6CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "A442DE97-4485-4D95-B95D-58947585E455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE31DFF8-06AB-489D-A0C5-509C090283B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8A6564-129A-4555-A5ED-6F65C56AE7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "237174A4-E030-4A0B-AD0B-5C463603EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF49BF03-C25E-4737-84D5-892895C86C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7F8F11-1869-40E2-8478-28B4E946D3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2019E0E-426B-43AF-8904-1B811AE171E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "9062BAB5-D437-49BE-A384-39F62434B70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1504C-14FE-4C21-A801-944041F2946F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "6E53C673-9D6D-42C8-A502-033E1FC28D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5FC1A-1253-4390-A4FC-573BB14EA937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4AC452-6042-409D-8673-ACAD108EE3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE1009B-371A-48E2-A456-935A1F0B7D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C844A170-B5A7-4703-AF3B-67366D44EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44308D13-D935-4FF8-AB52-F0E115ED1AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3D41CB12-7894-4D25-80EC-23C56171D973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD9C12-EDAB-473F-9CC5-04F06B413720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "09789843-6A1A-4CDB-97E8-89E82B79DDB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*",
            "matchCriteriaId" : "118211EF-CED7-4EB5-9669-F54C8169D4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*",
            "matchCriteriaId" : "58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "9A405AE2-ECC4-4BB0-80DD-4736394FB217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*",
            "matchCriteriaId" : "E5612FB0-8403-4A7E-B89A-D7BDFAC00078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*",
            "matchCriteriaId" : "FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "AFDA151E-E614-4A24-A34D-B6D5309110CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "09BFA20B-2F31-4246-8F74-63DF1DB884EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3B4BA2-8A61-4F9A-8E46-7FA80E7F5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE93D3D-34B4-47B7-A784-61F4479FF5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "43E84296-9B5C-4623-A2C4-431D76FC2765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "F177AE1C-58C2-4575-807C-ABFFC5119FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A612F6-E4EB-4E34-8F55-79E16C74758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "5C19B266-8FE7-49ED-8678-2D522257491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "15C4D826-A419-45F5-B91C-1445DB480916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9F2B04-A1F2-4788-A53D-C8274A758DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5309ED-D84F-4F52-9864-5B0FEEEE5022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BC012-ADE4-468F-9A25-261CD8055694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-05:02.sendfile.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-05:02.sendfile.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0709",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5032D74E-CC8D-4217-AEF0-98DCD1820AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3340604-0D38-4494-847B-E9E8B0026A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC117BF1-3127-477A-9500-C9A32596ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C43BB-81C6-496F-AC7B-61382DE76B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9FF055-99BC-4E15-80C8-80FEF3CBA990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7196E5-8483-4872-A78A-8BE7EC551CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDA057-D211-42BD-B8AF-F250F1C5B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111066115808506&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-707",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:060",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_mysql.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-334.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-348.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12781",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0009/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10479",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/96-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111066115808506&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_mysql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-334.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-348.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/96-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0710",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5032D74E-CC8D-4217-AEF0-98DCD1820AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3340604-0D38-4494-847B-E9E8B0026A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC117BF1-3127-477A-9500-C9A32596ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C43BB-81C6-496F-AC7B-61382DE76B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9FF055-99BC-4E15-80C8-80FEF3CBA990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7196E5-8483-4872-A78A-8BE7EC551CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDA057-D211-42BD-B8AF-F250F1C5B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0083.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111065974004648&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-707",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:060",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_mysql.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-334.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-348.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12781",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0009/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19658",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10180",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/96-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111065974004648&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_mysql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-334.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-348.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/96-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0711",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5032D74E-CC8D-4217-AEF0-98DCD1820AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3340604-0D38-4494-847B-E9E8B0026A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC117BF1-3127-477A-9500-C9A32596ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C43BB-81C6-496F-AC7B-61382DE76B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9FF055-99BC-4E15-80C8-80FEF3CBA990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7196E5-8483-4872-A78A-8BE7EC551CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDA057-D211-42BD-B8AF-F250F1C5B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0082.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-707",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:060",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_mysql.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-334.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-348.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12781",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0009/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9591",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/96-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_mysql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-334.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-348.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/96-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:18.610",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0340.  Reason: This candidate is a reservation duplicate of CVE-2005-0340.  Notes: All CVE users should reference CVE-2005-0340 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in modules.php in eXPerience2 allows remote attackers to execute arbitrary PHP code by modifying the file parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gamearena:experience2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79465B91-4848-47DF-81F4-CA6C3C9B3924"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111030766324600&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111030766324600&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pafiledb.php, or a direct request to (2) viewall.php, (3) stats.php, (4) search.php, (5) rate.php, (6) main.php, (7) license.php, (8) category.php, (9) download.php, (10) file.php, (11) email.php, or (12) admin.php, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "CA6FEC21-398F-4080-9787-91EBE9F7AAE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111031801802851&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111031801802851&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL commands via the Number parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65952A65-78AC-4239-9D15-BA850AF64598"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111056135818279&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111056135818279&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:18.723",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0735.  Reason: This candidate is a duplicate of CVE-2005-0735.  Notes: All CVE users should reference CVE-2005-0727 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:18.753",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0736.  Reason: This candidate is a duplicate of CVE-2005-0736.  Notes: All CVE users should reference CVE-2005-0736 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Xpand Rally 1.1.0.0 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techland:xpand_rally:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C377411E-9056-4088-B763-51ED4EA9DD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techland:xpand_rally:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97515B01-DBFC-4B7C-99AE-4CC99F651F49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/xprallyfs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14545",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5DP0G00F5Q.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/xprallyfs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5DP0G00F5Q.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service via a request to a file on the floppy drive, as demonstrated using A:\\a.txt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:py_software:active_webcam:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94A5FAD-70F3-46A4-8B23-0EB8259414E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14553",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secway.org/advisory/ad20050104.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secway.org/advisory/ad20050104.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to obtain the full path of the web server via a request for a non-existent filename, which leaks the full path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:py_software:active_webcam:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94A5FAD-70F3-46A4-8B23-0EB8259414E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14553",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secway.org/advisory/ad20050104.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secway.org/advisory/ad20050104.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:py_software:active_webcam:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94A5FAD-70F3-46A4-8B23-0EB8259414E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14553",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secway.org/advisory/ad20050104.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secway.org/advisory/ad20050104.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (memory exhaustion and process crash) via a large number of HTTP requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:py_software:active_webcam:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94A5FAD-70F3-46A4-8B23-0EB8259414E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secway.org/advisory/ad20050104.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/ad20050104.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsscript.co.uk:newsscript:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C481B1C-BCE5-4149-B311-B624300B9967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/12761",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5FAAEB-793F-405B-A8D9-872FCEEBFB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6BF80C1-8F4D-40AF-88FD-D1AFDC03EC6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.0.1046:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28F9A8C-206B-49D3-9F25-D25F4CD74DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.0.1065:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077D9394-E0DB-4BE1-9666-ED98A459D57C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.0.1232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB29459E-C84F-46BC-9679-A55D285287E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349A209F-6609-4809-B228-E84623FA268D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.5.1249:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC324E2-C08F-4090-82CD-5A64165986F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92465439-530F-435E-976F-491AD3C56944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6.0.1347:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEAC4C7A-4A77-41ED-BC6D-6F962283107E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6.0.1351:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38232D5E-568C-4CFA-BA01-C35939D68AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6.0.1355:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E025BBCF-8E26-4E83-BA49-9A10E3011428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6.0.1356:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0DD432-79BA-4750-B53C-A5149DACBE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6.0.1358:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47ABA651-3F7A-4647-AA21-14B552694A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE7278-FFAD-489B-BDCC-BF6BA8D5DF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:6.0.0.1643:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9479AAB-AFFD-4976-96AC-B97DE517BFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:6.0.0.1750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595ECE8-C876-441F-B90A-FC8D80BA1034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:6.0.0.1921:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FFB3BF-1092-46E4-9C0D-FF91E0FB1371"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Mar/0284.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12750",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Mar/0284.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E2337C2B-EEC2-48B3-93C0-FE1FE7D41273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "01E472FC-3001-48A5-908D-B42467B3DBA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14543",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/?kbid=891504",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/?kbid=891504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0739",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.9",
            "matchCriteriaId" : "08D3F4F1-432B-4AA7-9312-768C0123DB4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://anonsvn.ethereal.com/viewcvs/viewcvs.py?view=rev&rev=13707",
        "source" : "security@debian.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111066805726551&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-718",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12762",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9687",
        "source" : "security@debian.org"
      }, {
        "url" : "http://anonsvn.ethereal.com/viewcvs/viewcvs.py?view=rev&rev=13707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111066805726551&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB26B3D-4DF0-45C2-9ECA-202C829392D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*",
            "matchCriteriaId" : "D00790CE-CD77-4C39-80AC-5FBD298DD63A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "BC5F2280-EC46-4D2F-8402-FE91ECEE6A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur1:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "2F40832C-EA2D-4AEF-9C98-36795D36BA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur1:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F076EB9-CE31-456E-B7E9-B9F4C26CB0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:*",
            "matchCriteriaId" : "60EBC552-FAC2-4833-B1A6-696DC06301A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur5:platform:*:*:*:*:*",
            "matchCriteriaId" : "A6F3E897-8253-4D9B-9FA7-83727F508789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur5:standard:*:*:*:*:*",
            "matchCriteriaId" : "18ECFDD3-6D45-44F1-BA98-426D86084BA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57742-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200314-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57742-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200314-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3355CD8B-9EF3-46CE-8DA3-FCF64B24F529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:1.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE4119C-E4A0-405F-AF9A-DAE023F79862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:1.0_rc3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348CD73F-6D2F-439B-9E15-6177895F27C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE8B49C-84BE-4339-909F-389D3C1FD1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6515D89E-A80A-4C9B-AABA-886DA748FC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F5267A-F85F-4394-9427-592F9C09D53A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD944A1-902C-4031-80A5-61621CCA28A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0764C095-72DA-4FAA-9A59-D192144872F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21260A9E-32F8-4A95-A77B-34183F59C52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D649637-9772-4B71-B219-DD505CDB3549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E91D0D-42F6-4FAC-BD04-AA4D77C6DAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881DDA3C-4D95-471F-95BA-6C4629B3CB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E235D928-E2D9-46D3-B95F-C4AF556D3C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C32DECD-1E28-4CC1-812B-E8D54B5703EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD25BC1-E435-4691-B42A-0D98D80F0F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F58A3E7-4C21-48FD-AA26-7CCE85BAE887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC857372-A76D-4F3D-9FEE-6086A0AB002C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14520",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392626",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12754",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.xoops.org/modules/news/article.php?storyid=2114",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/392626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.xoops.org/modules/news/article.php?storyid=2114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "986D157A-DB64-4F32-80A4-9358B615DABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA99C786-A542-4AC3-BB81-4DE9C35E28DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14527",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096885.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096885.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "986D157A-DB64-4F32-80A4-9358B615DABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "82429724-FB37-4420-B650-E401AD9AF94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "23DDA1C9-FE86-40B2-8CCA-FEFEADBEE381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E677348-A982-49EC-911B-92C7C234EAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "38F84B77-5522-48E0-AE56-7AE5E967A0DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.2.113:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841888E0-C8E9-4C9C-8C21-DE60B037DBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA99C786-A542-4AC3-BB81-4DE9C35E28DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:ichain:2.3:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4B485F-AF4D-431F-8572-0C121E859598"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111091102023359&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-03.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111091102023359&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0760",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D83FADC-4C7F-4C16-BBAA-9883D7449744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A019EA-DB16-41D5-A625-CBD96F24416E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45B5EE8-00FB-46FE-9A26-7468AD30B540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6534A963-C0A7-47D6-8E1B-B8D0F3933428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD06A99-7CBF-4593-9EA1-5D1A800D8C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDC9494-E79B-4497-8413-A44DF326ABB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563F49AC-D60F-4E00-9E0D-7EDAA2FFFCD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB0628-9BFD-4262-886C-E971EC262134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F61BB-FF5B-4196-8723-AA165B077E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02E4063-E2B2-4EC5-9864-D2FB3E73F574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CEEBE6-7CE6-4E1B-8828-EDD64EA3A338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193A610A-5E5E-4A87-A501-902100D1C2AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013550",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-702",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2005-070.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2005-070.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0762",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D83FADC-4C7F-4C16-BBAA-9883D7449744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A019EA-DB16-41D5-A625-CBD96F24416E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45B5EE8-00FB-46FE-9A26-7468AD30B540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6534A963-C0A7-47D6-8E1B-B8D0F3933428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD06A99-7CBF-4593-9EA1-5D1A800D8C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDC9494-E79B-4497-8413-A44DF326ABB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563F49AC-D60F-4E00-9E0D-7EDAA2FFFCD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB0628-9BFD-4262-886C-E971EC262134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F61BB-FF5B-4196-8723-AA165B077E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02E4063-E2B2-4EC5-9864-D2FB3E73F574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CEEBE6-7CE6-4E1B-8828-EDD64EA3A338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193A610A-5E5E-4A87-A501-902100D1C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A27CAC75-BFE8-4865-A6AE-20225BFCDBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6393827E-8F17-4C95-B1E2-D6049B8AA63F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-070.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013550",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-702",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9736",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-070.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0763",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:midnight_commander:midnight_commander:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.55",
            "matchCriteriaId" : "497B17B3-2CEE-4158-9E13-60C3DF878CE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-698",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-512.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-512.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A6FF5-F9E8-42BB-B8C9-5B348655AF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6365525-A87B-41B6-8F34-50C029A3BE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE258B89-1FA5-4E88-AFA2-183735FDC536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB2CD43-6EF9-476F-80C7-1BF562B6EF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90EB980D-D2E3-4157-BB66-A210F951AE6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E507988-FFC1-4BD6-8F58-34AFF4E9E73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC60E4C-695E-4911-9522-F1A60F6BFD8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB3D72CD-778A-4422-AAF0-5201D793DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3753D7-4E77-40D5-87DE-C8EC4B501716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93669010-EAF9-4BD8-86B0-344BFB93BF0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A691CA84-9B32-4934-BA95-E14CCD9FA70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D6B64-5555-4489-B681-EAB474FDED24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96BF2B00-A3D6-4AD3-9CB2-309186D957D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597DC82F-1C8A-4814-B847-B3D451985C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA96619-D477-4847-9ABF-2E8399024E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E41E9C-BFF2-4F5C-B65B-CF64CCF0D991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B14BE1-0A71-45ED-942A-0FCC3422E765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C1E64C-C309-4A04-B022-9F091ED3911D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B79634D-BA23-4B9E-9A0C-B65E524CC10E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=84680",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-23.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=84680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service (application crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.9",
            "matchCriteriaId" : "08D3F4F1-432B-4AA7-9312-768C0123DB4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goodtech_systems:goodtech_telnet_server:4.0:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "EB3A56FB-C70F-45E8-A2E6-123C1C4E1870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goodtech_systems:goodtech_telnet_server:5.0:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "92E4F77C-E905-477A-8274-86D6611ACBF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111092012415193&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://unsecure.altervista.org/security/goodtechtelnet.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111092012415193&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://unsecure.altervista.org/security/goodtechtelnet.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C050454-C24F-49B8-9EB0-C8B1D87B882F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF96BA3-6A2E-4371-8A6A-2D90BAA787A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D587A9A-F547-4857-8E50-C790CD5778A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F89E05-C29C-4B53-8007-E2C3EF40C2A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B9C81A-4DF2-4B69-8AEC-4E63621E3E4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBFA0859-921E-41DE-9795-99176E087F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97CFAB66-94A5-457C-9EAD-F378494D9AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.8_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BA655D-551A-461F-A8BB-C176B03514E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.9_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C7F6A0-7373-4C3B-817C-F1A5F40C8809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BD7DB8-2763-4669-931A-EBFDCEB50A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED17444-C7E8-47D8-9143-2339885EF4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF98A9B4-FA65-415A-BEA1-40C68193EA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D744C240-4A84-4A30-89F8-A931FA745BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2759B9FB-9B05-4137-9C90-02D7CDBB692D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.2_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D84015-C3C2-4201-9155-CA1F961466B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14561",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-25.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_15_openslp.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447537/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447537/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12792",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/98-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_15_openslp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447537/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447537/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/98-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0.830 allows remote attackers or local users to cause a denial of service (CPU consumption or application crash) and possibly execute arbitrary code via format string specifiers in a dynamic link library (DLL) name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datarescue:ida_pro:4.7.0.830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3235B1-9DB1-4455-9C97-3BE5A61032B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111100269512216&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pb.specialised.info/all/adv/ida-debugger-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14610",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.datarescue.com/cgi-local/ultimatebb.cgi?ubb=get_topic%3Bf=2%3Bt=000155%3Bp=0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111100269512216&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pb.specialised.info/all/adv/ida-debugger-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.datarescue.com/cgi-local/ultimatebb.cgi?ubb=get_topic%3Bf=2%3Bt=000155%3Bp=0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator."
      }, {
        "lang" : "es",
        "value" : "La acción reportpost en misc.php para PhotoPost PHP 5.0 RC3 no limita los datos de inicio de sesión que son enviados al administrador, lo que permite a atacantes remotos enviar una gran cantidad de emails al administrador."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604A06DE-F946-42A0-8629-B87E7D6E9A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14576",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604A06DE-F946-42A0-8629-B87E7D6E9A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via (1) the check_tags function or (2) the editbio field in the user profile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604A06DE-F946-42A0-8629-B87E7D6E9A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604A06DE-F946-42A0-8629-B87E7D6E9A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via multiple connection attempts with a \\ (backslash) in the username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:platinumftp:platinumftpserver:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56700D5-8B0A-45FC-AF18-70160A106B46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111066232415249&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/455609/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12790",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111066232415249&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/455609/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BADFC3-51C0-4881-B5DF-81BBA02F0EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4CCDF7-5945-4478-9661-217F823DE9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC5717A-E248-406F-A281-C5B2F5368127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.0_beta_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E807335-6C70-4A19-A692-A7DE325FC213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EB588E-FC2B-4E10-86F5-33C2758BEED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111065796525043&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12788",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111065796525043&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BADFC3-51C0-4881-B5DF-81BBA02F0EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4CCDF7-5945-4478-9661-217F823DE9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC5717A-E248-406F-A281-C5B2F5368127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.0_beta_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E807335-6C70-4A19-A692-A7DE325FC213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EB588E-FC2B-4E10-86F5-33C2758BEED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/advisories/pafdb.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111065796525043&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111221940107161&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12788",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://digitalparadox.org/advisories/pafdb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111065796525043&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111221940107161&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF0655C-7C83-4363-A444-993B35D7A7EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111083279031544&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14554",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12800",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111083279031544&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control panel."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF0655C-7C83-4363-A444-993B35D7A7EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111083279031544&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14554",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12800",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111083279031544&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BC5B30-B6D7-4694-9DFB-7F96528C5855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111083400601759&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12756",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111083400601759&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wine:wine:2005-02-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234E72C1-C9FA-4E65-8903-945376979044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wine:wine:2005-03-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A9F96EB-B7C1-445B-99E6-B596B829A65F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wine:wine:2005-03-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1518904-AFB1-4AB5-B1BC-3D88CB40F205"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.winehq.org/show_bug.cgi?id=2715",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111082537009842&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=7300",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.winehq.org/show_bug.cgi?id=2715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111082537009842&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=7300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite arbitrary files via a \"holaDB/votes\" followed by a .. (dot dot) in the vote_filename parameter, which bypasses the check by HolaCMS to ensure that the file is in the holaDB/votes directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:hola:holacms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.9",
            "matchCriteriaId" : "A9DD0143-1D87-419C-B7AC-3F8110227C2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:hola:holacms:1.4.9_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913CF7B2-A97C-4CA3-B01A-FCD2B5011854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111090966815089&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14566",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.holacms.de/?content=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111090966815089&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.holacms.de/?content=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2005-0720."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcnews:mcnews:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A6986B-3F4B-4928-84EB-BECB789E71E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcnews:mcnews:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC6A5AC-5928-44B0-B465-99F0CD028FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcnews:mcnews:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8035C620-D2CE-43E2-BC8C-60779CF09684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcnews:mcnews:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC769AE1-7396-4765-B09C-624F33075DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcnews:mcnews:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A2A23F4-28BB-4806-8242-AF5D1FDA3AE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111108900102438&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445606/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12835",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111108900102438&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445606/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:includer.cgi:includer.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD68DD6-C39C-424A-88E6-9389C4BC73FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111109052121557&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111109052121557&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML via the search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AD9E61-5148-47EB-8B7A-9763C016659D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131A3B64-C5D0-4706-9DCC-8EE847B46FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287003D5-16D8-4924-8614-EC7634444B20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26D76BD-877E-4A3A-BBFB-16F70B42C03B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111108840811698&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14625/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013470",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12836",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111108840811698&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14625/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka \"Enhanced Metafile Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111108743527497&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17461",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/134756",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12834",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-312A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2348",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111108743527497&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/134756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-312A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the mailto field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E00689-F421-4B3B-96D7-14DC66DB42B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111108519331738&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14627",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12833",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111108519331738&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by imagegallery.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subdreamer:subdreamer_light:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA5D27-2728-4BAB-AF97-4FB6262343E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111116479910230&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437983/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12839",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.subdreamer.com/forum/showthread.php?t=2501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111116479910230&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437983/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.subdreamer.com/forum/showthread.php?t=2501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, possibly involving charsets in attachment filenames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ximian:evolution:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68499115-1915-45D5-BED1-BBF794EA214E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.ximian.com/show_bug.cgi?id=72609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-397.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/166-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.ximian.com/show_bug.cgi?id=72609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-397.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/166-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3BC3981-3257-4C4E-84D6-39D418B23C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "529D9000-ADDA-47FC-B52B-5EB11794D8C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057187E0-5801-4362-BB92-7A73B2A61A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33BBA2EB-92CC-4961-A5A1-A535AD764A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA4FFD4-0BBF-4368-9F48-ADB783103E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50ED95C2-2E07-4F3B-BF5E-4B221EAB60AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A35BC2-20C6-4CB5-8E0F-153D11C42BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C9CF0AE-1369-46DA-A395-E13E8095BB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18552FDB-FF80-4AE2-8654-3AD0656249C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1311B19-DBC4-4EF0-B3F0-A882DDBF3E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EDA7F0-4C16-449B-8234-0B7DFC587CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3A51F3-046D-4F1D-AA1E-D76AF9B2FF5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:cain_and_abel:2.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6F40FE-3E67-4118-90F4-9A03478A0B10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111116097313427&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14630",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oxid.it/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111116097313427&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oxid.it/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFF8D91-80A2-454A-8B44-A5A889002692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC42876-65AD-476A-8B62-25D4E15D1BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724A8FF9-8089-4302-8200-08987A712988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F97DDB7-E32B-422F-8AEA-07C75DEAD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7079F63C-7CA8-4909-A9C8-45C4C1C1C186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:3.2.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE08AEE-4801-4FAF-97AD-BBD5C5849E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC829C8E-1061-4F62-BA4B-FE5C7F11F209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "143BA75E-A186-47EF-A18C-B1A1A1F61C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CDF9E1-9412-450E-B1D4-438F128FFF9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32561F50-6385-4D71-AFAC-3D2F8DB55A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:3.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51D88E7-6F5C-42B0-BAD6-7DCD9A357B43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-006_e/index-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/204710",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6A2LEF",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-006_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/204710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6A2LEF",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:notify_technology:notifylink:enterprise_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F681B004-1349-478B-82B1-AA43403DBD71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/581068",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/581068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:notify_technology:notifylink:enterprise_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F681B004-1349-478B-82B1-AA43403DBD71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/264097",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/264097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:notify_technology:notifylink:enterprise_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F681B004-1349-478B-82B1-AA43403DBD71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/131828",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/131828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:notify_technology:notifylink:enterprise_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F681B004-1349-478B-82B1-AA43403DBD71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/770532",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/770532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:initial_redirect:initial_redirect_squid_proxy_plug-in:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC44611-192A-4973-9658-8F2C194AF284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:initial_redirect:initial_redirect_squid_proxy_plug-in:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB72521-CAC7-4B3F-BC2C-11897653E571"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13674",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/14832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12827",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vanheusden.com/ir/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/14832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vanheusden.com/ir/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A8DC09-7D32-4D11-A312-A0EE9C1E8D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94C8CFE-4591-49BE-9058-20DE2C15464F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A20FD22-77F8-4288-8B0C-EFE151F59FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B58DEA7-4F4F-4443-8E2B-1E87CE21BC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7202B6-E6CA-4A42-9536-46376CE02A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C11EF7-CDD1-4168-B975-9F527DEAD834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "628867BA-4005-4390-BE00-755C7D6A1180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0561E6E-C2A7-4FF4-9E4D-97854395ACCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620B3896-1406-4D15-8B7E-B4C30BA7E910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F55C9E9-1F40-495D-9E62-56A12F90FBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86F888C-CB9D-4565-A4E4-7A827E78C2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB8370C-8351-4B7A-A77A-A4760A86DCBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4FAA87-04E5-4539-9DA0-B2BEDC603309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CD4C25-6A0D-498B-A9BD-5F19F800618E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0F39F8-9497-43F3-B2F5-AD5ADE650709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370229B8-E951-4A72-A796-CCC950A9E9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF382E50-9EAF-4568-8666-5807FE732F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F27D652-6F21-4F13-85C2-090A9033F967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4DF17D-B282-4F97-A867-7090EE5424C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A9E8F46-7DDA-45FD-8DAA-43925182F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E51CE1-5F09-4997-9156-7202F2BF019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC8F54CB-1987-485A-885A-CA51070D6DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A35C9DC-57B4-41B3-A316-A2D2A5BD003B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB14E081-5C1B-48B7-95C6-5DA4FAEB139D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62803917-6AEA-4CAA-9774-F554784B3734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9791B-2941-47EF-A999-C61C1713BF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A9395D-D50F-44C5-AAD6-111650E9DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D01CF5F-CFEC-4F6C-8654-3FED85AD423C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57DEE36-CA1B-4E76-8B1E-31B522E21FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE8A1C24-C2D2-4FD7-ABA1-5B5FF195B0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F07988-8BFF-4A4D-86B8-9B0AAA27E777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C935E0-5F78-4ED2-8347-427AECFA9989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B078F-29F2-4935-A04A-6F31BEA58F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8F9D71-823B-403B-A084-2950C2D37FFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA35D4-28E4-499D-87B1-58CD6698524F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735B2623-6284-40E9-9F05-CC77DCBA5B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE30C582-A570-4C5A-AE7E-3A2D850CCD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "004CA5C9-8E9F-493A-9DA6-BC71CF9FD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEDA01B0-FB0C-45C2-912A-2AB90FDFF22D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4C47CD-63DD-40BB-8E5B-6E6D99EF18E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CFEBE-8B40-4AEC-A83C-C6C69664273D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F39B3470-344A-470F-8C26-AA4B04427588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D219F8-E401-4631-86DF-04E7203C60C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lysator:lsh:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F08FC9-C97F-4252-AE0C-C4B956030CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.lysator.liu.se/pipermail/lsh-bugs/2005q1/000328.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14609",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.lysator.liu.se/pipermail/lsh-bugs/2005q1/000328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"range checking flaws\" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6909B816-6778-48A8-A828-CA0AC5484388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B988FF88-E782-4581-9E24-CDE7E1734258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9C11B5-5D63-4D2B-AD9A-5E657A8E1D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24BEDA8-2D1D-4AA1-8806-02838FB4C323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAAF0A4-F1B1-4597-B9C1-E7F277061BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE95DD29-6E5F-475B-BCB3-6F756C62FA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A5A944-8CFC-40ED-96D1-842ECA7316B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BF38E2-7353-4A55-ABA3-84085BB5F8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5C94F0-2390-4AF3-BE18-D00B10A67052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18C6032-012A-4B09-8D16-680CA3080D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134ED367-9610-485D-8935-3C46BFC073AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C150050C-6C08-4434-848D-EB71741DF29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D41FAC-B0CD-48DE-AA43-27487FF9E424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9CC013-D4FB-4EC0-B405-6B79DF7C2F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235B7E7D-3785-408A-AE53-7EB4F88F06C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A12556-5E7D-4832-A71A-66E6E9C2A710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9B296A-126A-42E3-B3DD-158F895A48EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC75E5B-48A5-4C28-88B2-870C62DDA337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D2EFF1-78E4-4002-8904-9DA13D7D1DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E02E89-832D-44D9-B2EE-1C070E99AE9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B55CD0D-0117-48F3-8643-4C191716AE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BA4C24-FD29-421C-8F01-1798764C53F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726B962B-D8B6-419E-BC0D-3DD9821234F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985C2754-56B1-4638-B51E-313F7B8BA65F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746D0402-66BD-4225-B847-6762BC4DC18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E657F58A-440D-40CB-97BF-ACB72AB36A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5E6A99-20FD-456C-A5E2-FEBA5DD672ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7699FD2E-C211-4E7E-BCA5-B991FBA90EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B921F-B152-49F3-9AAD-9421F5867F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46381F67-EC99-4EA7-9599-BD4A25827E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AC849E-7D4E-4C00-8BD0-672F413A80B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6996F1F1-5374-4BD2-B421-ABB15C7C0B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E18AFD-5090-4C1F-A2EE-A32A28DB5182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC91B71A-2456-4410-9633-CF5870027D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92555500-16EB-4F76-B2C7-61A00A1AC722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D22C9-94C6-4AC5-AAD0-15F06BCC5CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541B4ED8-E970-4C67-B5AF-7DE5B7F754D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E55F8A8-1ABD-4760-9074-353BBAEE005B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F873503F-C6E2-4AC2-859E-9431FE0FA0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E849AC-B85A-4C4F-878B-E95A5F661E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E4A2912-12AC-4DF1-8023-A0B7DBE9A866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.1.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15004105-9A55-4592-96D6-3FF539EC7513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146F7A77-A950-4CAD-BDA9-C239696F569D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DCE8FF-40C3-44F7-8185-0422ADDA051B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAC3A7C-2092-46D4-908B-CF03F4217112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F3945-21ED-44C6-86D2-B7755A87014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DDB008-E88E-473C-B030-AF9B6F5E4E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEF4480-D50B-464C-AE39-A12455DBC99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15928E10-7D41-45B2-87D6-8AA10190A8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E13C4-F42D-4168-B25E-544E1549C46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4B2ABB-0283-4532-9E29-B37BFF5FDFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DADA29-DCD3-44C4-9BDB-B881D6FCE3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD794C6-11F5-4A2B-9A3C-E03069A1526B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4947CDE-CB89-456B-8B5F-0E17B46BC893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF701E58-35E8-4DDE-B832-C5A23E61A3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2498D898-D243-4D0C-9AEF-0138D19A68B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3924060B-1EC1-4003-B306-E327634E7797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D45B43DF-FD4C-4C37-9569-1CCE450B8987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99879B2B-7FFB-4181-8928-13B7E17F36C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A3E250-5BC6-4AD3-A3DE-7F876FD90BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B10DC6E8-1A85-4F3B-88C9-0425782010A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC74D465-3256-4D87-8F47-C4D7CEA6E2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4817429F-B24F-47E3-BB3B-7EF9036D5F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "1760ADC9-78A1-4133-9720-5319A4CF1DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "28ECE0D4-624D-4804-8013-DBA9BAF659ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "3C115333-E386-4B4D-91C6-69ECE55666F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D62621-2C12-40F0-8726-E48926E4DA44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "614F1C35-94B2-4A86-AEB4-55C774445E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "ECDD69D6-F79F-4F0E-BA3D-E721A1885A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCD388A-1E43-492E-8EEC-4E14EDD7AB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "74F962BE-2187-4C8F-BAE7-EFA3D79FCB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F04081-D672-488E-A91D-5088DD04AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB59EF-74EF-462E-BC84-89201F734380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0755A136-3DE3-4B61-B5EF-F6282AACD38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D950C3-0DDC-4549-99F8-1E206768219A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195A133A-26C9-401E-913F-285BA220D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D68E21-6C58-46A7-96F2-9A79DD880803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D11B12-AFD7-4055-A366-D932CA1BA8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC990132-9DF2-4D23-B9DA-0819809A3CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA51D40-E72C-40A4-B238-70F6806FA1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1B7D68-E41E-4A5A-9606-F14F057B39E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BCB10C-FD72-4F18-84C9-AE0603402426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF742FF1-5504-41BB-8FAA-D71B83C791B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C6D04-3226-4654-9A41-0325B48A2F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072A77AD-BB27-4C24-91A0-A12D6E741593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF900D1D-E351-4407-8269-80E5403432B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44915F9F-88DF-4304-8F66-58A869654BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC2D90D-2115-406C-B609-870B241F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF681CC1-B3EC-467A-A10D-10840D3D4575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8660C030-328E-4221-847E-AC4BDA08CE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47AEC277-F9A4-412F-B2EA-C1AEA336A46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7234AF29-BCDA-4728-A141-C169EE59CEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374851C5-C61D-4964-8B4A-473B0A008F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD55C81-3687-46BF-880E-58D7E005A185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2953267F-16BF-404F-83F1-73E0908979B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D953B61-3457-4A0E-A668-BA4937B79784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5F3607-C0DD-494C-AB6E-46E383A6B17D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19138F52-25EA-42B6-89DC-692A8AF0A720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2EBADC-0817-4E38-9F49-8446D8A20CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340368E7-0005-4F8A-8AF1-C20A1198288C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC860DD-57DF-4474-AE2B-9AADB9060175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1D576A-0763-4611-B3CF-CD8514F18783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F570226-CA89-46F4-8C68-9A59BC0602A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162A88DA-E2EA-4E92-B174-9AD86BE8D983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE5C4F5-C64D-4714-B02E-689B435E3E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164F4483-9F28-491A-8F99-4242C9B9CBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34803A7D-45C4-4DBE-BF18-19CE9DE62A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1178D6EE-A462-4CC1-B430-9A44C75D2336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4360530E-6E07-48F9-B8F8-B36622331052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17508D09-AE14-4458-93A2-E2764452EA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F2CD4A-CCA9-4743-86C4-7675D2487E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C1504C-03C5-49E4-8192-E1E698CF07A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3172A-E663-42F6-90E7-51C3850AF9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F6692C-494F-44ED-97C6-A6CD05334DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77231F8B-137F-4FAE-BCD9-658F32943CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552ED77A-F09A-4923-A907-8E0DF8445363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF940EA-676A-42C8-A6E0-7F53C8A34340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DCCFB1-054F-4BF0-92F1-78A2063415D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D3222C-7469-42F6-984D-3223BCD8080E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697B7069-D08D-41BD-8285-A1ABA0E1142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72173CFB-BAB6-456C-B5F2-3AA31D799E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD08A67-195F-431B-98A5-42B2966055DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658C7317-D50B-475A-9E0E-E68AECD49B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1270F454-8E05-413C-BAF4-35D062CA5803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.12-rc1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12837",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.12-rc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08003947-A4F1-44AC-84C6-9F8D097EB759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57710-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57710-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:enterprise_firewall:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B40C3E-2794-4310-97BC-D80069992C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:enterprise_firewall:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "593124AA-5952-4A7E-AB55-D5D851C5DE0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:velociraptor:model_1300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A2EDF6-46FF-4EF5-A37A-AAD06B9A51D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security_5300:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDDB133-A6C8-45B4-9988-3D3D2F3952E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security_5400:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B7CF42-F93E-48E6-BCD2-30B357F80DDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2004-06/0225.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.isc.sans.org/diary.php?date=2005-03-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/16423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2004-06/0225.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.isc.sans.org/diary.php?date=2005-03-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/16423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) email or (2) Jabber parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013446",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8E031C-CE1F-410F-8F32-B3E33719C498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "87F80FDC-7851-4EA8-BC7D-87B85C6BB93C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013460",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971038.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12831",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971038.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:office_infopath:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C62AC446-3233-43E0-A9D6-9D08F0319369"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.microsoft.com/kb/867443",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.microsoft.com/kb/867443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:citrix:metaframe_conferencing_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E8478B-A922-45DC-9EC1-184FD55ADEDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013457",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.citrix.com/kb/entry.jspa?externalID=CTX105574",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12821",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.citrix.com/kb/entry.jspa?externalID=CTX105574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:metaframe_password_manager:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940336B6-D0DB-421E-B68B-CEE97F2CD086"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1018077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.citrix.com/article/CTX105800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.citrix.com/kb/entry.jspa?entryID=5970&categoryID=254",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.citrix.com/kb/entry.jspa?externalID=CTX105762",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/24041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1018077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.citrix.com/article/CTX105800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.citrix.com/kb/entry.jspa?entryID=5970&categoryID=254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.citrix.com/kb/entry.jspa?externalID=CTX105762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/24041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thepoolclub:ipool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.81",
            "matchCriteriaId" : "598266C9-02CF-494B-95E5-40912AA40D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thepoolclub:isnooker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.8",
            "matchCriteriaId" : "F2FB4056-1BA2-4050-B7DF-B1B4289E8B9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013458",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013459",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mathopd:mathopd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "C6D3CA28-8693-4B4F-9E26-FB935E3A5ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mathopd:mathopd:1.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "083AD22B-7EB4-4339-8978-6B5A4867AFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14524",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/mathopd%40mathopd.org/msg00272.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/mathopd%40mathopd.org/msg00272.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lgames:ltris:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "1140D187-76CE-488A-B007-C730C59384FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lgames:ltris:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E522DB8-0608-4CC5-9EEC-721EB41405A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=85770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lgames.sourceforge.net/index.php?action=show_news&news_action=show_item&item_id=108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14635",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-24.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=85770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lgames.sourceforge.net/index.php?action=show_news&news_action=show_item&item_id=108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link library (DLL) with a long filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ollydbg:ollydbg:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C5CAD65-309B-43CA-BEB0-A1D0DE07F933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ollydbg:ollydbg:1.08b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12CD049-E694-4F6B-9EE5-2C120D7ED66C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ollydbg:ollydbg:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B3AA6-86EA-4CCC-9919-229D2FFBAD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ollydbg:ollydbg:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232FC92A-8541-4EEA-9CC1-D94D0A88C972"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111125734701262&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013478",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12850",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111125734701262&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allow remote attackers to obtain sensitive information via an invalid parameter to the convertorderbytrans function, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ciamos:ciamos:0.9.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7986E7-E5A1-4A86-9FC1-ECCDAAE47B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-xoops:e-xoops:1.05_rev3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9FD4BE-9A5C-4DA9-9A94-1626F67EE8FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52D52A0-BA4A-424F-8A13-566E55F637B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111117182417422&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111125588920928&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14641",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111117182417422&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111125588920928&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allows remote attackers to read arbitrary PHP files by specifying the pathname in the file parameter, as demonstrated by reading database configuration information from mainfile.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ciamos:ciamos:0.9.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7986E7-E5A1-4A86-9FC1-ECCDAAE47B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-xoops:e-xoops:1.05r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5477DFD-E91A-43A0-BF44-C2ED9CB9699C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52D52A0-BA4A-424F-8A13-566E55F637B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111117241923006&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111125645312693&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14641",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14648",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ihsteam.com/download/advisory/Exoops%20highlight%20hole.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/14890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12848",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111117241923006&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111125645312693&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ihsteam.com/download/advisory/Exoops%20highlight%20hole.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/14890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the (1) user_name or (2) user_pass parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D500EF4A-CF91-49B8-B4DF-B064D4501B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111125692513645&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111142752220155&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111142918711745&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111125692513645&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111142752220155&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111142918711745&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c, allow remote attackers who spoof a dyndns.org server to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xzabite:dyndnsupdate:0.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A563CA02-5E3F-427C-AB41-C7DDCF605D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=84659",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14663",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-27.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=84659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AFBC47-418A-4D82-A90B-536CA77314F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A850072A-4B20-425B-9760-1422C4FF41C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129301A0-1212-4172-9390-E30E841858AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09379A4C-5506-4B20-811E-0A16FD32B210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE69B27-332A-4FD6-8433-DB3714B87392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AAA07FB-0BD2-431A-9781-3AA2E24488B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/393695",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12845",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AFBC47-418A-4D82-A90B-536CA77314F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A850072A-4B20-425B-9760-1422C4FF41C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129301A0-1212-4172-9390-E30E841858AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09379A4C-5506-4B20-811E-0A16FD32B210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE69B27-332A-4FD6-8433-DB3714B87392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post_web_forum:0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AAA07FB-0BD2-431A-9781-3AA2E24488B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.php-post.co.uk/index.php?s=content&p=download",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php-post.co.uk/index.php?s=content&p=download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:belkin:belkin_54g_wireless_router:f5d7130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E0F7FF-344E-49A9-9A0B-55B26670CEFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/12846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Belkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:belkin:belkin_54g_wireless_router:f5d7130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E0F7FF-344E-49A9-9A0B-55B26670CEFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/12846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:belkin:54g_wireless_router:f5d7130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6A9A67-CC68-457D-B30D-ACD8876381F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/12846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "E2D500E0-A80D-4C9E-94F0-6B59AFEB186A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_01:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "BA17272A-FCA5-420D-8724-35F15190C1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_02:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "6D6E25CB-6C06-43D0-949E-BB3FEE886CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_03:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "B1DD35E9-9FED-49D3-8343-B9EF2C8A9C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_04:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "23F6CB66-75D5-472C-A6CD-8598376A065A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_05:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "641FA125-3979-4F12-9764-ADF06E243248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_06:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "9F5D9D33-F7D9-4A82-BA32-800A265B16CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jouko.iki.fi/adv/ws.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111117284323657&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14640",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57740-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200255-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000200.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-28.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_32_java2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12847",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jouko.iki.fi/adv/ws.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111117284323657&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57740-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200255-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000200.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-28.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_32_java2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . (dot)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icecast:icecast:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAD7F5E-7321-4E18-ACEF-CF1CB5B6E98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icecast:icecast:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F750F60-6FBA-4729-B81D-2367183E206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icecast:icecast:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25DB8A8-888B-4522-AC98-E8E2F554B9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icecast:icecast:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34C29EE-A414-448A-B773-DCECEBCB86F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icecast:icecast:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE97595-107F-4466-9E10-B183AD00F636"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14644",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013475",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393705",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12849",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via (1) a long test value in an xsl:when tag, (2) a long test value in an xsl:if tag, or (3) a long select value in an xsl:value-of tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icecast:icecast:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "409B1297-8C44-42D0-858C-AB20E601C366"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013475",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393705",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12849",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0839",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4041fa6464E1UuGu6zmketEYxm73KSyQ",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg64704.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9460",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4041fa6464E1UuGu6zmketEYxm73KSyQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg64704.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0840",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:19.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0706.  Reason: This candidate is a duplicate of CVE-2005-0706.  Notes: All CVE users should reference CVE-2005-0706 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via (1) the person parameter to people.php or (2) the Login field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfamily:phpmyfamily:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7B0171-3F57-4362-B869-11BD37E3EE6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111143649730845&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14642",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013493",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111143649730845&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) _i or (2) _c parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B098914-D522-426C-B54F-4844A2EEDC9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111151292704335&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111151292704335&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D0F7C4-902D-4186-8EFF-3876D6D6633E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111151651621097&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14680",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111151651621097&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:contivity:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37D59E92-E606-4C59-9D34-B921A00F096A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111151589203707&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013512",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nta-monitor.com/news/vpn-flaws/nortel/nortel-client/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111151589203707&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nta-monitor.com/news/vpn-flaws/nortel/nortel-client/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. (dot dot) in the attach_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:netwin:surgemail:2.2g3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914D7AFB-007F-48C1-98C0-13B38F2C2D75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111159967417903&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag=",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14658",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/surgemail22g3.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111159967417903&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/surgemail22g3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbitrary web script or HTML via the (1) message subject or (2) message header field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:surgemail:2.2g3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914D7AFB-007F-48C1-98C0-13B38F2C2D75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111159967417903&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag=",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14658",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/surgemail22g3.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111159967417903&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/surgemail22g3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code_ocean:ocean_ftp_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0D6FC0-F244-4C70-904B-678470B3F2C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14662",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12859",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote attackers to cause a denial of service via an empty UDP packet to the server, which cannot detect that a new packet has arrived using the socket ioctl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:4x4_off-road_adventure_iii:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9D16BB-016C-47B9-81A9-EAA303DD7626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:cabelas_big_game_hunter_2004_season:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17B27C9-C5C5-4AD7-9110-3A83B5B1BDA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:cabelas_big_game_hunter_2005:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F4CB9A-40EA-4F64-9211-52AD7D7DF657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:cabelas_dangerous_hunts:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A1146D-28CD-4FB8-ADD5-BB19013A41EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:cabelas_deer_hunt_2005_season:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB77E4BE-4228-40DD-8B48-98E7E90BAD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:revolution:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49815-88CA-4805-8977-078CC1BD8676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:secret_service_in_harms_way:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03F2367-29E2-4BFA-A4E7-3513CDF445D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:shadow_force_razor_unit:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1257B3A8-F505-4542-B604-E77E59D88877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:us_most_wanted_nowhere_to_hide:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E9C49D-B3BE-4F4F-BB2B-0A01CEFDC984"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/funlabsboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14638",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013492",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/funlabsboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote attackers to cause a denial of service (crash from invalid memory access) via a malformed join packet with values that cause the server to copy more memory than was actually provided in the packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:4x4_off-road_adventure_iii:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9D16BB-016C-47B9-81A9-EAA303DD7626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:cabelas_big_game_hunter_2004_season:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17B27C9-C5C5-4AD7-9110-3A83B5B1BDA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:cabelas_big_game_hunter_2005:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F4CB9A-40EA-4F64-9211-52AD7D7DF657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:cabelas_dangerous_hunts:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A1146D-28CD-4FB8-ADD5-BB19013A41EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:cabelas_deer_hunt_2005_season:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB77E4BE-4228-40DD-8B48-98E7E90BAD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:revolution:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49815-88CA-4805-8977-078CC1BD8676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:secret_service_in_harms_way:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03F2367-29E2-4BFA-A4E7-3513CDF445D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:shadow_force_razor_unit:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1257B3A8-F505-4542-B604-E77E59D88877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funlabs:us_most_wanted_nowhere_to_hide:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E9C49D-B3BE-4F4F-BB2B-0A01CEFDC984"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/funlabsboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14638",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013492",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/funlabsboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.6",
            "matchCriteriaId" : "7CDFC08B-6594-4136-B6DB-412BCEEBBBD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via certain file uploads or directory listings."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.6",
            "matchCriteriaId" : "7CDFC08B-6594-4136-B6DB-412BCEEBBBD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP protocol 4), as originally demonstrated using code in Python 2.3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/393956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12870",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive information via a direct request to (1) dbBlogMX.mdb for versions before 3.0, or (2) Blog.mdb for versions 3.0 and later.  NOTE: it was later reported that vector 2 also affects versions 6.0 through 9.0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:betaparticle:betaparticle_blog:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "651C6E49-E71C-4D05-992A-7B7BF32750F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:betaparticle:betaparticle_blog:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1327F5D1-1E11-48E9-8CCE-5C4874BE13F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0360.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14668",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12861",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0360.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct request to myFiles.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:betaparticle:betaparticle_blog:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "651C6E49-E71C-4D05-992A-7B7BF32750F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:betaparticle:betaparticle_blog:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1327F5D1-1E11-48E9-8CCE-5C4874BE13F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.betaparticle.com/template_permalink.asp?id=68",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0360.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14668",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12861",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.betaparticle.com/template_permalink.asp?id=68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0360.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to (1) entete.php, (2) profile_accueil.php, (3) profile_mdp.php, (4) profile_notify.php, (5) profile_options.php, (6) profile_perso.php, (7) profile_pm.php, or (8) readannonce.php, which leaks the full pathname in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coolforum:coolforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.1_beta",
            "matchCriteriaId" : "5157E15A-28FC-4219-95EE-1121349B9773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0358.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0358.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to (1) alert.php or (2) viewip.php, possibly due to a SQL injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coolforum:coolforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.1_beta",
            "matchCriteriaId" : "5157E15A-28FC-4219-95EE-1121349B9773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0358.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0358.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the img parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coolforum:coolforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8",
            "matchCriteriaId" : "7A99F5F9-690E-4063-A316-6B61E63B3955"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12852",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to entete.php or (2) the login parameter to register.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coolforum:coolforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8",
            "matchCriteriaId" : "7A99F5F9-690E-4063-A316-6B61E63B3955"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12852",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to (1) headlines.php or (2) news.php.  NOTE: some sources have reported the \"dir\" parameter as being affected; however, this is likely a cut-and-paste error from the wrong section of the original vulnerability report.  Also, the news.php version was later reported to be in 1.12 through 1.14."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:czaries_network:czarnews:1.13b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AF4192-01E8-4727-A5B9-2FE9FC35B7B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14670",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/14925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/14926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/14925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/14926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code via the dir parameter to (1) article.php, (2) authorall.php, (3) comment.php, (4) display.php, or (5) displayall.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_rusted_gate:trg_news:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8CA458-AEBB-431E-974A-E479626470D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14669",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in DeleGate before 8.11.1 may allow attackers to cause a denial of service or execute arbitrary code, possibly due to \"overflows on arrays.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.11.0",
            "matchCriteriaId" : "A7430078-8331-4A09-9547-590695A02A23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14649",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.delegate.org/mail-lists/delegate-en/2840",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.delegate.org/mail-lists/delegate-en/2840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter to (1) poc_loginform.php or (2) phpbb/poc.php, the poc_root_path parameter to (3) phpbb/poc.php, (4) phpnuke/ENGLISH_poc.php, (5) phpnuke/poc.php, or (6) yabbse/poc.php, or (7) the sourcedir parameter to yabbse/poc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpopenchat:phpopenchat:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89F50264-0D15-4545-ADBC-EA5661353D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpopenchat:phpopenchat:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C17EFDC-61DA-45EC-AFBD-ECFFA7B55CEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013434",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.albanianhaxorz.org/advisory/phpopenchaten.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/14807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/14808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/14809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/465237/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=7310",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.albanianhaxorz.org/advisory/phpopenchaten.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/14807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/14808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/14809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/465237/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=7310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via (1) the chatter parameter to regulars.php or (2) the chatter, chatter1, chatter2, chatter3, or chatter4 parameters to register.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpopenchat:phpopenchat:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8893B82A-AA71-45BA-8C50-7D8085C407FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpopenchat:phpopenchat:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C17EFDC-61DA-45EC-AFBD-ECFFA7B55CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpopenchat:phpopenchat:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59390560-5558-434D-ACCE-68EDA977B5CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0331.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0331.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:securecomputing:samsung_adsl_modem:smdk8947v1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F449DD23-F6B8-4947-B494-820170A73CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zone-h.org/en/advisories/read/id=7339/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zone-h.org/en/advisories/read/id=7339/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the (1) root, (2) admin, or (3) user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:securecomputing:samsung_adsl_modem:smdk8947v1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F449DD23-F6B8-4947-B494-820170A73CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zone-h.org/en/advisories/read/id=7339/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zone-h.org/en/advisories/read/id=7339/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cdrtools:cdrecord:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "6E56787A-BD70-4AB8-9796-24F14200CBD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=291376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/100-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=291376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/100-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bosanova:launcher400:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174F4C2C-6014-4A6F-8946-55277CF1BDF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_access:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6475C52-EDB1-40C7-BE19-B5B33B732CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mochasoft:tn5250:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE46E179-2768-41BF-94EA-34411CB3FF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerterm:interconnect:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D210C4-4843-4CF4-B635-1BEA76531D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111160242803070&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.venera.com/downloads/Attack_5250_terminal_emulations_from_iSeries_server.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111160242803070&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.venera.com/downloads/Attack_5250_terminal_emulations_from_iSeries_server.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.inc.php, (3) class.FreeBSD.inc.php, (4) class.Darwin.inc.php, (5) XPath.class.php, (6) system_header.php, or (7) system_footer.php, which reveal the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsysinfo:phpsysinfo:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3AC363-8AE4-493D-8FDB-A8CBE03AD389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111161017209422&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14690/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111161017209422&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14690/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) sensor_program parameter to index.php, (2) text[language], (3) text[template], or (4) hide_picklist parameter to system_footer.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsysinfo:phpsysinfo:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3AC363-8AE4-493D-8FDB-A8CBE03AD389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=301118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111161017209422&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14690/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=301118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111161017209422&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14690/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4951A567-0C73-4C41-A694-B50293545936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111168190630576&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14659",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111168190630576&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the start parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4951A567-0C73-4C41-A694-B50293545936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111168190630576&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14659",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013554",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111168190630576&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject arbitrary web script or HTML via the (1) desname or (2) repprod parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:10g_reports_server:9.0.4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C58A4F-F606-4B7E-8524-517F265D6034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111168323804203&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12892",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111168323804203&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerulean_studios:trillian:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256C630F-3F51-4825-A7AB-EE20F5B6EB66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111171416802350&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14689",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111171416802350&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerulean_studios:trillian:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256C630F-3F51-4825-A7AB-EE20F5B6EB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerulean_studios:trillian:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189B6C6-A516-4C23-A67F-F1505D977DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerulean_studios:trillian:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D922E4FB-BAD1-45B6-B45D-4B7A3B338EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111171416802350&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14689",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111171416802350&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnsmasq:dnsmasq:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9054BC03-902A-4569-89FE-B765181D6AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnsmasq:dnsmasq:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDF92F86-8083-4EF3-A42E-B05173059E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnsmasq:dnsmasq:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D53AAC2-6A09-4AFD-A24D-EF4F78E6F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnsmasq:dnsmasq:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB01CC8D-650B-4EB4-9B35-E471B7728EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnsmasq:dnsmasq:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD3B486-1D9E-482E-9BFF-BE218ECA806F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnsmasq:dnsmasq:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FB2501-8A36-4659-8A44-FDE030D77B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnsmasq:dnsmasq:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669F9839-B687-43C1-9744-9E2873944BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14691",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12897",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.21",
            "matchCriteriaId" : "101437BF-EF52-4F04-918F-229CB7CEDC08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14691",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12897",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19826",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/14691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to execute arbitrary PHP code via a URL in the act parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vortex_portal:vortex_portal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BCBEB0E-DECB-4314-B757-61D5473BB698"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14707",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/14958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/14959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/14958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/14959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "content.php in Vortex Portal allows remote attackers to obtain sensitive information via an invalid act parameter, which leaks the full pathname in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vortex_portal:vortex_portal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2C0F73-0164-474A-A739-158C34840CB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userpw parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birdblog:birdblog:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE95DA3-47CF-4756-935E-8F4A6CA995EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birdblog:birdblog:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C8F90-AA95-4466-8A2B-6D4E3A9B912F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://birdblog.sourceforge.net/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/birdblog/birdblog/admin/admincore.php?r1=1.4&r2=1.5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14676",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013548",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12880",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://birdblog.sourceforge.net/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/birdblog/birdblog/admin/admincore.php?r1=1.4&r2=1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digitalhive:digitalhive:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71F066A-A219-423C-A540-348201F06EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) \"Send To\" fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6305AB1C-E801-4EF8-8783-01714E6F6D30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "XMB versions 1.9.8 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2021-04-23T12:35:31.083"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC7F0E6-7DA6-41E3-9F73-4FFF699195C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA35A95-B8FD-4ED8-95E0-409E50BF13AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4066556-F0CE-4E8B-B88D-C3BA03D98D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25D5B0-082C-41AF-A3BA-5B35E54BCCAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93242B-85AD-451E-BC0A-D8561C292430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52954D4B-72E9-434C-991A-7B3D6C71183C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B42A0B9-628F-4173-8F94-3EACDE1D57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A127C8-803E-44A5-BB30-09C351CF3ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABB6806-5DC0-4146-89FC-05D079F0CFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77C15A2-9A9D-4C3F-8A62-18C54941B79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C79F9F-FE3C-4CC6-88A9-6EFB27724CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_alpha_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8C2DB4-06C3-4400-B0F3-2025FD829788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pdr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053B554A-AC3D-496F-9E3D-D357D14B87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B7742A-2BD1-4119-8850-5BCB35E9F7C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4CBB17-B8EB-4A60-B8F5-34A2816373FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/12888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B2609F-D8A8-498A-9364-ACAC3C8758EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14688",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013559",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=315160",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=315160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dream4:koobi_cms:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666B0EE6-64CB-4DC5-8EDB-4B017032A959"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14696",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013558",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0891",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.4",
            "matchCriteriaId" : "01C87ADC-64AC-48FD-AA1A-5B29B6788D17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000958",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17657",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:214",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-343.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-344.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419771/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9710",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-343.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-344.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419771/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smail:smail:3.2.0.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F25741-B5FD-4D18-8426-39B40D22BCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111177045217717&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111177045217717&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on (1) temporary files in the openmosixcollector directory or (2) nodes.tmp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmosixview:openmosixview:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF2617-D68D-41FD-9AC2-04F037C0E087"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111176899423078&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12902",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111176899423078&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netcomm:nb1300:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E085D59-A6C6-4E69-BB56-A9D135B16ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netcomm:nb1300:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1ABD222-3E98-4FF8-AE75-DF5D26FF54FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111177093020587&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111177093020587&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to inject arbitrary web script or HTML via the (1) subcat, (2) page, or (3) subsubcat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD48843-99B9-476A-9172-1FCBABE4424F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111176904423360&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14692",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111176904423360&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magicscripts:e-store_kit-2:paypal:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D7FEA4-4A20-4F9A-B990-BF855B63FE31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111186424600509&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111186424600509&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:os_400:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19BADED2-F3E4-45D8-A4B6-F3F41654C8B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111186209318029&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111186209318029&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via the (1) catname, (2) markname, (3) comment, or (4) category parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nukebookmarks:nukebookmarks:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB7507C-6967-4B3C-AC0A-CC5B774DD781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111186145609320&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nukebookmarks.sourceforge.net/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zone-h.org/advisories/read/id=7356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111186145609320&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://nukebookmarks.sourceforge.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zone-h.org/advisories/read/id=7356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nukebookmarks:nukebookmarks:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB7507C-6967-4B3C-AC0A-CC5B774DD781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111186145609320&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nukebookmarks.sourceforge.net/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zone-h.org/advisories/read/id=7356",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111186145609320&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://nukebookmarks.sourceforge.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zone-h.org/advisories/read/id=7356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application crash) via a JPEG file with crafted Huffman Table (marker DHT) data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime_pictureviewer:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A2B19E-A977-4E97-816F-AF001AAAA555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111186277521713&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12905",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111186277521713&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Desktop in Windows XP SP1 does not verify the \"Force shutdown from a remote system\" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A74985B6-BCA5-49E3-878B-77D7FA43070C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.microsoft.com/kb/889323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.microsoft.com/kb/889323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2_search_text property."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxthon:maxthon:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458C16FC-674F-4C19-8C07-35C4D0623D9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.maxthon.com/forum/index.php?showtopic=18207",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111175236620942&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.raffon.net/advisories/maxthon/searchbarid.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forum.maxthon.com/forum/index.php?showtopic=18207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111175236620942&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.raffon.net/advisories/maxthon/searchbarid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:instance_four:tincat:release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5C7A69-C2D3-4671-84B9-A2EE5628CEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sacred:sacred:1.8.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38C2699C-286F-45D4-94AA-01E6723F7411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubi_soft:the_settlersheritage_of_kings:1.0_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6181189E-B531-4872-BBFB-B53881CF3DBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/tincat2bof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394404",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12912",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/tincat2bof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to category.php, (2) the id parameter to item.php, (3) the lang parameter to index.php, (4) the searchQuery parameter to search_result.php, (5) or the searchTopCategoryID parameter to search_result.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:valdersoft:shopping_cart:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C315C6-34E2-4FDF-8129-909800E39ECE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013565",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in shoutact.php for TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tkais_shoutbox:tkais_shoutbox:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E971A043-DEE7-4B4B-91C3-E941F0E559A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111202260908735&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Mar/0900.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111202260908735&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Mar/0900.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in exoops allow remote attackers to inject arbitrary web script or HTML via (1) the sortdays parameter to viewforum.php or (2) the viewcat parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-xoops:e-xoops:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B496E5E-0603-4B7A-A6E5-82C44EFD1BF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013566",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D805C7-D9B9-4E3A-8A6A-0F4AD53AF0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A5DCDA-32CC-4675-A1C1-E07AEFEE1491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31588789-D836-44F4-AD3C-26A4E071B451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D8E66D-8726-460C-A60D-6F2E534AA507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCDF3E7-441D-48E2-BA45-41E11AEB7458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD88BE2-82D0-4122-95F3-B3DB85F5A31E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://news.php.net/php.smarty.dev/2673",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14729/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-35.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.php.net/php.smarty.dev/2673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14729/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200503-35.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmasters-debutants:wd_guestbook:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C84C272-9EE5-4D7F-832F-2A25AF793329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013570",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0916",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the io_queue_init function but exits without running io_queue_release, which causes exit_aio and is_hugepage_only_range to fail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://groups-beta.google.com/group/linux.kernel/browse_thread/thread/13b43bd5783842f6/7ce3c5a514a497ab?q=io_queue_init&rnum=3#7ce3c5a514a497ab",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404248c8c0es30_4YVdwa6vteKi7h_nw",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12987",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://groups-beta.google.com/group/linux.kernel/browse_thread/thread/13b43bd5783842f6/7ce3c5a514a497ab?q=io_queue_init&rnum=3#7ce3c5a514a497ab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404248c8c0es30_4YVdwa6vteKi7h_nw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index_header.php for EncapsBB 0.3.2_fixed, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the root parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdev:encapsbb:0.3.2_fixed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC2616C-A3B1-4718-950F-A15AF9595AA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013569",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:bugtracker.net:bugtracker.net:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FB1A60-58E7-40F8-A1C8-EDC7F69FFDD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=315830",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12925",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=315830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_connector:2002:*:ibm_lotus_domino:*:*:*:*:*",
            "matchCriteriaId" : "C205B357-BFC1-453B-8024-4C752E17950F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/896093",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.microsoft.com/kb/896093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (system hang or crash) by triggering a scan of a certain file type."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2.1:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "A9415109-C554-40F6-851E-CC016951BDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11477B6E-C4C5-4664-91A7-D253077981F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "09CA1AC8-E273-44C1-9D1C-19542EB57433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C7CD61-A47B-4521-8C6F-4BB1F4C95614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2004_professional:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EEBC3A-58D9-4107-9561-106A9F3B0C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2005_premier:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E481D2-87F3-4912-BB87-5168C6A1BE23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14741",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/146020",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/146020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2.1:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "A9415109-C554-40F6-851E-CC016951BDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11477B6E-C4C5-4664-91A7-D253077981F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "09CA1AC8-E273-44C1-9D1C-19542EB57433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C7CD61-A47B-4521-8C6F-4BB1F4C95614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2004_professional:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EEBC3A-58D9-4107-9561-106A9F3B0C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2005_premier:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E481D2-87F3-4912-BB87-5168C6A1BE23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/713620",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/713620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:uapplication:ublog_reload:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D43D8CB-16E3-4A5F-875B-13A1DAA601EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:uapplication:ublog_reload:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0438187-FFDF-47B7-B2E5-0A5E0B104B15"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:uapplication:ublog_reload:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3BECAE-CFD1-4806-8693-A6274DDBB4AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111214393101387&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14725",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013603",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.persianhacker.net/news/news-2945.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111214393101387&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.persianhacker.net/news/news-2945.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attachments with MIME-encoded file names."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7919D2-ACA7-4BFF-8D86-C63F76C09B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAAF875-EBB8-4B6C-99CD-503AFAD5633B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E0580E-1F1C-4FF1-80AB-4151CFF6C880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48AA3783-5007-4869-A699-36E1888C16F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49731BBA-CC20-4DA2-9A0B-50E4F3CC0A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49389889-7C64-42FA-A212-6B892C011441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3818AFD5-5667-490A-A6F6-7DC525D56DCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0559156E-5339-4344-AE50-ECB5604E9A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F67B0E-24D6-4B37-93B0-177A1F4D7102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE43A4BB-E5FC-41CF-A4F7-A83FBB3AFD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81DE243-D5C4-4EF3-B29D-7BBACE42F5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30CA4A62-79A8-4739-A76E-3DA3688C107C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DDA2A6C-76B4-4323-9AD3-8C30A9013EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2609F068-6A92-483B-A673-4A4F59EC06C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sylpheed.good-day.net/changelog.html.en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sylpheed.good-day.net/changelog.html.en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79090F47-9D7C-42F4-A64E-6633A3CF73F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8C727E-412A-4044-8FE9-63C4FD8D4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B45A79-F173-44D6-8737-22DDE3877AE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14716",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=316038",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=195",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=316038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) password, (3) ppuser, (4) sort, or (5) si parameters to showgallery.php, the (6) ppuser, (7) sort, or (8) si parameters to showmembers.php, or (9) the photo parameter to slideshow.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAE0F60-FEA5-4A25-A4CC-E792541F573C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111205342909640&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14742",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013581",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111205342909640&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1) the sl parameter to showmembers.php or (2) the photo parameter to showphoto.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604A06DE-F946-42A0-8629-B87E7D6E9A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111205342909640&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111213719017716&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111205342909640&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111213719017716&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message parameter to message.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatness:chatness:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "A7678105-3705-4C2B-A443-8F3D24907CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatness:chatness:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E972CF3-83E5-483C-B3A9-12FEB52CF8C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.persianhacker.net/news/news-2946.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12929",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.persianhacker.net/news/news-2946.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the \"forgotten password\" feature, or (3) the domain name in a package order."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FDCCE7-B76F-42EA-BD82-11D35AAED66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84AC0DD-109D-4E44-9673-668238545F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FECE4E8-3258-48E7-8F3A-F564512442CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12917",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and earlier allows remote attackers to read arbitrary files via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "AB4F3251-3899-4443-842A-006E0C4A56FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84AC0DD-109D-4E44-9673-668238545F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FECE4E8-3258-48E7-8F3A-F564512442CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12917",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 allow remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wackowiki:wackowiki:r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9645E223-03D0-44A3-9E41-D4CA8FE969FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14720",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wackowiki.com/WackoDownload/InEnglish#h4828-4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wackowiki.com/WackoDownload/InEnglish#h4828-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpages parameter to pages.php or the (2) id2 parameter to products1.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esmi:paypal_storefront:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F00948-8F08-4BA8-A2E1-3EAC5D50E056"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111221890614271&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14711",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013563",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hackerscenter.com/Archive/view.asp?id=1774",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12903",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111221890614271&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hackerscenter.com/Archive/view.asp?id=1774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esmi:paypal_storefront:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F00948-8F08-4BA8-A2E1-3EAC5D50E056"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111221890614271&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013563",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hackerscenter.com/Archive/view.asp?id=1774",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12904",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111221890614271&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hackerscenter.com/Archive/view.asp?id=1774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uapplication:ublog_reload:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D43D8CB-16E3-4A5F-875B-13A1DAA601EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uapplication:ublog_reload:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "118496EF-54E6-41BF-93EB-C54EF190E0AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uapplication:ublog_reload:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B695E9-F0F4-4C11-B484-069DF5BD70E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uapplication:ublog_reload:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0438187-FFDF-47B7-B2E5-0A5E0B104B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uapplication:ublog_reload:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3BECAE-CFD1-4806-8693-A6274DDBB4AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111214393101387&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.persianhacker.net/news/news-2945.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111214393101387&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.persianhacker.net/news/news-2945.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:20.863",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0490.  Reason: This candidate was inadvertently referenced in a vendor advisory due to a typo.  Notes: All CVE users should reference CVE-2005-0490 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E887F99-5A89-432D-986C-3E49E5DFACBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D2906A-69FE-4A13-B474-A84725E60220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EA7C32-30D8-4367-B2F6-6394408E63B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A063FBBE-4D34-45D0-9AC8-66CFC64D22EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0436BF-D4B6-4437-A509-FEBB779E4B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24B3240-5110-4810-A37A-C9A0B4A1F856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14968CA-8FA9-4E71-9C0C-3ABFBE7920C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-13.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openoffice.org/issues/show_bug.cgi?id=46388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-375.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openoffice.org/issues/show_bug.cgi?id=46388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-375.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "2CDEB3AA-AC0F-4D2E-B376-B6E0B6D1125B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "351C0856-F606-4984-88D6-80441103AD67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "DFA1A00E-3623-4DC5-B5A9-C43ACEB361AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "B51FF66F-2E1B-4B67-B7F1-1E320461679A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:*",
            "matchCriteriaId" : "22FAE724-0C7E-4B22-B968-38A5FC6CF549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "D5C70B3D-F7FD-40D2-A92E-FC158BBCF9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "E8D15B30-66BE-4299-9B49-F96E5B675FF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "9FC688E2-ACE7-4AB9-A92D-C5C13F03D41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:*",
            "matchCriteriaId" : "B8FD8D4B-C375-400A-A139-99CB4CBC886F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "D1EF8909-5238-4FED-A5B0-4C830A15030B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "98ABCB89-3FDF-495C-B4C2-D39D063C132C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "11EB359A-2FCA-4E93-A6D2-5134A4B81312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:*",
            "matchCriteriaId" : "A892D682-CC14-4EAA-A394-52F104C33D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "CB19AA67-3F78-4A01-BA31-76F681E81DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "1F780727-2552-4275-BA67-87A18E7C42B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "D267399F-B2D4-46FB-943E-61A4D660BFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:*",
            "matchCriteriaId" : "6BA8947D-330C-4F65-BBD0-CBB2EF1C0058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "D6964976-4D18-4580-A793-9D26FFDD8804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "BC529C3A-16E7-4B90-A7AD-93E99F4F79DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "B4E9EE64-8E9C-4004-9C5B-A67AFE831151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:*",
            "matchCriteriaId" : "ACC81C45-21C0-454F-916E-476002E4EF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:*",
            "matchCriteriaId" : "4021B54C-6C0B-46E0-BCE0-2BA7357488DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "AB43D0DC-62DB-4D33-B84E-2227964A1A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A1A11319-C5D5-4947-B9CE-34F952453FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:*",
            "matchCriteriaId" : "47C266AB-6862-4FE5-B801-7A112F620C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:*",
            "matchCriteriaId" : "36C8D9D2-4DAC-4EF0-9AB5-92296CE82543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:*",
            "matchCriteriaId" : "CB5AA123-3426-4B7A-A790-F89DC8BF9AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42709C69-248F-4054-95C6-4DBDCBB92413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392C16A9-1F35-4459-A364-D047A3D27016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111272918117194&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13632",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/sybase-ase.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393851",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12080",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sybase.com/detail?id=1034520",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sybase.com/detail?id=1034752",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111272918117194&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/sybase-ase.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/393851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sybase.com/detail?id=1034520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sybase.com/detail?id=1034752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:jet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.8618.0",
            "matchCriteriaId" : "4FB3F6AC-98DF-484D-BDAE-3FD34872DAE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.securiteam.com/?p=535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111231465920199&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hexview.com/docs/20050331-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/176380",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442446/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442610/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.securiteam.com/?p=535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111231465920199&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hexview.com/docs/20050331-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/176380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442446/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442610/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTML via onmouseover or onload events in (1) img, (2) link, or (3) mail tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC3EA02-502C-4FEE-A33C-F74E5C5F2F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111214069029812&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14744/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013584",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111214069029812&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14744/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and earlier allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FDCCE7-B76F-42EA-BD82-11D35AAED66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84AC0DD-109D-4E44-9673-668238545F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FECE4E8-3258-48E7-8F3A-F564512442CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111214190111520&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111214190111520&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iatek:portalapp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374DCC52-41E7-414F-B1B5-4AE6297F9D99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://icis.digitalparadox.org/~dcrab/portalapp.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111213291118273&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013591",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12936",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://icis.digitalparadox.org/~dcrab/portalapp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111213291118273&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iatek:portalapp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374DCC52-41E7-414F-B1B5-4AE6297F9D99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://icis.digitalparadox.org/~dcrab/portalapp.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111213291118273&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013591",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12936",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://icis.digitalparadox.org/~dcrab/portalapp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111213291118273&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:21.037",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: this candidate was created as a result of an analysis error for a researcher advisory for an issue that already existed.  It stated an incorrect parameter, which was not part of the vulnerability at all. Notes: CVE users should not reference this candidate at all"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EB588E-FC2B-4E10-86F5-33C2758BEED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/advisories/pafdb.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111221940107161&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448017/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://digitalparadox.org/advisories/pafdb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111221940107161&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448017/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852E705-516A-4A5E-8095-93DCF8DB15DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:0.9.5_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124E0E58-A7B3-4B3E-BEAD-76073A75A0DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:0.9.5_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2C4072-C19D-45E0-9662-030F39BD2295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:0.9.5_c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1466AE9-B7E0-449C-BD25-54009833ED93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:0.9.5_d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC309293-C48A-4931-9A81-359966C6BB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:0.9_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3992967-645A-45E1-979E-6866B50AA642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:0.9_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980AE5B2-11A7-4672-B221-DF660F20667F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:0.9_c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC33019-390A-428F-B119-139CA5949AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10B3BF9-BE42-468D-89E8-8D4A5FEDC734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F00B1-D48B-40A6-872F-959598D7E6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5DBC5B-C1C4-487E-B40D-8925FDA13D1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111229375217633&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-730",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-474.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456430/30/8730/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/26444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-319A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111229375217633&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-474.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456430/30/8730/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/26444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-319A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Windows Metafile (WMF) file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0802EC98-E220-46F6-84CF-7FA4E3696887"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111231106513788&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5CP081FFFY.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/9892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/15507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111231106513788&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5CP081FFFY.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/9892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/15507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in InterAKT MX Shop 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id_ctg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interakt:mx_shop:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0652B7A-4F49-497D-9DE9-2708ED6EBAC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://icis.digitalparadox.org/~dcrab/mxmk.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111230101127767&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14793",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://icis.digitalparadox.org/~dcrab/mxmk.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111230101127767&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in InterAKT MX Kart 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_man parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interakt:mx_kart:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7992C065-EEC6-47C1-9914-A4AEC4AD8525"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://icis.digitalparadox.org/~dcrab/mxmk.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111230101127767&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://icis.digitalparadox.org/~dcrab/mxmk.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111230101127767&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yepyep:mtftpd:0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E1C6FD-3F8D-46D8-A7BA-A21053A3F137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yepyep:mtftpd:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9829BCE3-C617-4AB4-B616-B38EC9D9CD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yepyep:mtftpd:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2459973-49FA-4EF9-B6D7-C022584951F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://unl0ck.org/files/papers/mtftpd.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5KP0W0AF5K.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12947",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.tripbit.org/advisories/TA-040305.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://unl0ck.org/files/papers/mtftpd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5KP0W0AF5K.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.tripbit.org/advisories/TA-040305.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a long path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yepyep:mtftpd:0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E1C6FD-3F8D-46D8-A7BA-A21053A3F137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yepyep:mtftpd:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9829BCE3-C617-4AB4-B616-B38EC9D9CD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yepyep:mtftpd:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2459973-49FA-4EF9-B6D7-C022584951F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/12947",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.tripbit.org/advisories/TA-040305.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.tripbit.org/advisories/TA-040305.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service (memory exhaustion or system crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA160D4-5CAB-44E7-880A-59DD98FEAD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013611",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#sack",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openbsd.org/errata35.html#sack",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#sack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openbsd.org/errata35.html#sack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAEAAF02-1B61-421A-887C-107B7234262B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.49&r2=1.515.2.93&ty=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000176.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14730",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.49&r2=1.515.2.93&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL commands via the (1) crn parameter in a show action or (2) rn parameter in a show_detail action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighthouse_development:squirrelcart:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F14FA5-D431-48A8-935E-F3E7CCC1F248"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/advisories/sqc.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14770",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12944",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://digitalparadox.org/advisories/sqc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error in the Toshiba ACPI BIOS 1.6 causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, which prevents the system from booting even though the MBR is not malformed.  NOTE: it has been debated as to whether or not this issue poses a security vulnerability, since administrative privileges would be required, and other DoS attacks are possible with such privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:acpi_flash_bios:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B592603A-DABD-4B59-95E1-78B2C789EF67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111214319914810&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111229708208629&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111229803502643&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111214319914810&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111229708208629&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111229803502643&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66920-4A4F-4335-B052-44E1F92F585B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658F01AE-C211-473C-BF70-E524E4310F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F769FAE-CC31-4C8B-B785-1423DFC2BA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7202BC-AD0B-41B1-B7C1-7665498C967B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E60288-F9E6-4E7C-9B48-352277A34C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19EA5978-64EC-4B54-BC06-20324DB0E6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B9D00A-6598-4BC0-B058-7598657274D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C076C7D-D833-42CF-9FEF-F3654013AB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FEB6DB5-851E-4EDF-AC1C-CBA502C6D5A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14717",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kerio.com/security_advisory.html#0503",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12946",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kerio.com/security_advisory.html#0503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0965",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EFC670-8B21-4ABC-B656-989FEF3FE7D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=13",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111238715307356&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14815",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:071",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-365.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/12999",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11292",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111238715307356&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-365.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0966",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EFC670-8B21-4ABC-B656-989FEF3FE7D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=14",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111238715307356&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14815",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=235&release_id=317750",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:071",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-365.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13003",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111238715307356&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=235&release_id=317750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-365.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0967",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EFC670-8B21-4ABC-B656-989FEF3FE7D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gaim.sourceforge.net/security/?id=15",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14815",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013645",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&aid=1172115&group_id=235&atid=100235",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:071",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-365.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9657",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://gaim.sourceforge.net/security/?id=15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&aid=1172115&group_id=235&atid=100235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-365.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Computer Associates (CA) eTrust Intrusion Detection 3.0 allows remote attackers to cause a denial of service via large size values that are not properly validated before calling the CPImportKey function in the Crypto API."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DDF2EE3-753B-4C7E-84EF-144FA5986A21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=223&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=223&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service (CPU consumption) via a crafted mach-o header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opendarwin:darwin_kernel:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768379E5-5C64-4564-8DCD-DB177DA246F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://felinemenace.org/advisories/macosx.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616533903671&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13902",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013735",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-185.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12314",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://felinemenace.org/advisories/macosx.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110616533903671&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1012941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-185.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hmdt:shiira:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF8DEAB-3C52-4197-BC87-213EF7D45E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omnigroup:omniweb:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BBAD3B-6388-4356-BEEE-32D8F69D5446"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://remahl.se/david/vuln/001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://remahl.se/david/vuln/001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40420551fbRlv9-QG6Gw9Lw_bKVfPSsg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2005/2/5/111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/103-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40420551fbRlv9-QG6Gw9Lw_bKVfPSsg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2005/2/5/111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/103-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivt:bluesoleil:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DECF4E-10E6-4EE2-A1FE-16E68046D5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111238511206503&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14790/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0401a%5D.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12961",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111238511206503&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14790/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0401a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using a long SysName field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmanage:rumba:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8467E0E-3B2C-4535-9363-96901B9D7E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmanage:rumba:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B20AF43-2906-42CF-9B97-E312E34F49E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111238364916500&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111238364916500&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:epay:2.0:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "08F2B394-3623-4ADB-A51A-99702B31DA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111247198021626&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14802",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12973",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111247198021626&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) payment or (2) send parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:epay:2.0:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "08F2B394-3623-4ADB-A51A-99702B31DA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111247198021626&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14802",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12974",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111247198021626&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Yet Another Forum.net 0.9.9 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, or (3) Subject field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yet_another_forum.net:yet_another_forum.net:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35107098-B31A-4043-96AE-AD5ADB9680E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111247338301262&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111247338301262&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activision:call_of_duty:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56174554-305C-44B2-84AC-1FBFB2630806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activision:call_of_duty:1.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E73821EF-6B2C-47DF-8937-FC4AD438793C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activision:call_of_duty_united_offensive:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794E93AF-7815-4C7B-B1F5-B24C6C8BFA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activision:call_of_duty_united_offensive:1.51b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5125394-3D87-449F-8116-1F2F13D0F4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activision:return_to_castle_wolfenstein:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB8B91F-5F9F-4A10-BD6E-8A6320113163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activision:return_to_castle_wolfenstein:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310CA9A4-4C58-47F0-B8B7-8602B2E4B290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_arena:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA52F4D3-901C-441C-BFA2-1AF1BD06B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_arena:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADA6FA7-6916-4240-90B7-5FB045F61F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_arena:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12138C9F-1DE9-48D9-AA12-5A621558F825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_arena_server:1.29f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47BF98EF-3228-4FF5-B770-C1A8BEC3C0A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_arena_server:1.29g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEA3ACD-EC79-4AEC-B056-03F72056DE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AE0171-46F1-4137-99BE-4B825A403D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:wolfenstein_enemy_territory:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2CB0EE-8042-4157-BB4B-A4A07BA79FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:wolfenstein_enemy_territory:2.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDC1195-FE8C-4251-91BE-B1B84A785C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucasarts:star_wars_jedi_knight_ii_jedi_outcast:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736B09BA-E0C4-4179-84B2-F4F8F2FC4B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucasarts:star_wars_jedi_knight_jedi_academy:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E760893E-36FA-486D-872C-7C8E4B4C0A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA57E8-B70F-40F6-83F4-A19A41A55952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB13EB2B-42EC-45ED-948B-7B2617C1B82C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/q3msgboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111246796918067&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/q3msgboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111246796918067&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the G_Printf function in Star Wars Jedi Knight: Jedi Academy 1.011 and earlier allows remote attackers to execute arbitrary code via a long message using commands such as (1) say and (2) tell."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucasarts:star_wars_jedi_knight_jedi_academy:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E760893E-36FA-486D-872C-7C8E4B4C0A34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/jamsgbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111246855213653&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14809",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12977",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/jamsgbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111246855213653&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted.  NOTE: IBM has reported that it is unable to replicate this issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_server:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9617F71-F85C-4C75-8AA8-F21235BF289A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_server:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E3A87A-3086-46AA-A266-57638DEED419"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://news.zdnet.co.uk/software/applications/0%2C39020384%2C39194293%2C00.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14858",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21202446",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=224&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.zdnet.co.uk/software/applications/0%2C39020384%2C39194293%2C00.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21202446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=224&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to obtain the links of a nick."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE64AEF-76B8-4875-AE18-47A6C079B6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC925F95-38B0-4B02-B744-987B43D5008F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE5E2C4-26BE-4146-AEFE-AAB1C31953FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E8D1AD-3224-4EF9-957D-7DDE2B189B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5183FE-1577-4CD1-9D73-D3F4C4A1A570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47565B4C-A4D3-4F5D-9E9F-7CA0339069D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05B2C86-B3D5-46C5-B202-5AB5F24F72B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF812B0-AFE3-4EB9-B569-8BD4ABB9D149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5725381-3C5C-44A7-8359-19F7E01E7E06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17045973-A0DE-40A1-A0A8-C748FBCC994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49A0531-B674-4135-A9AB-EEC636DD3027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711003C2-7C35-44E5-A811-0676B5439EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628F177-5D15-48C2-95D4-B34773E1A555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51B5ED-019D-4E54-9608-893BA6EF20C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F949B5-DC9D-493D-8E39-1BD528D32151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11591AFC-61C7-492E-ABD0-9F269593DD34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E99CF33-CE8D-4964-84C3-D47F46C327F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4B5A13-63FC-472F-8075-26E575E5BC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3925173-240C-47D2-8332-D5B1AFF6953E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56887C5A-8CAD-47F5-8DFE-90336A4DF258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB2314C-7AE0-4EA8-A390-3C6CDA26FD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D857AD-2045-4B88-B67B-1BD5975CD96E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E022FE2-F778-498D-8D90-76410A662355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6BE139-584B-45BE-B0FB-4BFE4A478983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243546FE-8A3E-4E68-8444-71646129E82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32CF21A-5CA3-465B-B9BE-A660074FA868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE02C50F-C186-4566-BA08-C8F7F5E84E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4FB36E5-83E9-4F97-8FBF-4DCA73BFFC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F900AC94-0FE3-48ED-93D3-EFADE0250F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFB73F7-767A-4940-8B0C-A469CBBDC653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C34660-4D02-4BA6-B2FF-3DED6DDEDF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0ED8974-BAA5-40D7-9965-56C3B17B9325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002D1B17-8149-4817-A0B3-0A952C06017A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9574F571-4D52-4E9C-8AE8-AC082BCC615D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279B50B1-7096-4C77-A502-2D87FA4B82C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1AC2883-FF7D-406B-ACBD-3A1D6AB92CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3536AF41-ACBC-4977-8810-BA6AA357A4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CC0E871-4440-4071-8617-7DD887E9047A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9162B9-FC53-477F-90DB-13BFE0E3435D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C37FDAC-3D85-489F-891B-C71A2F34405B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A10DC3A-E6C3-4D33-BCA1-6B8DCCB24DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B851AE6A-DAE3-48E9-A713-3002FE9A0DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2104AE-4018-4031-A971-547FFBD43F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E94ABE-9AA8-4E8F-AF0F-9E013492C3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFFAE46-31DF-4F03-A6FA-9760140FE3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBB4309-5234-4CFC-B336-4C55F37786A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551CD25A-12D1-473E-9245-BCD7E5E5EE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "530DB539-8691-4818-9420-965662FAEF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C421A1-490A-412F-933A-7646AE7AF548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E742DC-CBBB-4CCB-9D3E-2F99C51A5ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013622",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ircservices.esper.net/Changes.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ircservices.esper.net/Changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gzip:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D50385A-1D5D-4517-B5FA-1BB60BA4C484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gzip:1.2.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752BDD31-53A2-4246-8E95-77694548DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gzip:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "079F39E2-69BF-47AC-87CF-A47D37EA27F8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A585A1-FF82-418F-90F8-072458DB7816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F7EB61-55A5-4776-B0E7-3508920A6CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "A442DE97-4485-4D95-B95D-58947585E455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE31DFF8-06AB-489D-A0C5-509C090283B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8A6564-129A-4555-A5ED-6F65C56AE7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "237174A4-E030-4A0B-AD0B-5C463603EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF49BF03-C25E-4737-84D5-892895C86C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7F8F11-1869-40E2-8478-28B4E946D3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2019E0E-426B-43AF-8904-1B811AE171E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "9062BAB5-D437-49BE-A384-39F62434B70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1504C-14FE-4C21-A801-944041F2946F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "6E53C673-9D6D-42C8-A502-033E1FC28D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5FC1A-1253-4390-A4FC-573BB14EA937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4AC452-6042-409D-8673-ACAD108EE3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE1009B-371A-48E2-A456-935A1F0B7D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C844A170-B5A7-4703-AF3B-67366D44EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44308D13-D935-4FF8-AB52-F0E115ED1AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3D41CB12-7894-4D25-80EC-23C56171D973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD9C12-EDAB-473F-9CC5-04F06B413720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "09789843-6A1A-4CDB-97E8-89E82B79DDB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*",
            "matchCriteriaId" : "118211EF-CED7-4EB5-9669-F54C8169D4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*",
            "matchCriteriaId" : "58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "9A405AE2-ECC4-4BB0-80DD-4736394FB217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*",
            "matchCriteriaId" : "E5612FB0-8403-4A7E-B89A-D7BDFAC00078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*",
            "matchCriteriaId" : "FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "AFDA151E-E614-4A24-A34D-B6D5309110CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "09BFA20B-2F31-4246-8F74-63DF1DB884EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3B4BA2-8A61-4F9A-8E46-7FA80E7F5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE93D3D-34B4-47B7-A784-61F4479FF5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*",
            "matchCriteriaId" : "6E21E50A-A368-4487-A791-87366CC5C86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "43E84296-9B5C-4623-A2C4-431D76FC2765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*",
            "matchCriteriaId" : "E18328E2-3CB5-4D36-8EA3-77DD909B46A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "EF73D76B-FBB8-4D10-8393-9FAF53392A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "F177AE1C-58C2-4575-807C-ABFFC5119FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A612F6-E4EB-4E34-8F55-79E16C74758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "5C19B266-8FE7-49ED-8678-2D522257491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "15C4D826-A419-45F5-B91C-1445DB480916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9F2B04-A1F2-4788-A53D-C8274A758DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5309ED-D84F-4F52-9864-5B0FEEEE5022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BC012-ADE4-468F-9A25-261CD8055694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "C89129C5-A1DB-4018-B43A-C60C8E650080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "409E324A-C040-494F-A026-9DCAE01C07F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
            "matchCriteriaId" : "6474B775-C893-491F-A074-802AFB1FEDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "84A50ED3-FD0D-4038-B3E7-CC65D166C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*",
            "matchCriteriaId" : "777F9EC0-2919-45CA-BFF8-78A02537C513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67735E5-E43E-4164-BDB2-ADC6E0288E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB70F82-52BB-4D0D-9A24-9AF67278466D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_hosting:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1267DA81-5D2A-4F5C-BF87-F46813E21E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_workgroup:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CD3CFE-7780-4BDC-B318-9B2D7B3B2DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C3FFDD-03BF-4FD4-B7A7-B62AFD5DBA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_home:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "065FF0F1-7FAC-4584-92EA-EAA87DC76FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "839D2945-1417-43F5-A526-A14C491CBCEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DCF0D-3241-453A-A0E4-937FE25EC404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B484D091-62DE-4EF2-AC54-26896CA8B315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8F79B3-2FBD-4CF1-B202-AB302C5F9CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9428589A-0BD2-469E-978D-38239117D972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "6E94583A-5184-462E-9FC4-57B35DA06DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E905FAAD-37B6-4DD0-A752-2974F8336273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "3BD12488-1ED8-4751-ABF5-3578D54750A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "AE3733CF-4C88-443C-9B90-6477C9C500D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9C500A75-D75E-45B4-B582-0F0DF27C3C04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-357.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394965",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12996",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-357.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842CBD30-B4BA-4FCF-9152-9DBEBE59857C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14820",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14821",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013635",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013643",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-33.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=288688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-33.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=288688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:sharutils:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAD86FF-979F-4203-93A7-DE7ADDBC7764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=302412",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-377.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=8459",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/104-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=302412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=8459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/104-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not \"use a secure location for temporary files,\" which allows local users to have an unknown impact, probably by overwriting files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E38D56-80BA-460C-A296-ED7F506E4364"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY59205&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY59206&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY59207&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY59205&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY59206&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY59207&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59384A5A-F530-4417-8AFB-005EE4A54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CFC048-C7C5-47E6-A7E9-E1ED99142493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120A58AE-69B7-426D-947D-9C0D9D9CE1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980AC0DB-2759-49D3-8347-C119AFFF8DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CABC8407-173D-466B-B366-5F7F5D9F2F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B0D6C2-AF9E-4395-861D-64502D82589A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666B78D-5DC9-4256-8A23-A4021AE7044A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096B01B4-3CD4-4CB4-8528-D1DB0D0BFB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229DE8B7-489B-4848-B1BE-2339CB771573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BC58E6-CA26-4760-A6A4-D65184A50539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE7C97E-60C6-417F-86F7-963ADE52A895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF189AE-9485-4F8C-AAAE-25088DF6F964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643C7F9B-B8C5-4C76-B706-F8CB5A800936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560BC57D-BDCE-4479-9847-6DB53A89FFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4859644F-E5FF-4AE4-B16D-CC2243964D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DE653E-E7FF-4DE0-A7C8-CC86C95550F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48888218-B238-4F0D-A4C2-E9877D3F3A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A393256A-A5BE-4467-8058-E9CA5D626D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9C4839-2356-4630-BDB3-4A0171F3A785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C55462-6370-45B3-8F00-50F4502981F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BBE005-1FEC-4178-A6A0-CAAB148948F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E7577-5F89-4B2C-9C28-A5268B539968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929F5CD6-51F3-42CF-8BA8-579120DD835D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B58A87-7A30-494D-9A9A-AF9FE6E59600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF345665-3C1D-4F44-B648-B695D88267BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C3F2E1-FEFC-4C04-B337-7AC3E38AE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C525B9-636F-49B9-B528-50AEB0E98F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74632C65-6711-4425-A43F-CCF1664C8542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD740315-190A-43B7-8399-9B72FA592AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794AE77E-843C-4CB4-9462-E4FE8C4C2896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E291BCAA-E2B5-4127-92DA-0BD48EACB6B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111264361622660&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14799",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.arrelnet.com/advisories/adv20050403.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-08.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-3",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12982",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111264361622660&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.arrelnet.com/advisories/adv20050403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E140F76-D078-4F58-89CF-3278CDCB9AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D76A8D-832B-411E-A458-186733C66010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111263251718491&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12986",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111263251718491&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or resultCnt parameters to advSearch_h.asp, and possibly (2) the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: it is possible that item (2) is the result of a typo or editing error from the original research report."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:early_impact:productcart:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0173EF36-E777-4866-AD17-043FB0F5BB83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/advisories/prodcart.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14833",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15263",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://digitalparadox.org/advisories/prodcart.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter to advSearch_h.asp, (2) the redirectUrl parameter to NewCust.asp, (3) the country parameter to storelocator_submit.asp, or (4) the error parameter to techErr.asp. NOTE: it has been reported that storelocator_submit.asp does not exist in ProductCart."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:early_impact:productcart:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0173EF36-E777-4866-AD17-043FB0F5BB83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/advisories/prodcart.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14833",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15264",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15266",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15268",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://digitalparadox.org/advisories/prodcart.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the email or url parameters in the Add function, (2) the min parameter in the viewsdownload function, or (3) the min parameter in the search function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111289685724764&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111289685724764&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the email or url parameters in the Add function, (2) the url parameter in the modifylinkrequestS function, (3) the orderby or min parameters in the viewlink function, (4) the orderby, min, or show parameters in the search function, or (5) the ratenum parameter in the MostPopular function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111289685724764&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111289685724764&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web_Links module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111289685724764&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111289685724764&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23264211-2992-4222-9B96-5ABEE1332C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F76C32-E24D-4B62-88CE-2D23F457573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90A3E1F-0371-45C0-A165-55D94A62C3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A5D98-6C48-461F-8B96-BD32A96CDCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F4E55E-4424-4EC8-8013-9A0FFE7D3658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13CCAA-839F-406D-A7F3-975B4780425A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D375197-0087-479C-991B-964FB83644F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F6320E-314D-4A8F-BC9A-29F730035C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E16D17-B704-4ADA-8F91-B7D96FB52909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5037564-574E-4321-9CD1-4230FB331503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE2D63C-75BC-4936-88BE-9F22D193EF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111281649616901&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-41.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111281649616901&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-41.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) the ratenum parameter in the TopRated and MostPopular actions in the Web_Links module, (3) the ttitle parameter in the viewlinkdetails, viewlinkeditorial, viewlinkcomments, and ratelink actions in the Web_Links module, or (4) the username parameter in the Your_Account module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111263454308478&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111263454308478&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "logwebftbs2000.exe in Logics Software File Transfer (LOG-FT) allows remote attackers to read arbitrary files via modified (1) VAR_FT_LANG and (2) VAR_FT_TMPL parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logics_software:log-ft:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25766E4-7858-4FAC-992C-1148DBFA4992"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111271950916436&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12998",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111271950916436&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:profitcode:payprocart:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B34992-59A6-41B7-AB25-8B7575F0D655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111264602406090&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14832",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013640",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111264602406090&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web script or HTML via the sgnuptype parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:profitcode:payprocart:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B34992-59A6-41B7-AB25-8B7575F0D655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111264602406090&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013640",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111264602406090&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:profitcode:payprocart:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B34992-59A6-41B7-AB25-8B7575F0D655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111264602406090&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111264602406090&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:soho_firmware:5.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC4093B4-2F11-4368-AE43-208025118BAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:soho:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B6B3FD-428E-4D6C-8C45-172CF4FB430D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0041.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14823",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securitytracker.com/id?1013638",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oliverkarow.de/research/SonicWall.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15261",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/15262",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12984",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19958",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19960",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securitytracker.com/id?1013638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oliverkarow.de/research/SonicWall.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/15262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service (server crash) via certain multipart messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:4.3c1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5DF711E-EFB7-4941-82DF-7CBD27253D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:4.3c2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "862EA438-4B8C-4D52-AB1F-62CE312B42F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14604",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.stalker.com/CommuniGatePro/History.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.stalker.com/CommuniGatePro/History.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a \"javascript:\" URL in an IMG tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp-dev:xm_forum:rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2CE248-3956-4AC5-BA4D-6C56743EF59D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013614",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12958",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bakbone:netvault:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC0951B7-94E0-418B-8BB9-D358CBB90C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bakbone:netvault:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7260C9-97A1-4DDC-808A-107107D1D3CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14814",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013625",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.class101.org/netv-locsbof.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.class101.org/netv-remhbof.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hat-squad.com/en/000164.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hat-squad.com/en/000165.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394801",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12967",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.class101.org/netv-locsbof.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.class101.org/netv-remhbof.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hat-squad.com/en/000164.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hat-squad.com/en/000165.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/394801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7933FB3-6B75-4809-BD9B-A5EED4A9892A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iatek:siteenable:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "653D534B-3C82-4E51-BF4B-92E9FAFB6246"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013631",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12985",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.zone-h.com/en/advisories/read/id=7367/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.zone-h.com/en/advisories/read/id=7367/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via (1) the contenttype parameter to content.asp, (2) the title, or (3) the description."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iatek:siteenable:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "653D534B-3C82-4E51-BF4B-92E9FAFB6246"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013631",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.zone-h.com/en/advisories/read/id=7367/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.zone-h.com/en/advisories/read/id=7367/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAA0B95-5875-41CF-90BA-EF07D240FF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724E8638-CF5A-480B-89D7-0E029A0C5965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B664B5-EEF9-4C5F-B23C-E4D54DBF2EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27EEFD5-19B1-4F0C-BD52-257594C37310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB6A16-65D3-43CF-BFB4-E0616476A979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADEF40C-4C56-4893-B757-15966ED5A925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BCB9D-9AEF-40E2-8291-50EC2A083775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88435083-D7A8-4679-BEB1-4B6526454C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145A8B1A-573D-4695-B66A-FF8EA2556DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9572349-9433-415F-B81B-10A1375AF33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111273637518494&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013637",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5HP031PFFG.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12994",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111273637518494&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5HP031PFFG.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a long AUTHENTICATE command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E228B31-0D62-41E3-A475-550BBFAA4336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724E8638-CF5A-480B-89D7-0E029A0C5965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B664B5-EEF9-4C5F-B23C-E4D54DBF2EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27EEFD5-19B1-4F0C-BD52-257594C37310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB6A16-65D3-43CF-BFB4-E0616476A979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADEF40C-4C56-4893-B757-15966ED5A925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BCB9D-9AEF-40E2-8291-50EC2A083775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88435083-D7A8-4679-BEB1-4B6526454C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145A8B1A-573D-4695-B66A-FF8EA2556DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9572349-9433-415F-B81B-10A1375AF33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033123.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14812",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013637",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033123.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:imapd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F1D4F64-3A81-4CD2-9834-5C8CA8CCF698"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033144.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033144.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in links_add_form.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URL in a banner URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.33",
            "matchCriteriaId" : "C474EB0D-78B1-4E84-BE9F-D47535D0AC18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14752",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=1807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=1807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENT_ID parameter, as demonstrated using events.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.33",
            "matchCriteriaId" : "C474EB0D-78B1-4E84-BE9F-D47535D0AC18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14752",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013617",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=1807",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=1807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9E11A387-BF4A-4A54-8F29-37EFF14D72DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111351851802682&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=232&type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111351851802682&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=232&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/390760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aeon:aeon:0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898AD1F5-2FEB-465E-BE41-BDDEBDE10757"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aeon:aeon:0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF7247A-F7B5-4601-99F4-9A90CDF029F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aeon:aeon:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC85C6B1-856C-455D-8FC5-5A10B84582DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aeon:aeon:0.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEAAE5DB-642D-491E-99A2-66CE347AFE15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111262942708249&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security-tmp.h14.ru/exploits/23laeon.c.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111262942708249&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security-tmp.h14.ru/exploits/23laeon.c.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F86F790-6247-42F2-9487-3D60A2842F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332C413B-7AC7-4475-A968-9D0B7EF14B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35999D5E-F831-446C-B509-F1531A2D1DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3630462-F414-4D6B-8766-7CED5366C852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DF5979-73D5-4B2E-B98E-CD0AB8517F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA92F7A-C14E-4186-8E96-51D2BDC40DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24.2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3E9A9A-B80F-43BD-8A63-762B60D6DBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179CEE21-E5CA-466A-BAF0-8936F2E0B06F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00682210-2C86-4912-A423-5F7011C2FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "498F4C0D-393D-4406-9752-4E49D6BB42B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)sv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C87916-D186-4E36-A4B6-5FA858FFC7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12434A88-88C6-4749-981F-E2B4D725F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6B0C2F-2FBE-4422-AD30-305100C595CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932C1AC0-0BD1-46DF-A241-AA71BBD785BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEA01D2-B985-4575-AF00-144CE2E3024D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3999B90E-FE66-4B5D-8186-66C658855D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11A2BE-19E7-4148-B3CC-B4956B07273E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E78DEE-1125-4183-A0CD-947B850E956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7F94E8-86FC-456B-A7BB-57953F67F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0w5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A92DCEF-C205-4145-91B0-DB9991130457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B5CC91-144D-4818-871E-E6120A7E1050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E5F43E-20DA-4C5C-B8C5-1A5512CA07B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6333F9A-2605-41EE-9AB4-1D04C5825BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1050ACB3-E5B2-4710-910B-F3DF4B49907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABE71F9-17D4-47C4-A762-18CC8716E477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7977DA9F-41DE-4482-B0CD-896EEEFB5689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADAB898-7728-4C14-B69A-7B8B06AFC894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBE69A0-85B1-423B-88FB-CDA80E9186EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54424787-34AC-410D-985F-511ADB2BB144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F54F0C-AC91-4CB7-9FEB-257F03547864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0D017-F26F-4429-891E-C7E1C66B6588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA075D-4A9E-44EE-90CF-23947C9040EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3DFAEC-4534-4A8D-9886-0723F57C7A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5451772-87D4-42E2-8F48-D137670DA3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D162976F-87A3-42BF-8C9F-A981B14F4673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2606209-91BE-4BEB-A163-0D3873A033FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43581A57-418A-4A35-ACF2-1380A8DA8A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC17E231-9256-4600-A33B-238E7E83CF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6D5468-BB6A-4665-964F-D8F636359CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0AB67FC-88F4-42BB-BB90-54521950DE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0082D5-CE3E-433A-84E9-1311C8B7899A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED30640-AABE-4CA2-8B45-509270748BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580BA1FE-0826-47A7-8BD3-9225E0841EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040B04CD-B891-4F19-A7CC-5C2D462FBD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF29685-7FFC-4093-A1D4-21E4871AF5C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72872C9-63AF-417F-BFAE-92B4D350C006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BCF196-5E5A-4F31-BCE7-AA0C748CA922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970939C5-1E6F-47B6-97E6-7B2C1E019985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C3B6E2-3D33-457E-B85D-8C2FC9DA2FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41AB141-A566-4738-8E07-E6410590FB0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F074DF74-81FA-4F09-A6E5-18DD9A4E76C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4041EB0-F402-4C01-9337-212E3E461AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DEB16EF-D0C1-4C56-85B1-3C07D8CFD493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFCFD88F-4320-4F4F-9CAD-BA8A5AA5D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)eo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF2BEC0-6D37-4BC2-9A78-FC0D06CE7573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379E0F70-EE01-48F9-A4F0-BFCF9BDAB4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ew1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CD0C63-7500-4A32-BD85-27E6C2F70FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442972CD-50D3-4C46-AB73-44AED94B9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19077C39-A27B-4EC3-A882-9AC826E61570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B31AFC-9C72-4737-B6B7-E938C13695BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEF6AED-4477-4AAC-9759-1996B77DFEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9427851-B0DC-4CE6-8BFA-60619D1DC87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D07DD94-0925-4FEE-9565-5F36B9AAF448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3A67F5-05C6-4097-A88E-0A0F165C12EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C0554-1A50-4341-AB07-80AA854673D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8C5149-40F8-40C9-9FC3-7E7C68801320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FF39C5-CC37-4573-BB18-36254D38509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B377A8B9-90F2-41B7-9098-5ABEB621E2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896A71EC-9508-406F-8DE8-58953D9A30FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B15FCC-1BB3-41CA-9550-6D55DD381F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A85892-C3AB-4920-A949-A71BD0332D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6330829-9A7B-479D-B38B-BC64148EC172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B13CDA-C376-412A-AF5D-8FC25C74A0A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297FAD97-60C0-473D-A18D-03657B81B7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD4A33B-B13E-40C6-B47F-A406ACC6664F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E488E6E-87F0-4292-B97B-31087FDB4655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D199CB1-A2A3-4678-9503-C5B61281755C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19952DC6-1186-4754-BB1E-BA1D78A19C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E8AF76-0A1D-4BAE-BF10-D63080352E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A11AF3F-C82F-4431-9CF1-84FDAD388D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B674647-4438-4450-9DCA-25184D4E2682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB7128-CF11-4903-97D7-418403A03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EFB20A-78E2-4BA1-B87C-BB74E8982D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A273401-9394-4BC3-879C-DE3EFC09B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DABF911-FCDF-4095-A95D-4BB73628FCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77886493-C30E-439E-BBB4-3D34A8938378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DC4B6-8B3D-4A0D-9934-743FD7494DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E272881F-0804-4190-A21D-3D0B9A774F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F084DA16-24CB-41D1-92B7-C6E0499AAD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA979D75-F60E-45F8-B99C-1402DC8CFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF3601D-DF44-4A10-A424-8E97C65A36A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1835410-77EB-46F2-ACF0-379759D4B0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88DCCDE-6A81-473F-B4FE-95A84F8DF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7C6FB8-8393-4916-BB2B-3097B1995C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915157AA-15BE-4792-95D8-4D1E1EF34EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38C9EE3-1A86-4930-AEF7-EAC3A2713DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "742CC70E-68FB-4658-A475-E7BBC5983878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CE5741-1569-4B69-B7F7-094F0C6101AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xd4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B4D71A-D418-4E6B-88F7-50833C00236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD14702-51AC-46B1-95A3-4AD47A4DCD21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xe2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA8E55E-7E11-4D46-A1BC-B3655906FDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xe3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E16ED18-4EB6-40D5-A857-6398A78693D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979D4077-A3CB-4134-B180-EF10F01413BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C96C90-8B2D-4A88-A4B8-FA43332BD8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9B3920-D3F1-478F-ADE9-6022763E8740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xs1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC9CF50-E0F7-4513-B7EB-A2E095D3E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A3E8C4-0E94-4027-ABDE-47A364071D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07398411-7920-4B52-92C8-3696F49370B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xa1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371FA715-3966-4071-961F-12E691608DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xa5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2713E8-3E4B-4C60-9ABD-01B962A85A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5400D72E-CD49-41E7-BA47-33E3AB920320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A44418C-C041-4A98-9D1F-1E7510B9AD1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474FA3DA-6967-48A6-AAB4-E7C382D3C942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E319FE1E-8D75-4CA2-8EA9-C1C32C290891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B82C4003-D2CD-4243-8A8D-B8A9B449D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29056463-CDD9-4399-964E-14BDBFF760A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xh2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259BD3FC-FFC5-44B7-8641-917A1BF2E98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xh3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34F414DF-19C3-42BC-B43D-5CF60A3C0991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32D7BFD-EC96-464D-81CB-E9CC12C21EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xi1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32421120-BCA2-4218-8CB3-C77452A69295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xi2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03537E8-D899-44D5-976D-A6E10FF16FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4C67B0-81D3-4430-A9F7-6F15C601693E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xj1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520E6B5D-C163-4633-A2DC-D02335838FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA145839-3DC4-41C4-96B7-88B8EE87D70E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xk2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC95C37-9102-45C7-813A-15A0ACFF5D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8D649D-474E-4661-A68E-517EA3563CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0FEB158-215B-4C9D-8882-D44EE7F90B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xt3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BD8E31-5117-4E79-92A4-5FF08BC8BB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274DF264-D0DE-46DC-A91F-DD53ACE06AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xu2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC678F0D-4307-48B9-8C29-9E85DB756809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0200FB78-35ED-4CEF-A49E-52D6F8F6102D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCFAA1B-DDCC-4E2E-B9BF-B51E0B5710F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D359AB74-8958-477E-8B97-F5A1FC3BDC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665CB7BC-E97E-4461-B83B-681047A6EEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7E536B-DD9A-4F46-B8C1-F29DC3298972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92A9D069-4C88-4BE1-92E3-8A7056DD8825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7CC6B5-44B7-4DCA-86C8-F032AF65FDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "208A52BF-BAE3-4F5F-9279-88C360FDCBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1F4148-E772-4708-8C1F-D67F969C11DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CEBCEF0-5982-4B30-8377-9CAC978A1CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D9BA55-F193-4BCA-ACC2-BBC892E9D7E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26835676-2738-47CB-A364-78D1964FEC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)za2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209A1BE7-EEFC-476E-84E4-4EFD68DD7E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9802FF68-2932-42F6-B66F-545A59FB5EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14.5\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E51D01E-F3CB-4413-985E-D72F71D7B423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)zn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776DCDA0-839D-4EA2-8C0C-D28E897C1E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15.1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4B7EF3-FD99-4CCD-B05A-807EE53A58BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6730C6-1387-4A52-8778-7FC144134AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16.1\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB1A7354-F886-427D-943A-388824100550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17a\\)sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7F49F3-0A0A-4270-A657-CDE987637684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E49B392-5366-422D-A10E-EE4F3A33C4B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF707A6-5834-4295-8B38-17F279D49C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0E67EE-AF42-4B53-B70A-45562CE164D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E319ADC-C636-4933-BD50-B613677AD4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A15042D-EB07-4754-8144-947CDE669CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58F4903-E834-4476-876F-8C144BD93D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955BF110-FFBE-4368-BE06-21AC794C53AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10151339-0261-4F5D-9601-F048C0B70908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2498113D-65B7-4144-AD1C-9FCB6534B7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(21\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9324BF58-67E2-410D-AA71-F280B3D64498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(21a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "060D7CA2-0A02-49E3-BCFB-EFE7F6EC08F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(23\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "947062EE-A5CF-4A7F-8EF7-921F45118268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B9E2C6-0E23-4AC9-906F-28BBC15868DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98E703A-717D-4997-AFBC-CAE4B644025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B27825D-099A-4733-8D3F-8EF2B050E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8A1FE0-F74A-4C92-8625-7C933128B567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1975B29A-42E5-4DB8-928C-F8F775DAA3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D717498-4DF9-4D15-A25B-D777FF460E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972EC35D-B727-49A0-A0F1-654FD4E9576C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7918C59-1678-4F24-A7C2-68824D1B59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5B9BAF-59BA-4282-B387-489264D44429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41E5674D-D1D3-4597-8105-F787465E00A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00462296-DF61-4438-818D-C240BFFCCD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD345EA-D5E8-420B-98D0-92674BEBEEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56365432-1E57-4D35-B764-DDDA878B96ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390755B3-30B7-4086-8FB2-A41614F747D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E748F5-FA9B-4627-AB30-5414A2952ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19940BFF-0888-4717-AC5F-87A85BE165A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5A2A58-D7B2-4018-BAAE-D6CB49A3A709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C268494-F83A-488D-AEE6-AF7D319B6F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BCC003-3F88-4369-A387-6B8D0FDFBE32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD45AA0-EEE1-43FF-B04D-4063769D71AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7873D1DB-80D0-4076-8716-7618D7161EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF292613-B9BC-4CF1-A6FA-4AFC077D8632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B1AF9D-106A-43CB-972C-5E85ADFC355D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C6BBA6-8D45-4BA7-B88E-44D9ECE88009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF0189B-964F-46EC-BE5F-8076CFE7AB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "53430E70-FBAD-42F7-8614-7AB04E566810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B670057C-7A86-4F61-8FF5-88E6BFE2B5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4403BFFB-8A89-4512-8030-5DEDC0C0FF93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9B4FE3-7A03-430F-AE68-743559D74DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550709E5-9302-4FCB-A969-2DA54BCB2184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB57AAA9-4715-468F-A734-A12209A6069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D480A-80A3-4113-A1A6-194A8DD47F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A310F30-F94D-4A70-94BD-6B94D7B5F5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72732395-1B82-4E4F-9D63-D1CA0C6BD929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A668D08-14C4-4438-A59C-CE60498BEF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CF930C-6871-4BCB-8605-B71F82455123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A9B6F-A5D8-403C-9018-0E627FBC9A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2BCA9F-5D56-4EF4-8675-7B76129B994B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14854",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013655.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013655.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11A2BE-19E7-4148-B3CC-B4956B07273E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442972CD-50D3-4C46-AB73-44AED94B9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B31AFC-9C72-4737-B6B7-E938C13695BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D07DD94-0925-4FEE-9565-5F36B9AAF448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3A67F5-05C6-4097-A88E-0A0F165C12EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C0554-1A50-4341-AB07-80AA854673D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8C5149-40F8-40C9-9FC3-7E7C68801320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FF39C5-CC37-4573-BB18-36254D38509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B377A8B9-90F2-41B7-9098-5ABEB621E2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B15FCC-1BB3-41CA-9550-6D55DD381F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A85892-C3AB-4920-A949-A71BD0332D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E488E6E-87F0-4292-B97B-31087FDB4655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D199CB1-A2A3-4678-9503-C5B61281755C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19952DC6-1186-4754-BB1E-BA1D78A19C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B674647-4438-4450-9DCA-25184D4E2682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB7128-CF11-4903-97D7-418403A03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EFB20A-78E2-4BA1-B87C-BB74E8982D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A273401-9394-4BC3-879C-DE3EFC09B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77886493-C30E-439E-BBB4-3D34A8938378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DC4B6-8B3D-4A0D-9934-743FD7494DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF3601D-DF44-4A10-A424-8E97C65A36A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1835410-77EB-46F2-ACF0-379759D4B0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88DCCDE-6A81-473F-B4FE-95A84F8DF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9F8FF-94EA-4D1D-93AE-623075014426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912492E-565A-4559-ABB8-D2898F06CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC8B40-2093-4D3A-B18B-F95868A36D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB7E760-8260-4488-B9FB-C741C1763F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D717498-4DF9-4D15-A25B-D777FF460E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB57AAA9-4715-468F-A734-A12209A6069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14854",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013655.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013655.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C65BE0-32FA-4D51-AA2B-E7D630470D19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111290407411801&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111290407411801&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the categories parameter to the FAQ module, or (3) the ltr parameter to the Encyclopedia module.  NOTE: the bid parameter issue in banners.php is already an item in CVE-2005-1000."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23264211-2992-4222-9B96-5ABEE1332C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F76C32-E24D-4B62-88CE-2D23F457573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90A3E1F-0371-45C0-A165-55D94A62C3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A5D98-6C48-461F-8B96-BD32A96CDCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F4E55E-4424-4EC8-8013-9A0FFE7D3658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13CCAA-839F-406D-A7F3-975B4780425A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D375197-0087-479C-991B-964FB83644F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F6320E-314D-4A8F-BC9A-29F730035C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E16D17-B704-4ADA-8F91-B7D96FB52909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5037564-574E-4321-9CD1-4230FB331503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE2D63C-75BC-4936-88BE-9F22D193EF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111263454308478&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111263454308478&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23264211-2992-4222-9B96-5ABEE1332C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F76C32-E24D-4B62-88CE-2D23F457573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90A3E1F-0371-45C0-A165-55D94A62C3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A5D98-6C48-461F-8B96-BD32A96CDCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F4E55E-4424-4EC8-8013-9A0FFE7D3658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13CCAA-839F-406D-A7F3-975B4780425A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D375197-0087-479C-991B-964FB83644F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F6320E-314D-4A8F-BC9A-29F730035C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E16D17-B704-4ADA-8F91-B7D96FB52909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5037564-574E-4321-9CD1-4230FB331503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE2D63C-75BC-4936-88BE-9F22D193EF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111263454308478&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111263454308478&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:iseries_as_400:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C9B4C-375D-43D3-A55D-C52FB0878D84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111264136829017&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.venera.com/downloads/AS400_user_accounts_ftp_disclosure.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111264136829017&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.venera.com/downloads/AS400_user_accounts_ftp_disclosure.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to dlman.php in DLMan Pro or (2) id parameter to links.php in Linkz Pro (aka LinksLinks Pro)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlman_pro:dlman_pro:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B573890-9B59-468E-BC39-3ED20E4C137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linkz_pro:linkz_pro:1.0.3_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF1C881-4FEC-4529-BBBF-85A317184A65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111271895819594&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111272430128195&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13028",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13030",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.snailsource.com/forum/dlman.php?func=file_info&file_id=77",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111271895819594&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111272430128195&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.snailsource.com/forum/dlman.php?func=file_info&file_id=77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in the Your_Account module, (2) avatarcategory parameter in the Your_Account module, or (3) lid parameter in the Downloads module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23264211-2992-4222-9B96-5ABEE1332C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F76C32-E24D-4B62-88CE-2D23F457573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90A3E1F-0371-45C0-A165-55D94A62C3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A5D98-6C48-461F-8B96-BD32A96CDCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F4E55E-4424-4EC8-8013-9A0FFE7D3658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13CCAA-839F-406D-A7F3-975B4780425A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D375197-0087-479C-991B-964FB83644F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F6320E-314D-4A8F-BC9A-29F730035C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E16D17-B704-4ADA-8F91-B7D96FB52909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5037564-574E-4321-9CD1-4230FB331503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE2D63C-75BC-4936-88BE-9F22D193EF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111272010303144&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/321324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/7570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/11994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111272010303144&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/321324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/7570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/11994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module, or (3) the Your_Account module, which reveals the path in a PHP error message."
      }, {
        "lang" : "es",
        "value" : "PHP-Nuke 6.x hasta la versión 7.6 permite a atacantes remotos obtener información sensible a través de una petición directa a (1) index.php con el parámetro forum_admin establecido, (2) el módulo Surveys o (3) el módulo Your_Account, lo que revela la ruta en un mensaje de error PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "7.6",
            "matchCriteriaId" : "6B02489B-CA09-441D-8364-6BD5481CAFAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111272010303144&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111272010303144&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:active_web_softwares:active_auction_house:7.1:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "F403D596-4206-4B53-9796-BAA23A68B47D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/advisories/aass.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111280834000432&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14839",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13036",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13038",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13039",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013649.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://digitalparadox.org/advisories/aass.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111280834000432&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013649.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when \"Allow custom avatar upload\" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-xoops:e-xoops:1.05r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5477DFD-E91A-43A0-BF44-C2ED9CB9699C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA5EE4F-F255-456D-9C23-EA00F77838B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52D52A0-BA4A-424F-8A13-566E55F637B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111280711228450&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14869",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.runcms.org/public/modules/news/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13027",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111280711228450&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.runcms.org/public/modules/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.php, (2) PHPSESSID parameter to index.php, (3) product parameter to tellafriend.php, (4) add parameter to view_cart.php, or (5) product parameter to view_product.php, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "903816D6-4247-46B9-B82A-DFC6A105C465"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111281457918479&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/14064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111281457918479&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/14064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the LEAK command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:surgeftp:2.2k3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB19CD1C-42AD-484E-BB72-FDE2A456E8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:surgeftp:2.2m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A86FD78-51C7-4834-9B48-255FCD9E927D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111289226204780&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14888",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.org.sg/vuln/surgeftp22m1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111289226204780&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.org.sg/vuln/surgeftp22m1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-909"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.4",
            "matchCriteriaId" : "4C8FBB70-DF79-4618-8ED3-1167562CB997"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:amd64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7145CF8C-9447-430F-BF8A-9B061F6E24C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:03.amd64.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:03.amd64.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14856",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY68825&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050405-00278.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY68825&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050405-00278.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink.  NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_vixie:vixie_cron:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F661927-058A-4F4C-8E0A-DA031A9E85B5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-118.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_007_suse.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-361.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0117.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395093",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13024",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-118.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_007_suse.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-361.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0117.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is running with the -m switch, allows local users to modify permissions of other files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:coreutils:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4060C1F-54F4-4D8F-A359-48CC27359585"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/13053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in netapplet in Novell Linux Desktop 9 allow local users to gain root privileges, related to \"User input [being] passed to network scripts without verification.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5595E484-647C-4F85-94AB-5A4D55CD766B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1041",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bk-commits-head&m=111186506706769&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13267",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bk-commits-head&m=111186506706769&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1042",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.33&r2=1.118.2.34&ty=u",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-405.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154021",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10822",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/112-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.33&r2=1.118.2.34&ty=u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-405.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/112-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1044",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:22.253",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0941.  Reason: This candidate is a duplicate of CVE-2005-0941.  Notes: All CVE users should reference CVE-2005-0941 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centrinity:centrinity_firstclass_desktop_client:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7FDA6F-0132-4992-BE37-11554DEA632E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111323587931293&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14898/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111323587931293&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14898/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D600E27F-A1D6-42C7-8ED1-FD508F5B3AB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.kde.org/show_bug.cgi?id=102328",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14908",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-714",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050421-1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_kdelibs3.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-393.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.kde.org/show_bug.cgi?id=102328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050421-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_kdelibs3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-393.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid parameter.  NOTE: the vendor reports that they could not reproduce the issues for 760 RC3, or for .750."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B720E0CD-7975-4D56-9F09-371E742443C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/advisories/postnuke.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111298226029957&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14868/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://digitalparadox.org/advisories/postnuke.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111298226029957&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14868/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) module parameter to admin.php or (2) op parameter to user.php. NOTE: the vendor reports that certain issues could not be reproduced for 760 RC3, or for .750.  However, the op/user.php issue exists when the pnAntiCracker setting is disabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B720E0CD-7975-4D56-9F09-371E742443C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/user.php.diff?r1=1.18&r2=1.19",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://digitalparadox.org/advisories/postnuke.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111298226029957&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14868/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13076",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/user.php.diff?r1=1.18&r2=1.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://digitalparadox.org/advisories/postnuke.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111298226029957&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14868/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B720E0CD-7975-4D56-9F09-371E742443C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/advisories/postnuke.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111298226029957&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://digitalparadox.org/advisories/postnuke.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111298226029957&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a change_email action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B349F-F76D-49D2-95DA-C8670E32530A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB336F6C-E81A-43C2-A252-36A192D9CADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00082231-3168-4FCC-807B-8AD3DBBFCE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FF770-BEB4-4320-AA45-399A5CC6540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97DA335-4815-4608-84D5-67F4E539D8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111306207306155&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14882",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13071",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111306207306155&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3189982-F780-4AC2-9663-E6D4DF9DD319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_web_access:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B042C79-99A3-4E20-9C9A-E00DC871EA38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=227&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=227&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) c_code or (2) aid parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moderngigabyte:modernbill:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "B9B63284-AAC2-4DBE-B10D-648F4BE94EDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111323741032183&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14890",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013672",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00067-04102005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111323741032183&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00067-04102005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute arbitrary PHP code by modifying the DIR parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moderngigabyte:modernbill:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "B9B63284-AAC2-4DBE-B10D-648F4BE94EDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111323741032183&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14890",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013672",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00067-04102005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111323741032183&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00067-04102005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through 7.50, allows remote attackers to cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E17259-60C7-4F6B-AB23-06E406FA006D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A2AF84-E59A-4725-85E6-D2AF56F97F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DF6D25-9B6E-4862-9252-92C8DB6F3F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E31677CB-1DAC-498C-9372-D442D60A6389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725DA559-EE1C-4CCE-91C4-D5AAA940D855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/8372",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/8372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a \"malformed packet.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wet11:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915EB041-DB1A-48C7-AA7C-893D47DCB46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wet11:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D553134-3A27-4288-8056-C205D5AC1A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wet11:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8A6ABE-8E61-40CF-ACD6-5CFFF56A6194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14871",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-04/0148.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13051",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-04/0148.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote attackers to cause a denial of service (ABEND by Page Fault Processor Exception) via certain packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9F2EF1-D7CB-4D76-BAC0-EA28E5F9D82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B04B18E8-A130-4BAA-8BBC-D9DF7085F9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B9700BC2-BE56-448F-BAE6-AD01F71DC646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FE91855A-062B-47D7-BC38-5980E3F6F2FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D328A81E-DC60-4B67-B707-F0AD9A6F48E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB9CEA-9245-490F-88F6-EFD23B11A19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1.1a:*:*:*:*:*:*",
            "matchCriteriaId" : "0669D0E2-AB83-44AE-A87C-C7EB7AA2953A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1.1b:*:*:*:*:*:*",
            "matchCriteriaId" : "062E2A9A-CF88-4844-B5A1-7418722087D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8E031C-CE1F-410F-8F32-B3E33719C498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "87F80FDC-7851-4EA8-BC7D-87B85C6BB93C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2970467.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2970467.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1061",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka \"logwatch log processing regular expression DoS.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logwatch:logwatch:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644AEDCE-D009-4766-8E41-60C95DD69252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-364.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla-old/show_bug.cgi?id=137502",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-364.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla-old/show_bug.cgi?id=137502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA7CEE3-7D36-4F9D-8AC6-3F4C55D360CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937A6092-48C9-4721-B069-0B46D3520E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38A0AAC-ACA8-44D3-B36A-741D01BE166F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AE0CAA-B5A4-4E3A-B997-A2858E88CCC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AC0D46-2096-4006-8FED-A67AFCE2ED98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F931B5E-6F02-48F6-8DAB-C0D796DFC2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B391EF70-D407-4087-96CF-B925CA2799B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D64B85-51A2-47BC-94A2-8C9980CC573D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AB197E-4F2E-4976-B6F7-17EB8A8BFBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658F01AE-C211-473C-BF70-E524E4310F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F769FAE-CC31-4C8B-B785-1423DFC2BA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7202BC-AD0B-41B1-B7C1-7665498C967B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E60288-F9E6-4E7C-9B48-352277A34C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32087795-35B4-427A-BDAE-F0A217230C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C04B63F-3715-46F1-917E-5185691BD619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B1A9450-D6E7-4D0A-A9BF-E64284D1E1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041B4428-ADC5-4BD2-9F6E-0BE2362FD9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E19F4EE-1567-4CD8-895C-474CE80241AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19EA5978-64EC-4B54-BC06-20324DB0E6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81E1EDB-A491-4BE6-B6DE-1C4A695EE1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C076C7D-D833-42CF-9FEF-F3654013AB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FEB6DB5-851E-4EDF-AC1C-CBA502C6D5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE72890F-2421-4A6B-A8F1-4325F824A93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE079B94-A8C6-41E7-98B1-29A4DE4F66EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AC89E5-8B9C-4C6B-8976-6A4A6F922858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99A154-D3C6-4B1C-BEC9-7D1AEAFCAC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADAAD5F-3286-464E-A309-9454EE9A663F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1437DE-E19A-4C2C-9077-DB1FF48772C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0089BE-856D-4998-BBFE-1F626A43377E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE81F49-05CE-4987-90C0-B6D077B65DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650E19BC-6545-45E9-BE2B-0900323C80C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173804A3-04EE-484B-A0CF-8DFFE060EFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AF1105-8B53-4EC7-B52A-9344BDC524CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.tic.udc.es/scg/advisories/20050429-1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kerio.com/security_advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/397221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.tic.udc.es/scg/advisories/20050429-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kerio.com/security_advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/397221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tetex in Novell Linux Desktop 9 allows local users to determine the existence of arbitrary files via a symlink attack in the /var/cache/fonts directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5595E484-647C-4F85-94AB-5A4D55CD766B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13072",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pine:4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032C7D5B-D1BD-473F-BAB0-E203837E68AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://msgs.securepoint.com/cgi-bin/get/bugtraq0504/126.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://msgs.securepoint.com/cgi-bin/get/bugtraq0504/126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:scssboard:scssboard:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2815DEC3-B709-4972-910D-7ADB3ACE38AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:scssboard:scssboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC044C7-05BC-4D6E-92C0-FF573EA8D608"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:scssboard:scssboard:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98463C5E-AFBE-4CC3-8BC7-94757B948D87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14694",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013659",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=318346",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13041",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=318346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to \"an exploit on the Profile page.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:scssboard:scssboard:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2815DEC3-B709-4972-910D-7ADB3ACE38AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:scssboard:scssboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC044C7-05BC-4D6E-92C0-FF573EA8D608"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:scssboard:scssboard:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98463C5E-AFBE-4CC3-8BC7-94757B948D87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14694",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013659",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=318346",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=318346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to read arbitrary files via the read parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radscripts:radbids:2:*:gold:*:*:*:*:*",
            "matchCriteriaId" : "3F20C62C-9E5E-4DDF-9B61-C1CFD624AD5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14906",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/rga.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15428",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395527",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13080",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/rga.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to execute arbitrary SQL commands via the mode parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radscripts:radbids:2:*:gold:*:*:*:*:*",
            "matchCriteriaId" : "3F20C62C-9E5E-4DDF-9B61-C1CFD624AD5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14906",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/rga.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15429",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395527",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13080",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/rga.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via (1) the farea parameter to faq.php or the (2) cat, (3) order, or (4) area parameters to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radscripts:radbids:2:*:gold:*:*:*:*:*",
            "matchCriteriaId" : "3F20C62C-9E5E-4DDF-9B61-C1CFD624AD5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14906",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/rga.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15431",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395527",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13080",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/rga.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webct:webct:campus_4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3CC81C-36D9-4606-B325-B7F186FE1C5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/395544",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13101",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mike_de_boer:zoom_media_gallery:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027CCDFF-2E0C-4F0C-9E1E-A3A5ADCB4714"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111340031132596&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14929",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5LP0G0AFFY.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111340031132596&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5LP0G0AFFY.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002CA86D-3090-4C7A-947A-21CB5D1ADD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3CC5A45-7F98-4E1F-A0BE-00DA455814CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.mageia.org/MGASA-2015-0158.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111331593310508&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=127602564508766&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=127603032617644&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0806.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0807.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0808.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0809.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0854.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0857.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0858.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-1006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-1007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-1020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-1021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-1091.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14902",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2015:212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5IP0C0AFGW.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=594497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=601823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.mageia.org/MGASA-2015-0158.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111331593310508&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=127602564508766&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=127603032617644&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0806.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0807.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0808.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0854.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0857.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-0858.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-1006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-1007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-1020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-1021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2015-1091.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2015:212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5IP0C0AFGW.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=594497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=601823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in view.php in AzDGDatingPlatinum 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azerbaijan_development_group:azdgdating:1.1.0:*:platinum:*:*:*:*:*",
            "matchCriteriaId" : "4C208847-0FDC-4145-9979-B2B29FFEAFCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/395530",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13082",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aewebworks:aedating:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5538E8-12A8-47B2-B6A5-5E18D2716812"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14913",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aewebworks:aedating:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5538E8-12A8-47B2-B6A5-5E18D2716812"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14913",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitrary web script or HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:aewebworks:aedating:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5538E8-12A8-47B2-B6A5-5E18D2716812"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14913",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an:an-httpd:1.42n:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E925BE54-5384-479A-BC60-DEEFF4C7093F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14861",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.org.sg/vuln/anhttpd142n.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13066",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.org.sg/vuln/anhttpd142n.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in DameWare NT Utilities 4.8 and earlier, and Mini Remote Control 4.8 and earlier, allows local users to gain additional rights."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95DBA8A-9EE2-46A4-90A0-897585460670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:3.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7356897B-02DD-4A94-9F65-45006C123107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:3.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ABB85C2-A80F-4E1A-8EEA-FFF541D2EEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:3.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187E7064-6F40-4EC1-81CF-C6E15FB18EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:3.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0054519-E820-43F5-89B7-0BB9093C5D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8EDA9D-51EA-4B13-B9F8-B08D1FCC895B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC0C6BF-50D5-4D6D-8754-DF54C841D544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E32679-2226-478E-82E4-9B203CB08B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5069BDA-5744-4BBF-9B68-A6AB5D2CE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC9C0D3-FCB8-43A7-A9FC-F951468C5654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3E82D9-9B4D-4773-B01B-B6FCF2AB0E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B005EF-96FB-4DC8-9347-E48E61518D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6EA1E9-C7A0-45F0-BF0A-6D44CF6AE10F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A83387-7F4C-4620-941D-D3DC2673523F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09B69D7-E078-46FE-A6FA-D7C0D86D37F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F058DC6-8105-4BFD-BF0F-21E5F8BC15F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C8ADB3-4A41-4A17-BD41-8A05DEA11E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.21.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A253DC-F7DB-4798-9946-A984276DAAD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.41.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7E7FD9-52F2-4529-89B3-FB151ACD7001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.42.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94ACE08-8C30-40A6-A136-1130F5729A87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.43.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA4F999-DDD0-4F83-9EB4-5CB957AFF91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.44.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "009D0F11-8CC8-44A0-BD4A-F01411EA61BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.45.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2DC98C-9FC7-4381-B846-955A94896F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.46.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0D64C0-BECC-44BA-8FC0-90EAAA43F3F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.48.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220FF8F5-C54E-4BD7-8827-9B641236B3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB088CDD-0F0C-4F96-A176-9197588169A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7CAC9CA-E3E8-465B-8312-D06AC74963F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609CB21C-3D38-42A4-AE41-1C33D7FE5478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.60.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E9CAEA-0260-41AC-8457-F4B7DB4ABC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.61.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D90F46-1785-4677-AE61-591E37230F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.62.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9694B8-3208-405D-AA7E-3EC654F39E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.63.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8089AE52-1D23-4BF4-999A-45B7FC03C136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.64.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C056A6D2-AE6A-437F-B4CF-3834A46A3774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.65.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77999ED2-454A-45F4-B6DA-3E3849748349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.66.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E56629-C8A1-42EC-BAD7-EC15D04BBA81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F076D6C6-A978-4396-93D6-1CA95B381262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.68.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE9998D0-FADC-4023-87C4-D9030D4FDBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA32F899-379D-43A9-92DC-835B02F6F068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80093105-CD58-4087-BFEA-FD111E7B585F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.71.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B976172-8278-45EA-ACBD-84B9FADC485A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.72.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175C9EBA-AAF4-467A-B2CC-56D060D37DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.73.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9152788-1552-465C-AC01-A1A0C0DA87DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:3.74.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD68458-6054-4A1F-AEFB-2DBABB13E6F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EDD2C2-421C-4163-A9A2-2027DFFC50BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623687A6-EA03-469F-A898-0033F7B8E969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B818FC-9C3E-47A0-9D4D-A4990A3EB183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0D9680-9ACC-4CF1-A4A0-1505ACA0AAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2A5CA9-4513-4DBA-AE82-CE9C9AC025C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD0788A-603F-4869-A51C-4FDAD48BFC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4DF201-0021-457C-AF1C-57D2FC3CFD31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DFCF89-B961-4B10-AE3F-E729E93954A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:nt_utilities:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3242F68B-11BC-4B6A-8D41-E16A4474BD26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14829",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013653",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.dameware.com/support/security/bulletin.asp?ID=SB5",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13023",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.dameware.com/support/security/bulletin.asp?ID=SB5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxthon:maxthon:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C4259E-72DD-4CA2-829B-7030D80314A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxthon:maxthon:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66778BE-D743-47C4-B4EC-85B747FE7C4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14918",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.raffon.net/advisories/maxthon/multvulns.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13074",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.raffon.net/advisories/maxthon/multvulns.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:maxthon:maxthon:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458C16FC-674F-4C19-8C07-35C4D0623D9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:maxthon:maxthon:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66778BE-D743-47C4-B4EC-85B747FE7C4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14918",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.raffon.net/advisories/maxthon/multvulns.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13073",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.raffon.net/advisories/maxthon/multvulns.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:light_speed_technology:deluxeftp:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C160E0-2D7F-469C-9C82-441009194647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:light_speed_technology:deluxeftp:7.0.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC08432-F894-4B82-BB61-2DAC50C5EE34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/04/deluxeftp-plain-text-passwords.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14923",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/04/deluxeftp-plain-text-passwords.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the PopUp Plus 2.0.3.8 plugin for Miranda IM, with \"Use SmileyAdd Setting\" enabled, allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:popup_plus_plugin:popup_plus_plugin_for_miranda_im:2.0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE57204-0215-4600-8348-B41D77538441"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.miranda-im.org/showthread.php?p=9624",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.miranda-im.org/showthread.php?t=1070",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sec.org.il/coverages.php?c=89",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.miranda-im.org/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13048",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.miranda-im.org/showthread.php?p=9624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.miranda-im.org/showthread.php?t=1070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sec.org.il/coverages.php?c=89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.miranda-im.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocean12_technologies:membership_manager_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422C907D-45EF-485A-8DD8-77470EA91231"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14864",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013667",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=1865",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13046",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rebrand:p2p_share_spy:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E79D2F7-20AF-40AD-A76C-B5EAB2B49BF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry key, which may allow local users to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runtime_software:getdataback_for_ntfs:2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1A3C5C-EDA8-47B1-9430-3964CA81BEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salim_gasmi:gld:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED36FC52-E63D-480F-9141-C3BD9DE60DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salim_gasmi:gld:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "777D93B6-589F-4B76-841A-4343F3A24740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111339935903880&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14941",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-10.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Apr/1013678.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111339935903880&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Apr/1013678.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via large amounts of data in certain (1) time or (2) date fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_server:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BB96F0-CC3F-46DA-947E-AF6BFD0FBF23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_server:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC695CAD-7AFC-46D9-B33B-323FBF2C074D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111335285121320&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14879/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202431",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/lotus-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111335285121320&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14879/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/lotus-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "94082842-67EC-4709-A093-198B69DE582A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111336102101571&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-04.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wordpress.org/support/topic.php?id=30721",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111336102101571&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wordpress.org/support/topic.php?id=30721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centra:centra:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27168194-4235-4F90-BB27-C8DA4749E21B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111335198125566&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111335198125566&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in the Content-Disposition header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:javamail:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5102D9EA-DF23-473D-82A1-717FA9083635"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111335615600839&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111335615600839&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service (application crash) via a GIF image with the maximum depth start value, possibly triggering an integer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime_pictureviewer:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC2E52-1E1E-43ED-B35F-67D17E3C4397"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111335498626164&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111335498626164&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ij_untrusted_url function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:junkbuster:internet_junkbuster:2.0.2_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C4C4A0-3EEF-41C1-AF65-BAA564377F2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88537",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14932/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-713",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-11.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13147",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14932/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The filtering of URLs in JunkBuster before 2.0.2-r3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via heap corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:junkbuster:internet_junkbuster:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FA0A8D-941E-4FA9-B44F-E91CC8061415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:junkbuster:internet_junkbuster:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119FF846-5736-4A8C-9D3C-7F960F73B1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:junkbuster:internet_junkbuster:2.0.2_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C4C4A0-3EEF-41C1-AF65-BAA564377F2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88537",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14932/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-713",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-11.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13146",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14932/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attackers to execute arbitrary code via a large packet sent to TCP port 81."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumus:sumus:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07102557-A837-426C-818C-FFD847019CF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111350491800089&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111350491800089&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cpio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "3CAD60D3-330A-427B-B2DC-59CF390DAF9D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.2/SCOSA-2006.2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.32/SCOSA-2005.32.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111342664116120&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/16998",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17123",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17532",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18290",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18395",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15725",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-378.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-806.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13159",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-189-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A358",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9783",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.2/SCOSA-2006.2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.32/SCOSA-2005.32.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111342664116120&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/16998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-378.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-806.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-189-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DC6FE-BBB4-45AA-8A5F-F204E798DF07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A6A6-D840-48E2-AED2-BB8584E3817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D25A56-D654-46B2-9437-2AAEE74655B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BB9B87-8DBB-4FF9-8773-73281C3D52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37813D54-57C8-4C41-A42D-3C7BBAFA86B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1444794B-F893-44B2-824F-24211B872C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B019F0-A728-4803-B036-14E10A5B0389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E4A501-A198-4462-8813-3D355B5BC212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC0955F-486F-41FF-ACA6-0DF4D966E800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8451E82-F170-4182-A312-70DA75F96983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A7DAA3-2FFC-4AA3-AEB9-9ADF4A10AC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DB3E62-C18C-440D-B2C8-E14122D2EEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B95B55-7A5E-4504-B5B5-B7B03403E3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31419896-89F7-43A2-8B7C-3B92744BBC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559355CF-7FA8-4D90-8393-90C912F571C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355967D9-475A-49AF-A3FF-E0AC3668B289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111342594129109&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14962",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013697",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111342594129109&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PhpBB Plus 1.52 and earlier allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) groupcp.php, (2) index.php, (3) portal.php, (4) viewforum.php, or (5) viewtopic.php, (6) the c parameter to index.php, or (7) the article parameter to portal.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb_plus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.52",
            "matchCriteriaId" : "3AFB65B2-EB39-4600-A70A-29CBCB135E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb_plus:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E801BC-950C-470C-9B81-4EC8AFE94463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb_plus:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88419564-C16A-4F15-8251-3EF32B65F26A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111343406309969&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/phpbbp.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111343406309969&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/phpbbp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the (1) mode or (2) search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartor:photo_album:2.0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F885EB6-E2C1-427C-B57C-395F7E19A4CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111343406309969&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/phpbbp.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111343406309969&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/phpbbp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartor:photo_album:2.0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F885EB6-E2C1-427C-B57C-395F7E19A4CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111343406309969&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/phpbbp.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13157",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13158",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111343406309969&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/phpbbp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Calendar module for phpBB allow remote attackers to inject arbitrary web script or HTML via the start parameter to calendar_scheduler.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101667DF-0B3E-49A1-A0C9-BDBEEC9F89CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111343406309969&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/phpbbp.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111343406309969&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/phpbbp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute arbitrary PHP code by modifying the site parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:all4www:all4www-homepagecreator:1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8F294A-1F57-4BFC-8607-17D8B92A4C07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111350434925520&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13169",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111350434925520&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6060C8CB-1592-479E-86AD-AC180F855BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DAA88C-BADD-405A-9E66-5B0839595A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D5E3B7-5377-4CA8-BA0D-056870CB717E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C11931-B594-43EC-9698-7152B1DF8CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976B5923-1BCC-4DE6-A904-930DD833B937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5452DF1-0270-452D-90EB-45E9A084B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD12E6-F92E-4371-ADA7-BCD41E4C9014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FDF4FB-06FA-4A10-A3CF-F52169BC8072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B29018-B495-482A-8FF7-66821A178F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38718561-70C7-4E0D-9313-87A5E82ED338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D057064A-9B34-4224-97BA-4D5840A92BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C297DC-69B1-4BE6-A5EF-D320BD0CA968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4C1FFB-F6AA-4DED-9C54-DCB274F59A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338A92AC-92D2-40BF-9FAC-884AF6F74D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DB5610-03CE-425E-8855-70D5787029FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DFC86C-7743-4F27-BC10-170F04C23D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5170421-BA0C-4365-9CD6-BD232EA08680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5909AAA4-4AF9-4D23-87C5-5D7787909B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2170CFD0-2594-45FB-B68F-0A75114F00A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C07744-CAE8-44C6-965E-2A09BAE1F36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17E0E59-C928-49AB-BAA7-4AE638B376D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294FC65B-4225-475A-B49A-758823CEDECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6156B085-AA17-458C-AED1-D658275E43B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C898BE7-506D-49DA-8619-F86C7A9FE902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6419309-385F-4525-AD4B-C73B1A3ED935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F7E821-2908-47F1-9665-E9D68ECC242F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5688D95-89EF-4D2E-9728-2316CAC3CBE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/13171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider this a security issue, the bug can only manifest if the software is invoked on a sudoers file that is contained in a world writable directory.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IlohaMail 0.8.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the e-mail (1) body, (2) filename, or (3) MIME type."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "741553BB-B075-4745-A32F-1C76267CFB97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2406C5-63DD-40ED-9DAA-1B8F7A219311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AA4A5-3424-467B-9C7A-A6A194A4530E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD15B0BD-4F55-4621-9647-83278498F852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C47E86-3A40-44F9-BA77-CCF71299FBA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442C1FD4-0B39-4A43-BB2F-CD36CB35FAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378D7F7A-1DD3-410C-B75C-DF606B36A645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "357383D5-9425-4AF1-996E-4FEDE521895B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087C3A94-440E-44D8-8E96-4E5A4FBC43DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117E2B9F-CB17-42D4-B253-095A1ECA7AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32568CBA-0D60-4D41-A7B7-891E4A0FC5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E872C6F-13C0-4C23-83B0-0ED1F125E2A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9396082-5C2E-4BC8-9C95-939177A0008B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1385D0-2ACB-479B-B946-000EF4482E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE1635F-5270-40E3-83EC-9E24C6C6BC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA4CF33-095A-4E52-A65B-9836471487D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C4F32A-43C4-4C3B-8D8A-BCC729BC8035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970C1CDA-7D90-4C6C-A84C-717C8985B1CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4D5F8A-D8CF-45C5-8EE3-ED2335E14324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.8.14_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB4C5907-1D2B-478C-B7D3-7A2B0D1201F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilohamail:ilohamail:0.8.14_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A618C62-FE79-442D-B65D-CE9B8AC660C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14957",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier, as called by the auth functions in the passwd_mysql and passwd_pgsql modules, may allow attackers to execute arbitrary code via a URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igor_khasilev:oops_proxy_server:1.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A3BBF8-DC08-42C7-B6A0-F2605EF3972E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igor_khasilev:oops_proxy_server:1.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D13924C-4A28-483E-B6B7-B20BD4F901B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igor_khasilev:oops_proxy_server:1.5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AB0FA3-87FE-449A-9495-C92845D7F835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rst.void.ru/papers/advisory24.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-02.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-726",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rst.void.ru/papers/advisory24.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service (memory corruption) via a request for a zero byte file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0",
            "matchCriteriaId" : "A1795FAF-0500-4B9C-BD60-683E3C48F18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84373192-14CC-44E3-BEC5-60D10C15E286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF12CBB-9196-4E04-800A-1C00F23D122E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C164D0-C8E8-42A4-A32F-703DCFBE143C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D5B8BF-43EB-4D50-9791-B22B77651787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C877910B-52A8-4B0F-9306-B7BED762B97F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE29F0D-7E7C-4A02-98AC-673E2E96ED6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87631C2-ED8C-446E-B3C6-72A2DF672397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE8E88-383E-403C-9FE0-B303FD8DA937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27D9B36-43BD-4573-9E1C-3D65D458BD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE9AD22-98BA-4780-904A-765A1E331B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F19324-8BBE-4244-9AD2-99A8E537F867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D761DCC9-C21C-46A5-8CFF-66AE0AA9E858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C51E11E-E608-4648-A137-934D60441463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4AE960-E143-4B73-BDB9-22C070A29E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.4:2:*:*:*:*:*:*",
            "matchCriteriaId" : "E5283F7B-5BC6-4213-B5D3-93B963024FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey-project:monkey:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A53C73D-4BBB-47C7-AF5B-D81FDA93C83D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=87916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14953",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-14.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=87916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the libgss Generic Security Services Library in Solaris 7, 8, and 9 allows local users to gain privileges by loading their own GSS-API."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08003947-A4F1-44AC-84C6-9F8D097EB759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14971",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57734-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57734-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is completed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D262BDF-A782-4843-A62A-D8E4A85DCD9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25908E92-AD76-4CD0-A194-C3DF80EA730F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7281A0A9-BE74-4FD2-8201-105B49F4DE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190E9A51-D9FD-4F35-93D6-D98CD8487684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191BFDD7-31A8-4ABC-B81D-D6848D3FF7C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91BACFC3-0634-47CD-B8C4-6CC7A420F8BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DCBF5B-59C6-4740-BFE2-47DF929923BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8049AABC-72B1-4360-991E-B141E47DAC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F927CFC-B432-49BD-AA19-7F4B0E593FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD90005-E191-4E07-B432-B836ECC75349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6565DBC4-0E63-4F18-9F49-A418C4111E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1595C2B-3A59-4BBD-92C0-632C858D428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116A7D0C-0D20-44A9-A570-DBFE6D5D4127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8310254F-FDD9-481D-9E2C-A5D5A29ECBEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7409AC-B66F-4BEA-950C-EB3D698ACBFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:libsafe:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920D32B9-06B0-426C-981F-61730444AC4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.overflow.pl/adv/libsafebypass.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395999",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13190",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.overflow.pl/adv/libsafebypass.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgrey:postgrey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.16",
            "matchCriteriaId" : "FBB8E02D-F4C8-4209-899D-252BBBAF836D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgrey:postgrey:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC6D1958-DD3A-4F9B-A53C-53FF30F79165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgrey:postgrey:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A82434-BCF2-4287-B6DE-9AEC84088B50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.ee.ethz.ch/postgrey/msg00627.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.ee.ethz.ch/postgrey/msg00630.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.ee.ethz.ch/postgrey/msg00647.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111354538331167&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14958",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-18.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.ee.ethz.ch/postgrey/msg00627.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.ee.ethz.ch/postgrey/msg00630.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.ee.ethz.ch/postgrey/msg00647.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111354538331167&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs from HTTP POST queries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "4E0EB680-C052-4F07-A28E-052094F2F4B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723413BA-728C-466C-A529-BA3A23C5D079"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598C8726-BD8E-41F5-8A83-E06CF6F24C8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE992D5-371B-466C-8A08-884B146694D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0157.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0157.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Veritas i3 Focalpoint Server 7.1 and earlier has unknown attack vectors and unknown but \"critical\" impact."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:i3_focalpoint_server:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC5C0EF4-1BCF-4C84-B3F7-31C9E4BD4F9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14934",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013694",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276119.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/14934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276119.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LG U8120 mobile phone allows remote attackers to cause a denial of service (device crash) via a malformed MIDI file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lg_electronics:lg_mobile_phone:u8120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE188B2A-F43B-4799-90EF-F7F1A644D50D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013777",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395714",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13154",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/395714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:iseries_as_400:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "507AB1ED-75B0-4437-96F4-AA5E407DC4DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111358863001693&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111358863001693&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5484A9DD-01B6-42AC-AF93-F2B4CA33DB4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv12-y3dips-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111359320312609&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13170",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/ftopict-651.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://echo.or.id/adv/adv12-y3dips-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111359320312609&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/ftopict-651.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to obtain sensitive information via a direct request to sb_functions.php, which leaks the full pathname in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5484A9DD-01B6-42AC-AF93-F2B4CA33DB4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv12-y3dips-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111359320312609&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv12-y3dips-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111359320312609&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid (1) year or (2) month parameters, which leaks the full pathname and debug information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calendarscript:calendarscript:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D5A97F-B944-4CEF-BEBD-11023BCCC8AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calendarscript:calendarscript:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83075A79-3C00-49E4-A8FA-6C801D3B263B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013705",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv3.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service (hang)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E592549-5C28-4F0A-B407-06A33B3CFFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "57DC2FBE-6556-4113-83BF-ABCAC70CBDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA512F0-B382-407E-B75D-5D2D15E185BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "16727FF1-3CD7-4667-A2BA-2241A3AFEED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F60E165E-5B62-4D46-941D-E84603516D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6BCC24-EADB-4EB8-9142-01D34C307C45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "05017BA4-C9FC-4F7D-A5FE-9CE763CFE3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.0:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC700F7-8675-441A-8AB7-CEFF84639E7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57760-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57760-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1153",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the \"Show javascript\" option."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-35.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=289204",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100023",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9584",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-35.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=289204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1154",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka \"Cross-site scripting through global scope pollution.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-36.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=289675",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100022",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10339",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=289675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1155",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel=\"icon\"> tag with a javascript: URL in the href attribute, aka \"Firelinking.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/973309",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mikx.de/firelinking/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-37.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13216",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100021",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10655",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/973309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mikx.de/firelinking/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-37.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1156",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka \"Firesearching 1.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842CBD30-B4BA-4FCF-9152-9DBEBE59857C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14996",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013745",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/firesearching/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-38.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13211",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100020",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/firesearching/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-38.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1157",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka \"Firesearching 2.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842CBD30-B4BA-4FCF-9152-9DBEBE59857C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14996",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/firesearching/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-38.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13211",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9961",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mikx.de/firesearching/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-38.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1158",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"missing security checks\" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-39.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13231",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290079",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100019",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11734",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1159",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1013742",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013743",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-40.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13232",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290162",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100018",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10629",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-40.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1160",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The privileged \"chrome\" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-41.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13233",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=289074",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=289083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=289961",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11291",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-41.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=289074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=289083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=289961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200AFE97-E718-41C0-86A0-9FE8030AAA52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111352017704126&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14969",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013720",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/15518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13181",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13182",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111352017704126&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/15518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200AFE97-E718-41C0-86A0-9FE8030AAA52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111352017704126&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14969",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013720",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/15521",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13184",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13185",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13186",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111352017704126&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/15521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Yager 5.24 and earlier allow remote attackers to execute arbitrary code via (1) a crafted nickname or (2) a packet with a large amount of data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yager_development:yager_game:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "068103B5-BE4A-4B76-BF72-858EBDFF0C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yager_development:yager_game:5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC35B5A-2C80-483A-A12C-98E1B22B93A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yager_development:yager_game:5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFA7AA6-95D2-4062-A0B9-327531DC953D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/yagerbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111352154820865&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14967",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13177",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13178",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/yagerbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111352154820865&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yager 5.24 and earlier allows remote attackers to cause a denial of service (application hang) via a packet with a game header that provides less data than indicated by the length."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yager_development:yager_game:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "068103B5-BE4A-4B76-BF72-858EBDFF0C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yager_development:yager_game:5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC35B5A-2C80-483A-A12C-98E1B22B93A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yager_development:yager_game:5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFA7AA6-95D2-4062-A0B9-327531DC953D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/yagerbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111352154820865&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13179",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/yagerbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111352154820865&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:yager_development:yager_game:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "068103B5-BE4A-4B76-BF72-858EBDFF0C3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:yager_development:yager_game:5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC35B5A-2C80-483A-A12C-98E1B22B93A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:yager_development:yager_game:5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFA7AA6-95D2-4062-A0B9-327531DC953D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/yagerbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111352154820865&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/yagerbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111352154820865&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the username and password in cleartext in memory, which could allow attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:dameware_nt_utilities:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9",
            "matchCriteriaId" : "4276059F-F29F-4898-8436-748EE8AEEFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:miniremote_control:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9",
            "matchCriteriaId" : "D23CE158-8E62-414A-83E0-1CC8AFA91AE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111358825101305&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.shellsec.net/leer_advisory.php?id=7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111358825101305&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.shellsec.net/leer_advisory.php?id=7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may allow local users to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicmatch:jukebox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.00.2047",
            "matchCriteriaId" : "3A1ABCF7-6FBF-44D3-8AC9-1F16A8924E5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111358261404682&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-02.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111358261404682&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-02.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via the bstrSavePath argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicmatch:jukebox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.00.2047",
            "matchCriteriaId" : "3A1ABCF7-6FBF-44D3-8AC9-1F16A8924E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicmatch:jukebox:9.0.5059:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8BC38B-5F6E-4305-91CF-D4F859D1486B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111359007928030&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13167",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111359007928030&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mafia:mafia_blog:4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0C7626-89FE-4A87-8701-486CBD34E057"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://chrisnowak.org/projects/mafia/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111359511826958&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://chrisnowak.org/projects/mafia/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111359511826958&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datenbank_module:datenbank_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB854CAC-B47F-40A7-B081-662046C1FFB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111367077709726&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111367077709726&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datenbank_module:datenbank_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB854CAC-B47F-40A7-B081-662046C1FFB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111367077709726&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111367077709726&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3479C85-5B30-43FE-9492-5438D27B8DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E830E59A-57BE-4DE7-9AB4-E8E24359CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FCDC744-DAF3-449C-B3AE-BA420A636CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDBEDCE-787D-4523-A209-0CCFD6E41064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BBC5F9-1E40-47FF-9371-FD0C7A9458D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7292845-96FB-48BF-935F-9BD7772AFD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB182E1B-9E32-46CA-9B49-5029107955D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://coppermine.sourceforge.net/board/index.php?topic=17134",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111383800707880&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15004",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13218",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://coppermine.sourceforge.net/board/index.php?topic=17134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111383800707880&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmsoftware:simple_web_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F3A000-18D7-457A-A263-5215B602D932"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111384806002021&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111384806002021&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write data to a different file, which could leak sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B380F93D-5B13-49D0-B130-D45C2849A135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C8004D-639C-47BC-BE3E-CF5F06C1679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA27DC0D-CA9E-432F-85EC-74BCCC2B3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE79D7E9-DF50-42FD-A255-FF2A29131946"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY70032&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY70034&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY70032&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY70034&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD41B8B-72C0-411F-83E7-A82E1642FA26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A99166-28DF-4651-985F-922DBB06687E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9EACC7-1464-4476-9AA1-50DD902A3489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD343610-8BE2-4916-AF30-66B21330D84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D54B4D9-5218-41F9-A701-F960199EE520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B352FF6B-989C-4540-B434-9452851F745C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83F9841-49C7-410A-891F-365BBA043D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711485C5-F16A-4481-AEE3-E2AF1BAA09DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5B9395-DCEA-4615-825E-1C4B42F25E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7162DD-DFE1-478D-B87C-28C393E20941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01D1150-FCDE-47F5-BFE6-F06A294D7B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D673B88-A9D9-4D22-9531-7F06791BC551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538021A3-2A6E-446F-B14D-4DCC7A470E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1A2A26-1187-46BE-8EFC-F3C325679245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E70B0A6-31C9-4D78-B4B9-E75B45B6368C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70274C3-7CA0-49A2-B63C-7DAF492CCD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C4A319-0EA6-47E0-831A-27530DCF714E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1009D90-9851-441B-A2E2-FA5B676E8182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A3D3F-CF10-478C-9206-DB468BCA4702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B42570-F094-4C25-B246-6439D3FF4B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.051:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A30BB5-2C3F-4C39-8CDC-CC0CC280384C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753BF8DE-D225-4301-A6A6-50CD60B34234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC37A972-11D7-4C85-A8DC-5EDE808629F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.080:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7131C0-4FE1-4D69-9B21-8A9BFADE2A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.090:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499BF74-CA64-4192-A45F-0D8B30C1FF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E9BC53-C2EC-43B8-9B5D-40675CF4C335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4702AEBE-E774-4015-974C-761901D50697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC9875A-3D23-4E4B-9A18-F8F86A62E5DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AED1941-33C5-4C29-BC85-F43B0BE3920B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED34F-0D69-4A4F-B59B-15437E991075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDACA626-1687-4192-A2E8-C74823B715A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9641C23-B30A-4CB2-A348-BD708F68F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0852A462-22ED-422D-A454-0A6E026D9AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEF73D-767D-4BF2-AA12-67268719A404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23522A64-FD03-4C5B-9A8A-5E7CDDC65CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957C7CA1-DD36-409C-B7E5-01B719B4695E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0813F3-1886-481E-8822-4BD199C4934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D25A7CA-ED9D-4562-8965-D4906D1BE5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F2D028-F2F9-4CE0-A24B-7DB44D488D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EE7A9B-5688-4933-95B9-476873D44A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30A57D7A-B989-4D82-B667-029A245AA6D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C664186B-DD40-490B-B2DE-4279B00102F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E1D6C5-20FE-4514-B618-312BB19E5F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5017EA5-7188-4293-9FDF-5D23DCB40B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6C5F07-330D-46C5-8A8B-8DF734F4640F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4A574A-5B2A-4769-B932-E1736564160A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C644D728-1DD4-48E0-9E42-35E836006F41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9425C1F-5E6A-489A-9A8B-9156E79FEAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8347DA-13F8-40E9-B9EA-2703C049AFA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9C3443-526E-4D68-9C7E-F3432BECE6C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC77E1B6-E368-4ECD-8459-69C718CE5409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89047FD-39F0-4614-B1EC-D13BAF57405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CDF2120-F341-4C2E-88C1-A6C76626BFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DFC15C-3513-4E94-B46D-94FEA0D627FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E068D3-F6B5-4102-B9FA-949E2FAA33D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6BD551-EC6A-4C77-B9E7-B9CF3DC21021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B0FE2D-02BC-4081-B172-64A74389C5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43433ECE-8225-43EE-9F5E-FBB170B60CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ABAE43-0EEF-44D5-AB36-44DA54290122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD33CE40-DFC9-4BDC-BF4F-9E0B268B8503"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013723",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.webmin.com/uchanges.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.webmin.com/uchanges.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F7AD5F-99F2-4549-9407-4F077B2D6DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B720808-BCFF-4917-82E3-2F7B11355406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119C936-B996-42F1-9141-D3DECAB1949E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D1AB63-14C5-4343-962B-BC8FC03B412A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:6i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38985A2-F5F6-4157-92C0-CE80B7F37013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:9i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E934ED-92DE-47C3-94C4-6714A32FC32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:10g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D0E1F5-89E9-4C1E-B20A-6EF175D8AE70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.red-database-security.com/wp/sql_injection_forms_us.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/securitynews/5HP0I0UFFI.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/wp/sql_injection_forms_us.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/securitynews/5HP0I0UFFI.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, related to SNMP authentication, allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-0703."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:32_color_1.2.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "105701EA-DF2A-4EE1-93CA-7480649CD8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:40_color_1.2.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185CE593-084B-4724-8834-662EE9876933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_165:7.47.30.000:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "665F5E03-4D1A-4F4C-B05D-633770060CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_165:7.47.33.008:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "7FB37123-D747-4F5B-9098-A5B91DF50BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_175:7.47.30.000:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "7A69E610-69B3-473B-AE11-6AA61612BB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_175:7.47.33.008:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "5866F38D-9CCB-4C8C-B6CB-79CD6D5F399B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2128:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "EA305D4F-4307-4043-A749-B6BA0B8A8492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2636:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "89D31C14-FC15-456F-A5A3-3DD081C87CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_32_color:01.00.060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8A6E12-0605-473A-B926-179A40A59E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_32_color:01.02.053.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F716D13-4E06-468E-91FB-5F34E67764D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_32_color:01.02.058.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "919A448E-5067-4293-96BF-31345AF32592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_32_color:01.02.077.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1AA4448-47AC-4F0B-B4C3-BB82A6185590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_35:3.028.11.000:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "6FAB36E8-E1F6-4B42-9482-477E2D57E6C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_35:3.97.20.032:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "E23C7444-0B9F-4701-8C0E-0B6D71EEC9CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_3545:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "4FE28C1C-E8D2-4161-B441-26A70E6C9A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_40_color:01.00.060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3391F869-C275-47F9-945F-E5F61BAEC540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_40_color:01.02.053.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B081F146-6344-413A-92DB-F7244A8D2791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_40_color:01.02.058.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC4CE10A-7DD8-4B54-8EB8-44F2396FFF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_40_color:01.02.65.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD6CD7D-AFB2-4CCD-86CF-5160AD95762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_40_color:01.02.077.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CC9163-D6D7-43A1-9FED-593FA5216964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_45:3.028.11.000:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "BA1F488B-E149-4A00-98DB-7ABD3FF16D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_45:3.97.20.032:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "71D56AEA-2154-4A52-8401-69C5929BCB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_55:3.028.11.000:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "D48E8756-C3B3-47A5-A7A6-606150B4EE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_55:3.97.20.032:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "D3D9C688-7F13-4B9A-83C4-198516C61C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_65:1.001.00.060:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "9047BA7F-AC2A-4B39-98C3-203A9DCC8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_65:1.001.02.084:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A50469C9-B15C-4809-B7D5-5F859F1A3FFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_75:1.001.00.060:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "128FA7C0-FE3D-4A66-A1EF-B7415BA619D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_75:1.001.02.084:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "7308C737-0B78-4AE7-B11D-B95469B46987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_90:1.001.00.060:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "59BA012E-9CB1-47FA-AC8A-B67DF9F42C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_90:1.001.02.084:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "6B33E637-C658-4F5D-B2A3-97189FC5DE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m165:6.47.30.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EDDC23-7865-43BA-8EB5-178F1AA46542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m165:6.47.33.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3458D869-B7FB-49ED-9555-51541658815E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m165:8.47.30.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B6F9EB-3150-4D4D-8E09-5D7AD7CC6AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m165:8.47.33.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06114132-3911-49EA-92EA-09E6566A58A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m175:6.47.30.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724C0CB0-E3AA-4C45-9C63-B8A7AC2E00EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m175:6.47.33.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6B9223-1B84-45B2-9C19-0C45EF3F3013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m175:8.47.30.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B71EBA-A5F2-4CA6-89B4-03A7DACA58F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m175:8.47.33.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "372C429C-0344-411E-9C1E-813C235F25BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m35:2.28.11.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCE1756-7C2B-45F8-921E-BDD194FDCCEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m35:2.97.20.032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C02A9E7E-3955-46FB-AA84-28291DA9B16D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m35:4.84.16.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACAE4E5-E2DC-414B-A7BF-41ED3C79EF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m35:4.97.20.025:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23228697-D237-40A4-8BCA-FB3D4A3BD301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m35:4.97.20.032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE85286-F4C1-4663-9A10-8B34AD18A4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m45:2.28.11.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E8092-F39E-4936-8871-04A46131A70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m45:2.97.20.032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10D1EC6-525A-42B4-8C33-B9BC69965FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m45:4.84.16.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA7E00A-669E-4BE3-8699-CDE44B88A168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m45:4.97.20.025:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F224CDF-18C5-40EA-A166-19D8908B11D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m45:4.97.20.032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDB25A9-158E-43F4-998F-08D3BA72C72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m55:2.28.11.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C20ED6-45DD-4C76-A41C-2F27C50E9CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m55:2.97.20.032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01413B3-6DB1-446E-BD13-756501F83550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m55:4.84.16.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BCE475-2042-4B90-A38C-65D90EE00980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m55:4.97.20.025:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A08818B4-0EAA-4D14-84AE-B93BCDA2C354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_m55:4.97.20.032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF92AD01-1E76-4498-9C05-7F8AC94EFD05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14507",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13196",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF (\"%0d%0a\") sequences in the forwarder parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5",
            "matchCriteriaId" : "DCDC861D-BCEF-43FA-ABDD-1A48880B57CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111359804013536&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/pnuke.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111359804013536&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/pnuke.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOTE: this issue has been disputed by the vendor.  PHP remote code injection vulnerability in loader.php for Ariadne CMS 2.4 allows remote attackers to execute arbitrary PHP code by modifying the ariadne parameter to reference a URL on a remote web server that contains the code.  NOTE: the vendor has disputed this issue, saying that loader.php first requires the \"ariadne.inc\" file, which defines the $ariadne variable, and thus it cannot be modified by an attacker. In addition, CVE personnel have partially verified the dispute via source code inspection of Ariadne 2.4 as available on July 5, 2005"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ariadne:ariadne_cms:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39CAEC7C-EF6D-41AD-906C-0C09BD909492"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510, R520, and R530 allows attackers to cause a denial of service (IRC shutdown) via certain inputs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:os_400:r510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF9C195-FC4A-4DF4-818A-2021E986968A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:os_400:r520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90930D05-EFEC-4E7A-8032-A781C0FEDE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:os_400:r530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C7D8FC-269B-4123-BA90-784FB7ECEE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=nas29afd3991f5f290b086256fdb0053b293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=nas29afd3991f5f290b086256fdb0053b293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the Search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DD6FBA-DE95-4D53-8CB3-9676B6B6CDE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/15760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13213",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the correct sequence number but the wrong Acknowledgement number, which generates a large number of \"keep alive\" packets.  NOTE: some followups indicate that this issue could not be replicated."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "237D7C18-C8D6-4FDB-A160-FA17DD46A55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "35346A7B-2CB5-446D-B0C3-1F21D71A746D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "064F4E76-1B89-4FA5-97ED-64624285C014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*",
            "matchCriteriaId" : "089A953C-8446-4E6F-B506-430C38DF37B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EA262C44-C0E6-493A-B8E5-4D26E4013226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*",
            "matchCriteriaId" : "416F06DD-980E-4A54-822D-CBA499FD1F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F66DC6FF-2B3D-4718-838F-9E055E89961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*",
            "matchCriteriaId" : "656AE014-AEEC-46E8-A696-61FEA7932F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*",
            "matchCriteriaId" : "A08D0EA1-DA1B-4C52-883A-3F156F032517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "DA267420-56C5-4697-B0AA-52932F78B24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*",
            "matchCriteriaId" : "93BA426E-DD51-44AC-BE78-3164670FF9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "224F8968-9F4C-4727-AAA3-61F5578EF54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*",
            "matchCriteriaId" : "02BE9817-E1AE-4619-8302-CA7AA4167F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "363E3895-A19B-42EC-B479-765168DC0B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*",
            "matchCriteriaId" : "FBBBF25A-709B-4716-9894-AD82180091AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "407DA6E8-0832-49FE-AE14-35C104C237EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*",
            "matchCriteriaId" : "88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "81B7961D-151D-4773-80CB-CCD0456BFEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*",
            "matchCriteriaId" : "82781A72-A34F-4668-9EE8-C203B04E3367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "AFE612D2-DF38-404F-AED1-B8C9C24012DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*",
            "matchCriteriaId" : "12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B5CAF64E-98AA-4813-A2A2-5AC3387CF230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*",
            "matchCriteriaId" : "BCDFDBBA-6C4F-472A-9F4F-461C424794E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "BCC5E316-FB61-408B-BAA2-7FE03D581250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*",
            "matchCriteriaId" : "EDDD8DA8-D074-4543-AEDF-F856B5567F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "CA7BA525-6DB8-4444-934A-932AFED69816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*",
            "matchCriteriaId" : "90CFA69B-7814-4F97-A14D-D76310065CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "2FECD4B0-23A0-4C0B-9888-D28A5941D848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*",
            "matchCriteriaId" : "AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Apr/0358.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Apr/0383.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Apr/0385.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Apr/0358.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Apr/0383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Apr/0385.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to gain privileges via a malicious C:\\program.exe file, which is run by MMFWLaunch.exe when it attempts to execute launch.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicmatch:jukebox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.00.2047",
            "matchCriteriaId" : "3A1ABCF7-6FBF-44D3-8AC9-1F16A8924E5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111352290711509&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013718",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-05.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111352290711509&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-05.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting (XSS) attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicmatch:jukebox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.00.2047",
            "matchCriteriaId" : "3A1ABCF7-6FBF-44D3-8AC9-1F16A8924E5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Apr/0212.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013718",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-04.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Apr/0212.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-04.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument.  NOTE: since this overflow is in the command line of an unprivileged program, it is highly likely that this is not a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x-ways_software_technology_ag:winhex:12.05_sr-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C8E89D-46CF-4E57-9020-6067108C1F8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.unl0ck.org/files/papers/winhex.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.unl0ck.org/files/papers/winhex.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:3.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D20FEBAF-54D3-4E39-A75F-6B282F430F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "820F5A70-B901-4D0E-BD24-236B46B3608A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA60206-E061-428B-8A17-A20220E9A2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:4.20b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2179EE28-DDAF-42C5-97B3-6E2F90BB758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7AF2063-20C8-4D74-9C7A-11186430BECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1DB4CF-7963-4127-A07D-A9C31B92D92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E7F992-38A6-4952-90BD-1C80CB145AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603022E0-695B-4E41-A763-13344EFA4CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A67262-7B82-4ED5-9210-216CC886FC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A687ED1-9AC1-4319-8362-C923693626D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:4.051:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79907AAC-DE61-4215-A409-AC4E6B0E076B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/04/comersus-asp-shopping-cart-variable.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013747",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13125",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/04/comersus-asp-shopping-cart-variable.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote attackers to inject arbitrary web script or HTML via the chat name, as demonstrated by using an IFRAME to redirect users to other sites."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcamxp:webcamxp_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.16.467",
            "matchCriteriaId" : "78ABA434-939D-4BEC-B6F5-8A317BDD3A46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vulnerability has reportedly been fixed in the beta version 2.16.478."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which takes up too much display space and prevents the chat frame from being properly rendered."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcamxp:webcamxp_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.16.468",
            "matchCriteriaId" : "E1159AF4-E1B5-4545-BA3C-98C84D6AEE7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013753",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrophe (\"'\") in the author name in a document, which allows attackers to execute arbitrary script via extra attributes when Web View constructs a mailto: link for the preview pane when the user selects the file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.greymagic.com/security/advisories/gm015-ie",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396224",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13248",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.greymagic.com/security/advisories/gm015-ie",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7A7B90-9086-4A10-8FB4-1C1D909BC173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32310AFE-38CC-4C6C-AE13-54C18720F2C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_pre6",
            "matchCriteriaId" : "D8EEE614-9EB1-4217-B962-AD3EECD7C689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C87793C-6577-4E67-BBFD-768FAF1BF88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE9819F-A620-41A6-A102-41746457753F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D6474F-C678-498C-9A61-287E2FDD8B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06402BDD-77EA-447A-8C34-E1A0F41D0628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7387773A-81F1-464A-9489-E103C51BED46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03194CD-2CFA-4F11-90DE-3573BA06B6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C39D002-E323-423D-8895-9179DFDF6535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E621C7-A5BA-4D71-9D57-4311360FF3A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C13E4FD-A874-4366-A426-19665B43F1DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8F4701-C5CC-4FBA-AFF6-5AB890306AC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_rc3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3295F345-26D0-4B23-848F-83CFE067EA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_rc3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2915303-7347-4811-B7D2-5AF367081797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1_rc3c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6976E802-011F-44A2-B668-F9D643FC7A86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/librtsp/rtsp.c?r1=1.18&r2=1.19&diff_format=u",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/mms.c?r1=1.55&r2=1.56&diff_format=u",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Apr/0337.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15014",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-19.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mplayerhq.hu/homepage/design7/news.html#vuln10",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mplayerhq.hu/homepage/design7/news.html#vuln11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/librtsp/rtsp.c?r1=1.18&r2=1.19&diff_format=u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/mms.c?r1=1.55&r2=1.56&diff_format=u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Apr/0337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mplayerhq.hu/homepage/design7/news.html#vuln10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mplayerhq.hu/homepage/design7/news.html#vuln11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote attackers to obtain sensitive information and execute SQL commands via the cat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101667DF-0B3E-49A1-A0C9-BDBEEC9F89CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111384185116335&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111384185116335&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "553BAC35-0A37-40C2-A150-F34D59D097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54497B9-D154-4751-9871-BF2D650F76AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111385690419118&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/948486",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-117A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111385690419118&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/948486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-117A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitrary files via hex-encoded null characters (%00) in the middle of \"..\" sequences in the template parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anaconda_partners:foundation_directory:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB9CA6D-A115-4108-9CB6-C665F2258300"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111393495916656&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111393495916656&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infopop:ultimate_bulletin_board:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D01C4960-1118-4501-9492-182F6C15B553"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111393619021575&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15024",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13253",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111393619021575&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in main_index.php in AZ Bulletin Board (AZbb) 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the (1) dir_src or (2) abs_layer parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.07a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F13EE84F-407A-48BD-8264-EE27B21435E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.07b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34B697A-6B44-420F-84D2-F61C3B0CD792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.07c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "640159FD-4985-49A2-A0B5-34C73AE7579F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://azbb.cyaccess.com/azbb.php?1091778548",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111401838521857&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15013",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00068-04192005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://azbb.cyaccess.com/azbb.php?1091778548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111401838521857&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00068-04192005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated users with administrative privileges to delete arbitrary files via a .. (dot dot) in the URL to admin_avatar.php or admin_attachment.php or (2) remote attackers to enumerate files via a .. (dot dot) in the attachment parameter to attachment.php, which displays a different message when a file exists or does not exist."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.07a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F13EE84F-407A-48BD-8264-EE27B21435E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.07b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34B697A-6B44-420F-84D2-F61C3B0CD792"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.07c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "640159FD-4985-49A2-A0B5-34C73AE7579F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.07d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B37A9381-D537-4604-A5F7-F4940FFE9BAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://azbb.cyaccess.com/azbb.php?1091778548",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111401838521857&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15013",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00068-04192005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://azbb.cyaccess.com/azbb.php?1091778548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111401838521857&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00068-04192005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the (1) ab_id, (2) page, (3) type, or (4) lang parameter to index.php or (5) category_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E440ECF0-C87D-432B-91D6-C1D61FF780C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598C8726-BD8E-41F5-8A83-E06CF6F24C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91357C7-8028-4870-AEDB-DACEC0EE1E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE992D5-371B-466C-8A08-884B146694D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111401760125555&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-24.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=320768",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00069-04202005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13212",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111401760125555&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=320768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00069-04202005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arbitrary SQL commands via the (1) filter or (2) cats_app parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E440ECF0-C87D-432B-91D6-C1D61FF780C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598C8726-BD8E-41F5-8A83-E06CF6F24C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91357C7-8028-4870-AEDB-DACEC0EE1E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE992D5-371B-466C-8A08-884B146694D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111401760125555&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14982",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-24.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=320768",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00069-04202005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13212",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111401760125555&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=320768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00069-04202005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a crafted packet to TCP port 61427, which causes an invalid memory access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nelso_software:desktop_rover:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "1070A80A-C145-45F2-B777-9EC609FF55F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111401676906915&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evilpacket.net/advisories/EP-000-0003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111401676906915&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evilpacket.net/advisories/EP-000-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knusperleicht:shoutbox_script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "D6A349BA-74D6-4B03-953D-35EC6CF60AE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111402253108991&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111402253108991&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecommerce-carts:ecommpro:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7338BBF-3CC9-47AB-BD02-604E445DDC47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111402179605925&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ihssecurity.com/download/advisory/ecomerce-cart.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111402179605925&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ihssecurity.com/download/advisory/ecomerce-cart.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference cat_for_gen.php, then including the code in the m_for_racine parameter, which is then written to cat_for_gen.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netref:netref:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE71C51B-B384-4428-BAF3-B80CB46EC39D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111403947305600&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15040",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111403947305600&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Admin_id field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocean12_technologies:calendar_manager_pro:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A876D7-2FFD-4F6B-9862-A5B584F202C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111401502007772&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013762.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111401502007772&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Apr/1013762.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) nChannel parameter to default.asp, cat.asp, or detail.asp, (2) the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp (3) the iCat parameter to cat.asp or detail.asp, (4) the iData parameter to detail.asp or result.asp, the (5) POL_ID, (6) POL_PARENT, (7) POL_CATEGORY, (8) CHA_NAME, or (9) CHA_ID parameters to inc_vote.asp, or the (10) tfm_order or (11) tfm_orderby parameters to toppages.asp, a different set of vulnerabilities than CVE-2005-1236."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duportal:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5C2D03-023A-47DE-A0EB-E950DD562ED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duportal:pro_3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70AA689-43ED-44C2-A5F3-6E3B885D845C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duportal:sql_3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B60BE8D7-8F54-423E-B13F-59790E5D415F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111401172901705&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/duppro.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5TP0O0AFFQ.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453316/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111401172901705&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/duppro.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5TP0O0AFFQ.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453316/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to (1) init.inc.php or (2) zipdownload.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD2CA54-6534-4A4F-9667-8A594B7E43CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111402186304179&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15004",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-42.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111402186304179&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-42.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD2CA54-6534-4A4F-9667-8A594B7E43CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111402186304179&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-42.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111402186304179&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-42.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gzip:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D50385A-1D5D-4517-B5FA-1BB60BA4C484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gzip:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "079F39E2-69BF-47AC-87CF-A47D37EA27F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305255",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111402732406477&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-357.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15047",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111402732406477&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-357.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. (dot dot) in a cpio file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cpio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "3CAD60D3-330A-427B-B2DC-59CF390DAF9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.2/SCOSA-2006.2.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.32/SCOSA-2005.32.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111403177526312&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-189-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.2/SCOSA-2006.2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.32/SCOSA-2005.32.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111403177526312&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-189-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This is defined and documented behaviour:\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=156313",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via \"..\\\" (dot dot backslash) sequences in a GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magnus_lundvall:yawcam:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2DFA78E-F539-41F8-9918-6005490A2A20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111410564915961&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/Yawcam0.2.5-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111410564915961&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/Yawcam0.2.5-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrary web script or HTML via the (1) term or (2) description."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaws:jaws:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BFB2A5-78DF-40AE-B0DD-C79D5052C642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaws:jaws:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C529BB5-608A-4AEB-A6D2-E40F2C3C0CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaws:jaws:0.5_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68B0545-D58D-48C5-A405-2451F888D125"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Apr/0416.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5RP0M0AFFS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13254",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Apr/0416.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5RP0M0AFFS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB54F05-CBE0-4A3B-9941-A5509BF40EA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57763-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/82356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57763-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/82356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to auction_rating.php or (2) ar parameter to action_offer.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb-auction:1.0m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F5D33F-0B64-4723-A4E8-36B2C0414C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb-auction:1.2m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C0E5A1-0E90-42BB-92F4-6DECACC18BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15029",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013779",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.aria-security.net/advisory/phpauction.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15704",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpbb-auction.com/sutra5600.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441190/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13283",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13284",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv9.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.aria-security.net/advisory/phpauction.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpbb-auction.com/sutra5600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441190/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv9.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb-auction:1.0m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F5D33F-0B64-4723-A4E8-36B2C0414C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb-auction:1.2m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C0E5A1-0E90-42BB-92F4-6DECACC18BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013779",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpbb-auction.com/sutra5600.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv9.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpbb-auction.com/sutra5600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.snkenjoi.com/secadv/secadv9.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "evaluatorSolution" : "Fixed updated version on http://www.phpbb-auction.com/"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to channel.asp or search.asp, (2) iData parameter to detail.asp or inc_rating.asp, (3) iCat parameter to detail.asp or type.asp, (4) DAT_PARENT parameter to inc_poll_voting.asp, or (5) iRate parameter to inc_rating.asp, a different set of vulnerabilities than CVE-2005-1224."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duportal:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD3B87E-BC56-486A-8325-86DCFF9E0811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duportal:3.1.2_sql:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687669BD-3D33-47CB-9228-F557BEEFA446"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/dup.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13288",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/dup.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:china-on-site:flexphpnews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.3",
            "matchCriteriaId" : "F34486C5-0677-4331-A51E-7A6FBA799EE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-April/001506.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/23247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-April/001506.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/23247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:iseries_as_400:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "507AB1ED-75B0-4437-96F4-AA5E407DC4DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via \"..\" sequences in a GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raz-lee:security\\+\\+\\+:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1B7F80-7DE7-4242-8675-FF45FE61E887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fix is available on http://www.razlee.com/"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via \"..\" sequences in a GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bsafe:global_security:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A01F872-F95E-46E8-B153-8C6BA84D1B05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via \"..\" sequences in a GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safestone_technologies:axcessit:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F03ACAD-A202-416A-A6C8-E34F05C9631E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AFC6EE-41C7-4369-8BA1-DDBF8A744ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09F36C1-CBC0-489E-B62D-4590A2E5A4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F0067D-534A-4238-A244-D92A73845432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEC422E-49BC-41D4-9F71-B834D4108EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D854161-28AA-4386-B90A-97F9692CE37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A0FA49-99DC-4691-968F-6AEB76B74370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0C6A2C-992B-45A0-8E0C-1AE983881337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292A77C7-8C7B-4F3A-B7FD-3505A9F37E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77FC97A-3BB2-4AA5-B0D6-C0D1FBEA5FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9393EF-083A-4662-BC7A-89979C2B8546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DE6A4E-6BCE-499E-B017-1E0F8D1F65B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD90730F-BF26-46C5-83F8-039CD661C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E70F32-2F26-4836-8A4F-0A0B06EAD371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE506B8C-245E-4A7E-A24C-FABB1D4531EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934382C1-088A-4AEE-A71A-E9802AC9C1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9028E-1BDE-4BA0-A479-7A30020331D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D02E4C1-2BA7-4BC0-9C11-D0F74181DF82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14993",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=322146",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13301",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=322146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1278",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.1",
            "matchCriteriaId" : "59B480A7-0CF4-4525-8902-E9EBD0BFD1EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-417.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-421.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430292/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-417.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-421.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430292/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1279",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.3",
            "matchCriteriaId" : "3D879C42-EA27-462C-84BB-5C61E5635077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-850",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-417.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-421.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396932",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430292/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13389",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9601",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-417.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-421.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430292/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1280",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.1",
            "matchCriteriaId" : "59B480A7-0CF4-4525-8902-E9EBD0BFD1EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-417.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-421.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396930",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430292/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13390",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10732",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-417.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-421.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430292/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the src parameter in an IMG tag, (2) User settings, or (3) Address book input boxes in the webmail interface."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:argosoft_mail_server:1.8.7.6:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "07FA7F76-B59E-4E14-88C6-B9BAD88E90C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111419001527077&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111419001527077&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if \"Allow Creation of Accounts From the Web Interface\" is disabled, via a direct HTTP POST request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:argosoft_mail_server:1.8.7.6:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "07FA7F76-B59E-4E14-88C6-B9BAD88E90C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111419001527077&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111419001527077&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by creating a malicious C:\\program.exe, possibly due to the lack of quoting of the full pathname when executing a process."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwin:bitdefender_antivirus:professional_plus_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EDF3A8D-A9B7-4B8C-AC4B-FB1CDEB398B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwin:bitdefender_antivirus:standard_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C8950F-5C6B-4147-B976-1FD300A29D5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111420400316397&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111420400316397&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the \"in\" value in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AD9E61-5148-47EB-8B7A-9763C016659D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131A3B64-C5D0-4706-9DCC-8EE847B46FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287003D5-16D8-4924-8614-EC7634444B20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89F4219-5E80-45B0-A322-9CD335FB5634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "507E4E6F-4F0D-4FA3-820F-269973B71B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C02B7-11CC-4DC0-94AF-8B7AA505E4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4291AB6-FC0F-4206-B790-103A64A09AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC3EA02-502C-4FEE-A33C-F74E5C5F2F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7DB980-7D75-4E1F-AE2C-F83B4BA2C6A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_press:acs_blog:1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26D76BD-877E-4A3A-BBFB-16F70B42C03B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111428190921388&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013795",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111428190921388&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-cart:e-cart:2004_1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DC87E-2ED1-40A6-872C-A68BFBBC4C9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111428818425864&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013780",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111428818425864&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u parameter to profile.php, (2) highlight parameter to viewtopic.php, or (3) forumname or forumdesc parameters to admin_forums.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111428283721756&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://neosecurityteam.net/Advisories/Advisory-14.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111428283721756&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://neosecurityteam.net/Advisories/Advisory-14.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to (1) tellAFriend.asp or (2) addToWishlist.asp, redirect parameter to (3) access.asp or (4) login.asp, message parameter to (5) login.asp or (6) error.asp, or (7) sku or (8) name parameter to searchResults.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elemental_software:cartwiz:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983269A3-3EE9-44AB-9846-AF222CA728D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111428393022389&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013792",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111428393022389&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary SQL commands via the (1) language, (2) bpic, (3) idcategory, (4) content, (5) keyword, or (6) idproduct parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storeportal:storeportal:2.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF1CB1E-B337-420A-84DE-4EE3824118A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/advisories/storeportal.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445131808328&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://digitalparadox.org/advisories/storeportal.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445131808328&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the \"change user\" field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF785E3-20AB-4480-9DE1-51AB0F9F71CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837FA32B-DDF5-4168-96A4-8F6A696D754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:pro_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECFF54F-AC25-4B0C-B6C5-1388924ACEFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111444886429814&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111444886429814&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:citat.pl:citat.pl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273AEC45-E3A5-41AB-9020-F111CD3B2979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445477910178&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445477910178&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper.cgi:hyper.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA29127F-7296-42B1-87CA-71F2F5A4AA71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445410220152&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445410220152&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaden_mckee:bblog:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F5AC1-E91D-4787-BBB2-48B520DFD3DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013811",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15754",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15755",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEF4BFD-3D4E-42AB-A14C-F5182D733EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFC653F-2CE5-4B7F-9667-0812F4088E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFA483A-55E3-4369-B98E-CCE29FE83D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332716BF-5B78-4020-B8E2-78C3507ECC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561439C7-E9C7-4DCF-BAEF-71FB13629B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E4B3F3-4CBC-4693-825E-F19050CA3448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF553D1A-F969-44E3-A630-43450019DF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24725EFE-1EFA-46C2-9AC0-64750981CA6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B95056-7F35-49EA-85B5-A656EFF91736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8F0328-C502-47C0-A57A-D40AE89E1DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3C25B3-8E5F-4FF8-A126-5E1857C3D7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEF89F9-71DA-4845-B867-487866F44A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62495452-BE3C-4B50-BB7B-3B652D9A6B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E24D0C0-ADFE-4926-AD21-7F969848F5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE910A6C-25DB-462F-80A9-7D30AFA44BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yappa-ng:yappa-ng:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071E25C1-D6DF-4357-86EC-21A03091A3BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15107",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=323206",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15828",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13372",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=323206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:passwd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21CBEB3-49DA-4DF7-93B2-5C15427AB735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:passwd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EB6F7B-EA67-4935-88FB-F15D585F6F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:passwd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5856C7BD-1C10-4527-8C6A-0A75EC1B751E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:passwd:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A42BBE35-8FE6-46E0-9A43-09EA7830BC32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/passwd/docs/CHANGES?r1=1.1.1.1.2.28&r2=1.1.1.1.2.33&ty=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002147.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15075",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.horde.org/diff.php/passwd/docs/CHANGES?r1=1.1.1.1.2.28&r2=1.1.1.1.2.33&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF0047C-B448-4F9F-8F65-751B0EDC42C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/kronolith/docs/CHANGES?r1=1.69.2.39&r2=1.69.2.41&ty=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/kronolith/Week-of-Mon-20050418/005347.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15080",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.horde.org/diff.php/kronolith/docs/CHANGES?r1=1.69.2.39&r2=1.69.2.41&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/kronolith/Week-of-Mon-20050418/005347.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62B3690-E21E-41C0-8164-797440AA4F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15CECD5-8D65-47C3-AE6B-D810E0EC5930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba:1.2.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A32F2F3-55CE-4DB4-B394-0ACBB59E2D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5A512E-547C-4A05-A23D-295AC19E1BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12B3BD0B-306D-4060-817B-E9A6704AE744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba:1.2.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749E6007-3C33-4BF9-91E8-DDDC7F4DFD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834ED831-2F4E-424C-B1EE-D3A8C09CFB02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/turba/docs/CHANGES?r1=1.61.2.74&r2=1.61.2.77&ty=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/turba/Week-of-Mon-20050418/004182.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15074",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.horde.org/diff.php/turba/docs/CHANGES?r1=1.61.2.74&r2=1.61.2.77&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/turba/Week-of-Mon-20050418/004182.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:accounts:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "346C029C-6FE5-4807-BCC8-7AE8B5D6316F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:accounts:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11BB058D-D5B3-48F5-A9C4-9DA5A5127862"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/accounts/docs/CHANGES?r1=1.1.1.1.2.15&r2=1.1.1.1.2.18&ty=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002146.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15081",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.horde.org/diff.php/accounts/docs/CHANGES?r1=1.1.1.1.2.15&r2=1.1.1.1.2.18&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002146.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:forwards:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B341C85-4EC8-484A-82D5-7A52A5595FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:forwards:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A8199F-46A4-4F93-8613-9A8A3052A9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:forwards:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D79E82-4F39-4CD3-948F-C71DF8FAE5E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/forwards/docs/CHANGES?r1=1.1.1.1.2.20&r2=1.1.1.1.2.23&ty=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002145.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15082",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.horde.org/diff.php/forwards/docs/CHANGES?r1=1.1.1.1.2.20&r2=1.1.1.1.2.23&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "5D09B8CA-4992-468D-AA1F-D695FC370C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86CDC19-43C3-4ACC-94B4-388BCC8A2203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9931A5B-CD0C-43A3-B32D-915FF4AF57D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC69F98-A3B4-4573-AFE4-2069218B3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4D0137-3515-4857-8E70-4600CD2D4278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59756D1-3401-4B15-8B68-AA68B5BC3223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.7_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647543F7-6CC5-44CC-8D46-94CF096070D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2.119&r2=1.389.2.125&ty=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/imp/Week-of-Mon-20050418/041912.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15080",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2.119&r2=1.389.2.125&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/imp/Week-of-Mon-20050418/041912.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:mnemo:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6592F79-3214-46BE-AAA1-065278A38312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:mnemo:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485DEEDA-C57D-47A8-AF39-F15FF6AADCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:mnemo:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57D62BC-27B8-4D20-B4C8-E39C50180D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:mnemo:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DFCF72A-128D-49D4-B484-B0D9099707B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/mnemo/docs/CHANGES?r1=1.4.2.31&r2=1.4.2.33&ty=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/mnemo/Week-of-Mon-20050418/000166.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.horde.org/diff.php/mnemo/docs/CHANGES?r1=1.4.2.31&r2=1.4.2.33&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/mnemo/Week-of-Mon-20050418/000166.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:vaction:1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADD4FBC-B756-4899-B2F1-56E0494A82B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:vaction:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79633920-39B9-44EA-B065-0FFA5B82387A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:vaction:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBF0EA8-1299-4856-A8F9-6F0DCFE532F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:vaction:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1238FD42-C6E3-4C29-8D4D-82E21FA5BD4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/vacation/docs/CHANGES?r1=1.1.1.1.2.21&r2=1.1.1.1.2.26&ty=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002148.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15073",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.horde.org/diff.php/vacation/docs/CHANGES?r1=1.1.1.1.2.21&r2=1.1.1.1.2.26&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002148.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:nag:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F823567A-D5C9-4D81-A86B-10C02B224C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:nag:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74E032C-DCAE-4FDA-B8CF-E9A6B8B5B8A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/nag/docs/CHANGES?r1=1.54.2.33&r2=1.54.2.35&ty=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/nag/Week-of-Mon-20050418/000756.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15079",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.horde.org/diff.php/nag/docs/CHANGES?r1=1.54.2.33&r2=1.54.2.35&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/nag/Week-of-Mon-20050418/000756.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intersoft:netterm:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3458BA49-6CE9-4654-8E67-D5DFDCEF8D5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securenetterm.com/html/what_s_new.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13396",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securenetterm.com/html/what_s_new.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php for phpMyVisites allow remote attackers to inject arbitrary web script or HTML via the (1) part, (2) per, or (3) site parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matthieu_aubry:phpmyvisites:0.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B94A2BE-746A-4306-A255-AA7687D63433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matthieu_aubry:phpmyvisites:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10F69FD-5578-4D84-98D5-30C2FF951A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matthieu_aubry:phpmyvisites:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EE3865-3F82-4607-B73F-3FC8EFCB4DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBB328F-120A-4C98-94A7-4643BE7C23DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183D3FFD-A4CB-42C8-978E-1608387CECD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EB894E-25B8-4E74-83DF-741B27D739A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4753A788-14D5-438D-AB16-E1DA0E6A1934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matthieu_aubry:phpmyvisites:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA73BFE8-81FF-4D4F-B290-05FBE6CF9BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matthieu_aubry:phpmyvisites:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA73BFE8-81FF-4D4F-B290-05FBE6CF9BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpmyvisites/phpmyvisites/include/set_lang.php?r1=1.5&r2=1.6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111454298603060&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13370",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpmyvisites/phpmyvisites/include/set_lang.php?r1=1.5&r2=1.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111454298603060&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service (client crash) via a crafted packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A598719-A542-48B8-87CC-D494DF215028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BA0BF4-4B92-43B2-9389-0E9873564922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30724F53-0AA2-495E-8348-46352666E9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E611909-BBE6-4FA9-817F-0C01F1707358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D3EDDF-41C8-4781-966D-6A2FF4C5A397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B75E0C78-1130-49B6-BF07-C5510652023B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5F6155-F593-4C10-94FD-7ED788F93B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F02ADDE-B663-4A89-B7CD-C694B713CA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CC9ABF3-AA25-450B-8A94-529403D81A19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBECE6BE-BE79-4003-8FAD-AF3EE6A00ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D415A312-7EC6-4B31-9F53-A952D822EB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6630A66E-6BFD-4150-B4C6-1539EB76602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voodoo_circle:voodoo_circle:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6B104-870F-4F3E-BC07-1B0753156542"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=323254",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15830",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=323254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attackers to inject arbitrary web script or HTML via the folderid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.1",
            "matchCriteriaId" : "D06CF554-9443-4425-B8EE-CC9513069569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/396858",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:basic:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9320C502-F408-44A5-ACA0-FCB99CE883D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:business:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4BFDC4-913C-4FDB-B5A1-188C8636B621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:enterprise:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03D2A6B-450F-4797-8EC3-AEF08763B41C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:free:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846420F2-0EF3-4D65-9804-3F843236359B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:soho:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79CA62B-112E-4D1D-A0F3-37D17A9295E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013782",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/15724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13322",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/15724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:basic:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9320C502-F408-44A5-ACA0-FCB99CE883D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:business:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4BFDC4-913C-4FDB-B5A1-188C8636B621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:enterprise:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03D2A6B-450F-4797-8EC3-AEF08763B41C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:free:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846420F2-0EF3-4D65-9804-3F843236359B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworldstore:oneworldstore:soho:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79CA62B-112E-4D1D-A0F3-37D17A9295E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15104",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013796",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/15781",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13361",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/15781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument.  NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program.  Therefore this may not be a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF4DBF6-DAF0-47E7-863B-C48DB7149A78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lucaercoli.it/advs/htdigest.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/12848",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5EP061FEKC.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lucaercoli.it/advs/htdigest.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/12848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5EP061FEKC.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this to be a vulnerability.  htdigest is not supplied setuid or setgid and should not be run from a CGI program.",
        "lastModified" : "2007-12-04T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1345",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3969B3-02F1-480A-8E72-CC50CD14B573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD64CE0-686A-44F2-B537-6D41E47A8BF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000948",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-721",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-415.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-acl_error",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1255",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10513",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-415.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-acl_error",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:4.3.7.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51170553-03E8-4588-97A0-8DA57C37B5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:4.0.5.66:*:smtp:*:*:*:*:*",
            "matchCriteriaId" : "111FA175-C681-4524-AF08-1C65C44189CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:4.5.4.743:*:exchange:*:*:*:*:*",
            "matchCriteriaId" : "AF7B2BEA-4030-4360-ABA6-8DF44DB67E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2005_11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AEBDC11-A174-4974-8D57-469CD9C749C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005_contains_nav_11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FE1A0A-4352-459A-892D-29AB14AA3B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2005_contains_nav_11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2DC849-2C1D-43B5-B9A9-599DAA05EE8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:symav_filter_domino_nt:3.1.1.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C8D211-9151-4D95-907E-19BD465C320E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:web_security:3.0.1.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47BC2FF9-A77F-46B8-A714-BBA08A81E5A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.04.27.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.04.27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNVERIFIABLE **  NOTE: this issue describes a problem that can not be independently verified as of 20050421.  Adobe Acrobat reader (AcroRd32.exe) 6.0 and earlier allows remote attackers to cause a denial of service (\"Invalid-ID-Handle-Error\" error) and modify memory beginning at a particular address, possibly allowing the execution of arbitrary code, via a crafted PDF file.  NOTE: the vendor has stated that the reporter refused to provide sufficient details to confirm the issue.  In addition, due to the lack of details in the original advisory, an independent verification is not possible.  Finally, the reliability of the original reporter is unknown.  This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example of the newly defined UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is highly likely that this item will be REJECTED."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C92642-7C8D-411A-8726-06A8A6483D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2402B40-6B72-48B5-A376-DA8D16CA43FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.alphahackers.com/advisories/acrobat6.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/15850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.alphahackers.com/advisories/acrobat6.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/15850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04",
            "matchCriteriaId" : "358AEB41-C0E6-4A62-A31D-5600CF2056BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.54",
            "matchCriteriaId" : "F4DB22E1-238F-41A3-98D6-6EF5C31EB972"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445834220015&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.x0n3-h4ck.org/upload/x0n3-h4ck_mailenable_https.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445834220015&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.x0n3-h4ck.org/upload/x0n3-h4ck_mailenable_https.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Convert-UUlib (Convert::UUlib) before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:convert_uulib:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.050",
            "matchCriteriaId" : "E79E0720-0347-43A7-B161-734B966887E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-26.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-26.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leif_m._wright:ad.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC0E272-FB5A-4C3E-80FA-D48CCBCEB6C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111446285915444&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111446285915444&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leif_m._wright:ad.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC0E272-FB5A-4C3E-80FA-D48CCBCEB6C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111446285915444&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111446285915444&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leif_m._wright:ad.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC0E272-FB5A-4C3E-80FA-D48CCBCEB6C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111446285915444&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111446285915444&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forum.pl:forum.pl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA72D0C-7AA3-4E60-9BB8-597896DC1D88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111446056205059&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111446056205059&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The forum.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forum.pl:forum.pl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA72D0C-7AA3-4E60-9BB8-597896DC1D88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111446056205059&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111446056205059&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:includer.cgi:includer.cgi:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDD4F1-341E-4B80-83F0-B9142333BFB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445548126797&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445548126797&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inject arbitrary web script or HTML via the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:includer.cgi:includer.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD68DD6-C39C-424A-88E6-9389C4BC73FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445548126797&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445548126797&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:text.cgi:text.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16303F18-D7A9-444A-BC39-0440C4A547ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445867315415&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445867315415&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "text.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:text.cgi:text.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16303F18-D7A9-444A-BC39-0440C4A547ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445867315415&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445867315415&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in text.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:text.cgi:text.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16303F18-D7A9-444A-BC39-0440C4A547ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111445867315415&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111445867315415&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP code by modifying the path_prefix parameter to reference a URL on a remote web server that contains the code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graycms:graycms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679D1582-9803-47AD-B34E-BB9A5B88C1A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111454354214982&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15860",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13381",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111454354214982&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter in product.asp or (2) strCatalog_NAME parameter to productsByCategory.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalinks:metacart_e-shop:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4371D2-C59E-44D1-B6EF-EBD7574911F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111453994718211&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13377",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111453994718211&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter to product.asp, (2) intCatalogID or (3) strSubCatalogID parameters to productsByCategory.asp, (4) chkText, (5) strText, (6) chkPrice, (7) intPrice, (8) chkCat, or (9) strCat parameters to searchAction.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalinks:metacart2:paypal:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA423E5-FA5C-4F0C-ACEB-48186D08A7F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111454090503662&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111454090503662&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via (1) intCatalogID, (2) strSubCatalogID, or (3) strSubCatalog_NAME parameter to productsByCategory.asp, (4) curCatalogID, (5) strSubCatalog_NAME, (6) intCatalogID, or (7) page parameter to productsByCategory.asp or (8) intProdID parameter to product.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalinks:metacart2:payflow_link:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F1C8DB8-F07C-4325-9D2B-FEDC033BA8C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111454142832023&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111454142832023&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalinks:metabid_auctions:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BE72F0-5FC8-4A66-9F51-EFB28DC0CDCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/advisories/metabid.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111454192928364&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15136",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13395",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://digitalparadox.org/advisories/metabid.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111454192928364&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow attackers to cause a denial of service (oops) via SMP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40423078fafVa6mAyny23YZ87hDipmTw",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40423078fafVa6mAyny23YZ87hDipmTw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs \"alarms\" file with write permissions, which allows local users to cause a denial of service (CPU consumption) by attempting to write to the file, which does not have an associated store function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lkml.org/lkml/2005/4/20/159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lkml.org/lkml/2005/4/20/159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D74EB99-6C5C-46C7-9DE6-9292102DD2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/113-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/113-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartlist:smartlist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.15",
            "matchCriteriaId" : "B630AF4A-DB91-42D1-B7B2-9E980CF602AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-720",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows local users to execute arbitrary code via a long -i (Server_id) argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/706838",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/706838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Radia Management Agent (RMA) in HP OpenView Radia Management Portal (RMP) 1.x and 2.x allows remote attackers to execute arbitrary commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_radia_management_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C99625E-FF53-4538-820C-C7C20E83CC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_radia_management_portal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAAE55C0-A3D7-4C25-9353-6C1C8F40E090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0490.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0490.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111471365231909&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013829",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0490.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0490.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111471365231909&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bulletproof:bulletproof_ftp_server:2.4.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56461D0B-98C7-47D1-8E56-8051762FD7F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111464474828477&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13410",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111464474828477&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bakbone:netvault:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA55AC6-AF60-4A48-903A-6B3384D60236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bakbone:netvault:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F9A244-CF55-402E-8136-50A357B6F01C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111464410324243&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15158/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13408",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111464410324243&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15158/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) q or (2) p parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dream4:koobi_cms:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666B0EE6-64CB-4DC5-8EDB-4B017032A959"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111464009913703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13412",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13413",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111464009913703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to inject arbitrary web script or HTML via (1) exercise_result.php, (2) exercice_submit.php, (3) agenda.php, (4) learningPathList.php, (5) learningPathAdmin.php, (6) learningPath.php, (7) userLog.php, (8) tool parameter to toolaccess_details.php, (9) data parameter to user_access_details.php, or (10) coursePath parameter to myagenda.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E5AD48-31AA-4A9E-969A-6E45E4B6F827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FF8764-0B6C-439B-9333-473F54B9921A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58F1F26-B87D-4445-AB31-0648A7B32E3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111464607103407&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15161",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.claroline.net/news.php#85",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13407",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111464607103407&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.claroline.net/news.php#85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E5AD48-31AA-4A9E-969A-6E45E4B6F827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FF8764-0B6C-439B-9333-473F54B9921A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58F1F26-B87D-4445-AB31-0648A7B32E3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111464607103407&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15161",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.claroline.net/news.php#85",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13407",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111464607103407&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.claroline.net/news.php#85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E5AD48-31AA-4A9E-969A-6E45E4B6F827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FF8764-0B6C-439B-9333-473F54B9921A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58F1F26-B87D-4445-AB31-0648A7B32E3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111464607103407&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15161",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013822",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.claroline.net/news.php#85",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13407",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111464607103407&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.claroline.net/news.php#85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E5AD48-31AA-4A9E-969A-6E45E4B6F827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FF8764-0B6C-439B-9333-473F54B9921A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58F1F26-B87D-4445-AB31-0648A7B32E3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111464607103407&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15161",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.claroline.net/news.php#85",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13407",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111464607103407&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.claroline.net/news.php#85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbitrary SQL commands via the p parameter, which is used in the $post_id variable, and other attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxpus:phpbb_personal_notes_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.6",
            "matchCriteriaId" : "5CCFDB3F-66FD-4A0D-B7FE-97D0630543C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111471606518372&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15154/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013827",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00070-04272005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15899",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13417",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111471606518372&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15154/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00070-04272005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mandrakesoft:mandrake_lam-runtime:7.0.6.2mdk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEECB27-08FE-46A9-9BA1-59977BAA096D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111472262231060&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111472262231060&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in BEA Admin Console 8.1 allows remote attackers to execute arbitrary web script or HTML via the server parameter to a JndiFramesetAction action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111472745503010&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Apr/1013817.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/bea_css_in_admin_console.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13400",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111472745503010&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Apr/1013817.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/bea_css_in_admin_console.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server_web_cache:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "990EE348-237F-4A9C-B422-AE371A5BAA0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111472423409560&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15910",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13421",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13422",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111472423409560&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the cache_dump_file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server_web_cache:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "990EE348-237F-4A9C-B422-AE371A5BAA0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111472615519295&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15909",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_webcache_append_file_vulnerabilitiy.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13420",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111472615519295&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_webcache_append_file_vulnerabilitiy.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B82E1-D1AD-46F2-8B95-117F38563FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC5FDD9-F24C-4DA2-9CE3-96522DB4A10E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDECF110-F375-4A3C-8BA9-1CF69B6EF027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94B7D50-4527-4C14-8A50-D4C0566F36BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111472266123952&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15908",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_webcache_bypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13418",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111472266123952&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_webcache_bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parameter to login.php, (3) id, (4) dtopic_id, or (5) dcat_id to mod.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FDCCE7-B76F-42EA-BD82-11D35AAED66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84AC0DD-109D-4E44-9673-668238545F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FECE4E8-3258-48E7-8F3A-F564512442CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/viewadvisories.ah?view=36",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111473522804665&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/phpcoin-poc.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13433",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://digitalparadox.org/viewadvisories.ah?view=36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111473522804665&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/phpcoin-poc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111473570624498&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111479299730011&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111479346119272&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013835",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111473570624498&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111479299730011&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111479346119272&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php, (2) db.php, (3) lang-norwegian.php, (4) lang-indonesian.php, (5) lang-greek.php, (6) a request to Web_Links with the portuguese language (lang-portuguese.php), (7) a request to Web_Links with the indonesian language (lang-indonesian.php), (8) a request to the survey module with the indonesian language (lang-indonesian.php), (9) a request to the Reviews module with the portuguese language, or (10) a request to the Journal module with the portuguese language, which reveal the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23264211-2992-4222-9B96-5ABEE1332C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F76C32-E24D-4B62-88CE-2D23F457573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90A3E1F-0371-45C0-A165-55D94A62C3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A5D98-6C48-461F-8B96-BD32A96CDCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F4E55E-4424-4EC8-8013-9A0FFE7D3658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13CCAA-839F-406D-A7F3-975B4780425A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D375197-0087-479C-991B-964FB83644F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F6320E-314D-4A8F-BC9A-29F730035C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E16D17-B704-4ADA-8F91-B7D96FB52909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5037564-574E-4321-9CD1-4230FB331503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE2D63C-75BC-4936-88BE-9F22D193EF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111478982629035&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111478982629035&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kristofer_szymanski:cocktail:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A4CB04-92A0-4741-ACDE-61D5D8A959DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111480898530362&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111480898530362&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SURVIVOR before 0.9.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:survivor:survivor:0.9.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1907E13D-D77C-435C-A9E5-D6CAF008016F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.columbia.edu/acis/dev/projects/survivor/doc/todo.html#changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15905",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13415",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.columbia.edu/acis/dev/projects/survivor/doc/todo.html#changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:25.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0175.  Reason: This candidate is a duplicate of CVE-2005-0175.  Notes: All CVE users should reference CVE-2005-0175 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:25.337",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0174.  Reason: This candidate is a duplicate of CVE-2005-0174.  Notes: All CVE users should reference CVE-2005-0174 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apsis:pound:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "903FFEFB-C249-4089-9B21-71F8BE253147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=307852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-29.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.apsis.ch/pound/pound_list/archive/2005/2005-04/1114516112000",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15963",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13436",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=307852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-29.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.apsis.ch/pound/pound_list/archive/2005/2005-04/1114516112000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B51601C-EDDC-41B7-82E9-EA4E7745F935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-30.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200504-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to (1) asmaster, (2) asuser, (3) asutility, (4) se, or (5) asrecovery."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcinfo_workstation:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64E5827-8AEF-458D-9AFD-2D7A8FFD83C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111489411524630&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111489411524630&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcinfo_workstation:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64E5827-8AEF-458D-9AFD-2D7A8FFD83C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111489411524630&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15196",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1013852",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111489411524630&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1013852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier may allow local users to gain privileges via a long (1) XAPPLRESLANGPATH or (2) XAPPLRESDIR environment variable, or (3) command line argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.2",
            "matchCriteriaId" : "E3560F4B-760F-4DFD-8F6E-11572CA21364"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5122819-2B01-425F-B8D4-E282B4C6BBE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB76541-118A-4959-9A44-629EA69CE16E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E85D1-D917-4420-8136-A5CC56B939F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09B4FBA-163E-4FC3-96EB-4363AC18E71A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2843EC0A-52FC-43B8-AB66-EE84920E63F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EAAA440-6AA2-484C-8A87-22057974D990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033705.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15197",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0501a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033705.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0501a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ce_edit_log temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.2",
            "matchCriteriaId" : "E3560F4B-760F-4DFD-8F6E-11572CA21364"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5122819-2B01-425F-B8D4-E282B4C6BBE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB76541-118A-4959-9A44-629EA69CE16E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E85D1-D917-4420-8136-A5CC56B939F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09B4FBA-163E-4FC3-96EB-4363AC18E71A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2843EC0A-52FC-43B8-AB66-EE84920E63F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:swlink:ce_ceterm:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EAAA440-6AA2-484C-8A87-22057974D990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033705.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15197",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013855",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0501a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16050",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033705.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0501a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "Upgrade to version 2.6"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D946970-FBAA-4680-A477-29FB5459A688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A95ABF-AEC5-4998-9771-4DAB7F40AC60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F575FD3A-F285-43CB-8C20-AF873D120B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D9539B-C7E0-4BFE-B81B-BA84CA279E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE693CC-C9AC-4DDB-8956-889257945963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9751D90E-9840-4DD5-947C-EB032BC40E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3E5878-3DAA-4321-85C2-8C612BA7C411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A223858-6E35-4F35-BDFB-C7C5AA464429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5375358-8547-4765-AC7D-5BE96C8D9FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B713ED-A97C-4EE9-B4AD-6EC9D139C9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F425A3-0117-465C-90E3-7851946573BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15116",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=323483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=323483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2) postage parameters.  NOTE: it was later reported that 3.4 through 4.6.4 are also affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcart:phpcart:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40642B07-93F7-4373-BFD9-0B0E32DABDD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcart:phpcart:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0683AE-4A61-46EA-87AE-11A461650E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcart:phpcart:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2C7CF6-9BE7-435A-B320-170EA36B784F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/04/phpcart-price-manipulation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15147",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/495806/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13406",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/30887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/04/phpcart-price-manipulation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/495806/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/30887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary code via game messages or other text."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mtp-target:mtp-target:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883D676A-6446-4C3D-A63C-CD49941E54A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/mtpbugs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-focus.com/archive/1/397304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/mtpbugs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-focus.com/archive/1/397304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and possibly other products, allows remote attackers to cause a denial of service (memory consumption or server crash) via a negative value in a STLport call, which is not caught by a signed comparison."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mtp-target:mtp-target:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "F6FD7C95-45A5-45FA-9BD7-82009CB3A46E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/mtpbugs-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-focus.com/archive/1/397304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/mtpbugs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-focus.com/archive/1/397304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via the (1) image parameter to closeup.php, the (2) currentIsExpanded or (3) searchFor parameters to index.php, (4) the currentNumber parameter to software_CAD_Technical_60002_uk.htm, or (5) a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:just_williams:amazon_webstore:04050100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F25C4B5-21C9-4F40-A475-F3DCA125FA14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/04/amazon-webstore-script-injection-and.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013836",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15894",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13427",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/04/amazon-webstore-script-injection-and.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_forum:myphp_forum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF9BC75-9F03-4398-BC6B-7D02B1753B6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_forum:myphp_forum:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7471B313-A6A2-4D1B-BE21-CB14A20F1400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_forum:myphp_forum:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B9CD454-EFE4-4F73-A25E-B9012DFCCAAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15166",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15902",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15903",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.org/archive/1/397025",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.org/archive/1/397025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E234AD1-7202-421E-82C8-880E84876021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D037CC-1207-48E2-882E-8B236EE7138F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5059BEF2-84EB-4B5F-84F5-9E3200B068F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB71B7AA-957B-46A6-9BC9-CE23EC721189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46CF28C0-51AD-4783-B1F0-205DF64D133A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94927A9-61FD-459F-9A6D-E581A4AF505C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B32BA2-9EB7-4294-A857-226A5B1CC401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF64CA16-6C20-42E1-BA68-BD63A873BFA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013839",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/699798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/699798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, then call arbitrary Skype API functions by modifying or replacing that application."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B64407-2554-44D5-BCFB-20F991775EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.2.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C662FC-9B46-4C06-88AA-DE01D7371E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.2.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A189D66B-F12D-4631-BCCB-7CF9F250E736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.2.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ECD176-BEA4-434A-A669-28DB2F4F3CE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.skype.com/security/ssa-2005-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.skype.com/security/ssa-2005-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1409",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the \"Character conversion vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF09CFB-F7CE-4659-BB20-83231539F765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE8C2A3-7575-41C6-896C-C367E6D35015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88ED8E8C-9044-4E77-923A-D5C6C02A1081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037FF208-82A1-4448-88FE-FACB922FE1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458F558C-7550-48B8-8318-A0D5FAF9ABF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1A6E7C-B1DC-45CC-90B4-AFD6F669AA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B710BA-91FF-47B9-BB56-4711CD50D50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4064A96D-84D5-4257-9981-1139CD4CD08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98290E4-2919-4492-BD14-BB24BA85C729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56E9F72-6CBF-4784-89CD-435A030AC0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEF0FE5-EFCF-448E-B6BD-95FDDD4E17FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B480F0-8FFC-4463-ADC6-95906751811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF44286-0DBF-4CCA-8FFB-993976C18CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629881D2-2A6D-4461-8C35-6EE575B63E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C91580-6428-4234-92DF-6A96108FCF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A19EB5-A1AF-4293-854D-347CD21065DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18ED293-B408-435F-9D1F-2365A2E51022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE2567C-BF48-4255-9E56-590A6F9DD932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C8302B-631A-4DF7-839B-C6F3CC39E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB318EB9-1B49-452A-92CF-89D9BA990AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5913A53B-7B72-4CBD-ADAE-318333EB8B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E58C0-327D-4F14-B496-05FC8179627E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF2D056-5120-4F98-8343-4EC31F962CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516E0E86-3D8A-43F9-9DD5-865F5C889FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "105E9F52-D17E-4A0B-9C46-FD32A930B1E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.postgresql.org/about/news.315",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-433.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426302/30/6680/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0453",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.postgresql.org/about/news.315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-433.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426302/30/6680/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1410",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as \"internal\" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE2567C-BF48-4255-9E56-590A6F9DD932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB318EB9-1B49-452A-92CF-89D9BA990AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E58C0-327D-4F14-B496-05FC8179627E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF2D056-5120-4F98-8343-4EC31F962CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516E0E86-3D8A-43F9-9DD5-865F5C889FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "105E9F52-D17E-4A0B-9C46-FD32A930B1E6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.postgresql.org/about/news.315",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-433.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426302/30/6680/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13475",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0453",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1086",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.postgresql.org/about/news.315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-433.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426302/30/6680/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybration:icuii:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07A9646A-92CF-4946-AD3B-D5EEEFF11AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/14/14688-icuii.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013828",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14688",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/14/14688-icuii.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecomm:professional_guestbook:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3DD398-CC89-4A0E-97B9-EFBD3C1958D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15190",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15967",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2) password parameters to admin_login.asp, or the (3) searchstring and possibly (4) ID parameters to default.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envivosoft:envivo_cms:3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3395A53A-D231-4CAD-80B4-F5F9359F9E82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/viewadvisories.ah?view=37",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=118414271202945&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013843",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityvulns.ru/Rdocument425.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/24860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://digitalparadox.org/viewadvisories.ah?view=37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=118414271202945&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityvulns.ru/Rdocument425.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/24860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the registry, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:exoticsoft:filepocket:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80222AC8-D29D-493E-9501-707C2B7F0FF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013823",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13445",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a long FTP command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:secure_ftp_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1DC5A5-1530-4192-A9F6-031367395B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:secure_ftp_server:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9082B3-DBE3-4C6E-97FB-B9322D888F28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-04/0674.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cuteftp.com/gsftps/history.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13454",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-04/0674.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cuteftp.com/gsftps/history.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but within the installation folder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soft3304:04webserver:1.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF54719-2DDC-4900-871B-B2052841CF1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/16/16067-04webserver.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.soft3304.net/04WebServer/Security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/16/16067-04webserver.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.soft3304.net/04WebServer/Security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD43E028-53FC-475E-8E62-5660E2E93265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFAB9F0-D654-4ADE-A54A-C3FC7675CC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D88D67-858C-4A64-9EAC-C9634183F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B875DE4-9AEC-4172-9E2D-60651F846B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448A15D5-BB55-4B4D-8751-829A00E644B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC344628-1C14-45FE-A073-25ADCE6A0AA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013845",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.maxwebportal.info/downloads/mwp_security_fixes.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.maxwebportal.info/topic.asp?TOPIC_ID=2482&FORUM_ID=1&CAT_ID=1&Forum_Title=General+Chat&Topic_Title=Security+Update",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13466",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.maxwebportal.info/downloads/mwp_security_fixes.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.maxwebportal.info/topic.asp?TOPIC_ID=2482&FORUM_ID=1&CAT_ID=1&Forum_Title=General+Chat&Topic_Title=Security+Update",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "evaluatorSolution" : "The vulnerabilities have been partially fixed in versions 1.3.5 and 2.0. The remaining vulnerabilities will reportedly be fixed in the upcoming 2.1 version."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netleaf_limited:notjustbrowsing:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64FD803A-A203-4C2C-AD88-AE43856505D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15184",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013826",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Admin_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocean12_technologies:mailing_list_manager:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D66CF81-44B3-4CD6-A3A6-DD5520B3DECE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0491.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15178",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013833",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15959",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-04/0491.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a request for an invalid page, as demonstrated using \"%20\" (hex-encoded space)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raysoft:video_cam_server:1.0.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A585010B-2DC8-4BFA-940B-4BF77E0A758D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/VideoCamServer1.0.0-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/VideoCamServer1.0.0-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to read arbitrary files via \"..\" (dot dot) sequences in an HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raysoft:video_cam_server:1.0.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A585010B-2DC8-4BFA-940B-4BF77E0A758D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/VideoCamServer1.0.0-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/VideoCamServer1.0.0-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a denial of service (server or camera shutdown) via a direct request to admin.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:raysoft:video_cam_server:1.0.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A585010B-2DC8-4BFA-940B-4BF77E0A758D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/VideoCamServer1.0.0-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/VideoCamServer1.0.0-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a denial of service and determine the presence of arbitrary files via .. sequences in the A parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:software602:602lan_suite:2004.0.05.0413:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69B96E4-E43A-4F9D-ACB3-DF90A3C8BB44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15231",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16069",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoText.bin file, which allows local users to obtain that information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stumbleinside:gotext:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055BE93C-75B7-49EF-A713-A4921F807E01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013825",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/14686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uapplication:uguestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7E197C-D0B5-48BC-AF3A-67FA8FE8DAD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456240/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456240/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb (aka mdb-database/blog.msb)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:uapplication:ublog:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113B2DFF-769A-4558-9656-3C053770F346"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15996",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uapplication:uphotogallery:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D7954F-3480-466D-9F64-1ADFD6DD1BAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:uapplication:uphotogallery:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D7954F-3480-466D-9F64-1ADFD6DD1BAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abczone.it:wwwguestbook:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8311E449-F285-429D-A316-58AF08C5BE34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is managed by a non-setuid program, which allows local users to read or modify sessions of other users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.security-focus.com/archive/1/397306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-focus.com/archive/1/397306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"record packet parsing\" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CF40D3-CE03-4C2A-8EEF-EB5989291806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC60D4CC-922C-4941-A400-0CBEAC7F31D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754A0D19-A17A-4007-8355-497D14CFCBF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8140DBE1-8116-4051-9A57-07535586E0AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D2DF7F-DCDD-486D-B906-F9DDE3A1DB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CC840D-AD01-4EE2-8652-06742A6286BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84224A82-6D58-4000-A449-20C1632DAE85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052B40C1-C29B-4189-9A45-DAE873AB716D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F71E61-7455-4E10-B9D8-2B7FDDFB10F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E05A9A1-6B7A-43FB-A9B8-41B68CA5FDCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2005-April/000858.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-430.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2005-April/000858.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnjerabilities HP OpenView Event Correlation Services (OV ECS) 3.32 and 3.33 allow attackers to cause a denial of service or execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_event_correlation_services:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25E946-5D51-4D2E-8820-FEACEF22C4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_event_correlation_services:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FE16C2-9BA2-452C-BF41-2965383F4EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15226",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in OpenView Network Node Manager (OV NNM) 6.2, 6.4, 7.01, and 7.50 allow attackers to cause a denial of service or execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E17259-60C7-4F6B-AB23-06E406FA006D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A2AF84-E59A-4725-85E6-D2AF56F97F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E31677CB-1DAC-498C-9372-D442D60A6389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725DA559-EE1C-4CCE-91C4-D5AAA940D855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.51",
            "matchCriteriaId" : "5C796754-5EF1-4ED9-8FBE-852651FECB07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15225",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013859",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/forum/message.php?msg_id=3128678",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/forum/message.php?msg_id=3128678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to header.php, (3) the em parameter to admin_login.php, (4) the e parameter to user_login.php, (5) the err parameter to open_submit.php, or (6) the name and subject fields when adding a ticket."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609F2462-A1AC-4B3A-B665-2CF2068F4DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C97D5CE-ED36-406A-B806-E2688C050CD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15216",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00071-05022005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00071-05022005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or (2) cat parameter to view.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:1.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B4D3DB-8456-4429-BE21-13684B4B4C26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15216",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00071-05022005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00071-05022005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CEA985-2810-4828-A6EC-60E948AAEC77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00071-05022005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00071-05022005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C169B21F-7FA1-47F6-808F-3F428E4A031E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00071-05022005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00071-05022005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) various parameters to basket.php, (2) the nickname, email, topic, and message fields in forum.php, as demonstrated using forum_new_thread.php and forum_thread.php, (3) the page parameter to page.php, (4) category_id and item_id parameters to reviews.php, (5) the category_id parameter to product_details.php, (6) the category_id or search_string parameters to products.php, or (7) the rp or page parameters to news_view.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codetosell:viart_shop_enterprise:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2746C9-9588-40F6-8B68-A05BB9A4B352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/04/viart-shop-enterprise-multiple.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013853",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15951",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/15958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13462",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/04/viart-shop-enterprise-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/15958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause a denial of service via the Notes protocol (NRPC)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9989FEB-3B5E-40FF-BDBF-CFC835BCF93B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B2AFF7-3921-402A-AE7A-BB9E2E8AA0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1320064-F0E9-42C8-8E1C-9037684FA693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.2_cf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64AB8494-6BC9-43CB-A645-43944B03D10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06DBE88F-F765-448E-88AF-3ED9FB98181A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0766C3F9-D2A2-4A58-9FF7-11B57232DEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00B8057-26DF-4064-A934-0AA88A0C1A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFA5487-2D61-4E61-98A3-51882A8CE0C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95404CC-47B8-40C6-BCED-FC3E68CA8D8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202525",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service (client crash) and possibly execute arbitrary code via the NOTES.INI file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E234AD1-7202-421E-82C8-880E84876021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D037CC-1207-48E2-882E-8B236EE7138F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5059BEF2-84EB-4B5F-84F5-9E3200B068F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB71B7AA-957B-46A6-9BC9-CE23EC721189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46CF28C0-51AD-4783-B1F0-205DF64D133A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94927A9-61FD-459F-9A6D-E581A4AF505C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B32BA2-9EB7-4294-A857-226A5B1CC401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF64CA16-6C20-42E1-BA68-BD63A873BFA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/1013841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202526",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15367",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/1013841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2.0.3 and 2.1 Alpha 2 allows remote attackers to inject arbitrary web script or HTML via the (1) act, (2) Members, (3) calendar, or (4) HID parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232885C1-B578-4E6E-8472-FF47A17DF976"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013863",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to inject arbitrary web script or HTML via (1) the v, show, or sec_name parameters to main.php, (2) the inadmin, newsev, or postid parameters to 5.php, or (3) the id parameter to 0.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitepanel:sitepanel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "FF95F627-815C-4A53-BE38-D6794807B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.sitepanel2.com/index.php?showtopic=271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15213",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00072-05032005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.sitepanel2.com/index.php?showtopic=271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00072-05032005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to (1) delete arbitrary files via the id parameter in a rmattach action to 5.php, or (2) read arbitrary files via the lang parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitepanel:sitepanel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "FF95F627-815C-4A53-BE38-D6794807B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.sitepanel2.com/index.php?showtopic=271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15213",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00072-05032005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.sitepanel2.com/index.php?showtopic=271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00072-05032005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitepanel:sitepanel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "FF95F627-815C-4A53-BE38-D6794807B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.sitepanel2.com/index.php?showtopic=271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15213",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00072-05032005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://forum.sitepanel2.com/index.php?showtopic=271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00072-05032005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to execute arbitrary PHP code via the p parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitepanel:sitepanel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "FF95F627-815C-4A53-BE38-D6794807B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.sitepanel2.com/index.php?showtopic=271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15213",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00072-05032005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.sitepanel2.com/index.php?showtopic=271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00072-05032005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925A50B9-0CEF-42FF-8359-52BAFB4FEBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C739BCD2-1722-42E0-9560-752DBBF05BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C28957-2724-406D-BAD4-DDCDE8CFA843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE669F3-75FA-4237-8424-109FE52F59ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18814B9C-FE3E-4BB4-99E5-E3A88666B0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80A9CDA-C3E2-474F-8E43-440C72B0E8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15CFA451-FFD4-452D-A744-5FDA80379BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29716C7-2882-4B69-A4F8-BDBF0FB9CF88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A455F8B9-8A31-4BF1-895B-5D4579BE9C56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in serendipity_config_local.inc.php for Serendipity before 0.8 has unknown impact."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62233D77-9838-48AB-9A2D-F4EAA9E237EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F23BF-1C25-4A5E-9EC4-35A1A821A235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47E7512-FDB5-45F2-80B2-9BDAB856E856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFBFFE-DCBB-460A-9E43-9CC5A1046755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925A50B9-0CEF-42FF-8359-52BAFB4FEBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C739BCD2-1722-42E0-9560-752DBBF05BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C28957-2724-406D-BAD4-DDCDE8CFA843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE669F3-75FA-4237-8424-109FE52F59ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18814B9C-FE3E-4BB4-99E5-E3A88666B0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80A9CDA-C3E2-474F-8E43-440C72B0E8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15CFA451-FFD4-452D-A744-5FDA80379BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29716C7-2882-4B69-A4F8-BDBF0FB9CF88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A455F8B9-8A31-4BF1-895B-5D4579BE9C56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in \"the function used to validate path-names for uploading media\" in Serendipity before 0.8 has unknown impact."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62233D77-9838-48AB-9A2D-F4EAA9E237EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F23BF-1C25-4A5E-9EC4-35A1A821A235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47E7512-FDB5-45F2-80B2-9BDAB856E856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFBFFE-DCBB-460A-9E43-9CC5A1046755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925A50B9-0CEF-42FF-8359-52BAFB4FEBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C739BCD2-1722-42E0-9560-752DBBF05BC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15877",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The media manager in Serendipity before 0.8 allows remote attackers to upload and execute arbitrary (1) .php or (2) .shtml files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62233D77-9838-48AB-9A2D-F4EAA9E237EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F23BF-1C25-4A5E-9EC4-35A1A821A235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47E7512-FDB5-45F2-80B2-9BDAB856E856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFBFFE-DCBB-460A-9E43-9CC5A1046755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925A50B9-0CEF-42FF-8359-52BAFB4FEBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C739BCD2-1722-42E0-9560-752DBBF05BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C28957-2724-406D-BAD4-DDCDE8CFA843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE669F3-75FA-4237-8424-109FE52F59ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18814B9C-FE3E-4BB4-99E5-E3A88666B0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80A9CDA-C3E2-474F-8E43-440C72B0E8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15CFA451-FFD4-452D-A744-5FDA80379BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F7D7B6-21E6-4E68-B37C-F0198B6A1A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8_beta_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C352E0E-D115-495F-BFF9-9FDDFA7C636A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Serendipity before 0.8 allows Chief users to \"hide plugins installed by other users.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62233D77-9838-48AB-9A2D-F4EAA9E237EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F23BF-1C25-4A5E-9EC4-35A1A821A235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47E7512-FDB5-45F2-80B2-9BDAB856E856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFBFFE-DCBB-460A-9E43-9CC5A1046755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925A50B9-0CEF-42FF-8359-52BAFB4FEBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C739BCD2-1722-42E0-9560-752DBBF05BC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.s9y.org/63.html#A9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a command with crafted parameters to a RADEXECD process."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:radia_client:3.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53FE752-E710-4F91-8D0D-AC8AC12FE674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034387.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.grok.org.uk/advisories/radexecd.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034387.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.grok.org.uk/advisories/radexecd.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in HP Radia Notify Daemon 3.1.0.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a long file extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:radia_client:3.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F18CA6-8C75-40BD-98B2-2B78A5E998CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034387.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.grok.org.uk/advisories/radexecd.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034387.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.grok.org.uk/advisories/radexecd.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/354486",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/354486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D1D438-86A5-4224-852F-EC1E5DB83DC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013365",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1194",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2004-1287."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*",
            "matchCriteriaId" : "81B543F9-C209-46C2-B0AE-E14818A6992E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "DB89C970-DE94-4E09-A90A-077DB83AD156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "84A50ED3-FD0D-4038-B3E7-CC65D166C968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-381.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13506",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11256",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-381.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters such as NULL, control characters, and homographs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:applescript:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29AB40A-62A3-494A-B039-F43810283B9A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://remahl.se/david/vuln/010/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15227",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13480",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://remahl.se/david/vuln/010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access files without the user being notified, and local users to access files via the default directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=301381",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/258390",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=301381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/258390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows remote attackers to read arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which \"use external helper programs in an insecure manner.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/331694",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/331694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/582934",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/582934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://remahl.se/david/vuln/004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://remahl.se/david/vuln/004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mac OS X 10.3.9, when using an LDAP server that does not use ldap_extended_operation, may store initial LDAP passwords for new accounts in plaintext."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:terminal:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8446AA29-3C8A-45DA-88E3-D535F5A2BABA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://remahl.se/david/vuln/012/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15227",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013882",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/994510",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/16083",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13480",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://remahl.se/david/vuln/012/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/994510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/16083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:terminal:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8446AA29-3C8A-45DA-88E3-D535F5A2BABA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://remahl.se/david/vuln/011/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15227",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/356070",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/16084",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13480",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://remahl.se/david/vuln/011/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/356070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/16084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:svg_viewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "9C1FE08B-07BF-4393-AC21-26590D219EE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37BA825-679F-4257-9F2B-CE2318B75396"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15255",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013890",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/323585.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-07.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/323585.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.hyperdose.com/advisories/H2005-07.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2A8403-4317-4C05-A5A8-25667C25B71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B2FCBD-A22A-449D-B0BD-F9E8C9EC55C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2DAE94-B05F-4944-B7E5-D1276D8DDA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50E48B1-6C82-4BF6-84CB-D4E7F097F32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF74467-F937-4AA2-92A7-EC2019600B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://leafnode.sourceforge.net/leafnode-SA-2005-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15252",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://leafnode.sourceforge.net/leafnode-SA-2005-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1456",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (abort)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9700",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1457",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9825",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1458",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown \"other problems\" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11348",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1459",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC, (9) 802.3 Slow, (10) SMBMailslot, or (11) SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11494",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1460",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error) via an invalid protocol tree item length."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9970",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1461",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIX_Qualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9853",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1462",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9713",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1463",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10713",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1464",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP, and (8) RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (infinite loop)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9534",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1465",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the NCP dissector in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (long loop)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10224",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1466",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (large memory allocation) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11024",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1467",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (memory exhaustion) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9654",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1468",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, (7) SMBMailslot, and (8) SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) via unknown vectors that lead to a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1469",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dissector to access an invalid pointer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1470",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11804",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.ethereal.com/news/item_20050504_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582B9BF3-5BF1-44A3-A580-62F2D44FDD34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:06.iir.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:06.iir.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The i386_get_ldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582B9BF3-5BF1-44A3-A580-62F2D44FDD34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:07.ldt.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:07.ldt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE31DFF8-06AB-489D-A0C5-509C090283B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF49BF03-C25E-4737-84D5-892895C86C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2019E0E-426B-43AF-8904-1B811AE171E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5FC1A-1253-4390-A4FC-573BB14EA937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44308D13-D935-4FF8-AB52-F0E115ED1AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582B9BF3-5BF1-44A3-A580-62F2D44FDD34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:08.kmem.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:08.kmem.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:securid_web_agent:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E4C328-F06E-48D8-A567-720BC76E9AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:securid_web_agent:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5FA5E3-7BD9-45EF-8858-84938BEF59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:securid_web_agent:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23CFC97-987B-4CCB-A677-0DD23834CC7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111537013104724&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111537013104724&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "E09B8A0B-856F-4D72-BD7D-5EFC7982EBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://greyhatsecurity.org/firefox.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://greyhatsecurity.org/vulntests/ffrc.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111553138007647&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111556301530553&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15292",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/534710",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-42.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-434.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-435.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=292691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://greyhatsecurity.org/firefox.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://greyhatsecurity.org/vulntests/ffrc.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111553138007647&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111556301530553&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/534710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-42.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-435.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=292691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://greyhatsecurity.org/firefox.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://greyhatsecurity.org/vulntests/ffrc.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111553138007647&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111556301530553&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15292",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/648758",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-42.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-434.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-435.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=292691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://greyhatsecurity.org/firefox.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://greyhatsecurity.org/vulntests/ffrc.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111553138007647&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111556301530553&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/648758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-42.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-435.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=292691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain configurations of IPsec, when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection at a higher layer, or Authentication Header (AH), allow remote attackers to decrypt IPSec communications by modifying the outer packet in ways that cause plaintext data from the inner packet to be returned in ICMP messages, as demonstrated using bit-flipping attacks and (1) Destination Address Rewriting, (2) a modified header length that causes portions of the packet to be interpreted as IP Options, or (3) a modified protocol field and source address."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nissc:ipsec:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA6334A-DD3E-45AC-B908-73990050BF1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111566201610350&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/302220",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050509-00386.html?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/407774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/407774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111566201610350&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/302220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050509-00386.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/407774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/407774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the JRun Web Server in ColdFusion MX 7.0 allows remote attackers to inject arbitrary script or HTML via the URL, which is not properly quoted in the resulting default 404 error page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E5A6D-8476-401B-9A18-BDBC07CA1CDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111575500403231&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-03.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111575500403231&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1261",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1EE775-471F-4D9F-9635-41CB581168D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E56639E-2F96-4110-8846-0EA887D2967B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FDCAE1-0B5D-449F-A83A-5028E7701109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E955A141-DAEB-40EA-BE35-A5EED928E030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94CDB8A-7120-41C6-95AF-5DBAD74F3204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA529226-9252-41EE-8543-692F3119CF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7366C749-E27C-422C-BFE0-DCC4B4D9C8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2E8C61-B01A-482A-9B8D-0072AB6BB7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E40E9A-950B-4D6E-A748-5F76F7B97AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4FF2E49-7561-461A-98BD-4778C6764020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4168D220-61A9-4E9F-A5A8-4832822E35EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253631B3-8A0C-48DC-851A-F5A6AB490BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1266BD64-E19D-4686-9E00-42CC9AF94756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BCA03-A187-432B-B2B3-40DE99A9986C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92762951-6F9E-426D-8157-55C65A561417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AFDEF5-5E42-4BF6-8EC6-FE7FCD4DD4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4B3DA2-9ECB-454D-8775-9571B158007F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A041E262-E36F-44C3-B83B-2E79653B74EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333D0BA1-7676-417D-BB92-AAA1AAED2D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF449EC2-A6F2-405F-BEE7-0516E092E6F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "840C5668-D951-4A62-B555-EB3D91A08B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC715625-C4E7-49AC-9F3E-7306114878D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8834643-F682-4FC1-93DE-BE4754E993AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DC59A0-4BD8-42AC-B2E0-BFC32FCE7396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC19763-0085-4633-A370-FECB86F90C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7A6C84-66CB-45E5-972B-CFF6D82D5767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5414E26C-C4BD-4E88-A9F4-05312F303BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A50DB77D-DF16-4596-826B-C30F2F0CDC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF490A8-67ED-4330-A230-98CB60A16B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8143534B-FADA-496F-9252-7D8F27407464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A65A06-A2D9-4ACD-A19A-5CC0D6636139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.82.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3EF25C4-A89D-4FBC-8EBE-89B502369A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BB3FC7-C33B-4FA6-84F9-5894DFAB7B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE70BCCA-A025-4F93-A773-8D4FF482540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93EBDBD2-D687-4680-998A-3C89477EC7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B13807-C799-4589-9546-2680D122C5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F91275-123E-412C-AA15-B2010D656D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2842937-2275-4C1C-85FE-9C1246B2A06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478EA6B8-99D9-4378-8839-AC85F281F630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6F9FB-C9DA-44BB-9AF7-E8D828788873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA41A48-DCDE-4DB9-BE38-FC255A712478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EFC670-8B21-4ABC-B656-989FEF3FE7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7051327C-FB24-45C8-BF62-BD88DA838911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-429.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-432.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13590",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0519",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10725",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-432.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1262",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1EE775-471F-4D9F-9635-41CB581168D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E56639E-2F96-4110-8846-0EA887D2967B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FDCAE1-0B5D-449F-A83A-5028E7701109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E955A141-DAEB-40EA-BE35-A5EED928E030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94CDB8A-7120-41C6-95AF-5DBAD74F3204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA529226-9252-41EE-8543-692F3119CF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7366C749-E27C-422C-BFE0-DCC4B4D9C8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2E8C61-B01A-482A-9B8D-0072AB6BB7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E40E9A-950B-4D6E-A748-5F76F7B97AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4FF2E49-7561-461A-98BD-4778C6764020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4168D220-61A9-4E9F-A5A8-4832822E35EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253631B3-8A0C-48DC-851A-F5A6AB490BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1266BD64-E19D-4686-9E00-42CC9AF94756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BCA03-A187-432B-B2B3-40DE99A9986C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92762951-6F9E-426D-8157-55C65A561417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AFDEF5-5E42-4BF6-8EC6-FE7FCD4DD4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4B3DA2-9ECB-454D-8775-9571B158007F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A041E262-E36F-44C3-B83B-2E79653B74EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333D0BA1-7676-417D-BB92-AAA1AAED2D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF449EC2-A6F2-405F-BEE7-0516E092E6F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "840C5668-D951-4A62-B555-EB3D91A08B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC715625-C4E7-49AC-9F3E-7306114878D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8834643-F682-4FC1-93DE-BE4754E993AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DC59A0-4BD8-42AC-B2E0-BFC32FCE7396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC19763-0085-4633-A370-FECB86F90C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7A6C84-66CB-45E5-972B-CFF6D82D5767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5414E26C-C4BD-4E88-A9F4-05312F303BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A50DB77D-DF16-4596-826B-C30F2F0CDC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF490A8-67ED-4330-A230-98CB60A16B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8143534B-FADA-496F-9252-7D8F27407464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A65A06-A2D9-4ACD-A19A-5CC0D6636139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.82.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3EF25C4-A89D-4FBC-8EBE-89B502369A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BB3FC7-C33B-4FA6-84F9-5894DFAB7B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE70BCCA-A025-4F93-A773-8D4FF482540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93EBDBD2-D687-4680-998A-3C89477EC7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B13807-C799-4589-9546-2680D122C5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F91275-123E-412C-AA15-B2010D656D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2842937-2275-4C1C-85FE-9C1246B2A06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478EA6B8-99D9-4378-8839-AC85F281F630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6F9FB-C9DA-44BB-9AF7-E8D828788873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA41A48-DCDE-4DB9-BE38-FC255A712478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EFC670-8B21-4ABC-B656-989FEF3FE7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7051327C-FB24-45C8-BF62-BD88DA838911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=17",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-429.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13591",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0519",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10861",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1263",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146F7A77-A950-4CAD-BDA9-C239696F569D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DCE8FF-40C3-44F7-8185-0422ADDA051B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAC3A7C-2092-46D4-908B-CF03F4217112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F3945-21ED-44C6-86D2-B7755A87014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DDB008-E88E-473C-B030-AF9B6F5E4E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEF4480-D50B-464C-AE39-A12455DBC99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15928E10-7D41-45B2-87D6-8AA10190A8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E13C4-F42D-4168-B25E-544E1549C46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4947CDE-CB89-456B-8B5F-0E17B46BC893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF701E58-35E8-4DDE-B832-C5A23E61A3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2498D898-D243-4D0C-9AEF-0138D19A68B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3924060B-1EC1-4003-B306-E327634E7797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D45B43DF-FD4C-4C37-9569-1CCE450B8987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99879B2B-7FFB-4181-8928-13B7E17F36C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B10DC6E8-1A85-4F3B-88C9-0425782010A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.isec.pl/vulnerabilities/isec-0023-coredump.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-472.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-529.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/397966",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13589",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0524",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10909",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1122",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.isec.pl/vulnerabilities/isec-0023-coredump.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-472.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-529.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/397966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via format string specifiers in the xtellmail command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:dmail:3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE6CCE4-3F4C-4D9C-AB85-B05739B9EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:dmail:3.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46D1DAB-DFD6-4322-BF9E-C69D5BD4A9A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111531804617905&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15242",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.org.sg/vuln/dmail31a.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13505",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111531804617905&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.org.sg/vuln/dmail31a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jgs-xa:jgs-portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "EF4D940F-BA4B-40D3-B761-A7604EB13549"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111506870504598&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627681218415&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15219",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013866",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111506870504598&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627681218415&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a \"..\\\\\" (dot dot backslash) in the urlget site command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raiden_professional_servers:raidenftpd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.2240",
            "matchCriteriaId" : "01D4AF9F-D0F9-4AB1-97D8-9B1E00E2F66E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.raidenftpd.com/showflat.php?Board=UBB13&Number=45685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111507556127582&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15037",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.raidenftpd.com/showflat.php?Board=UBB13&Number=45685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111507556127582&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/15713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute arbitrary SQL commands via the Event_ID parameter to (1) defer.asp or (2) details.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aaronoutpost:asp_inline_corporate_calendar:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "943507C3-2F69-4268-A77D-A11A9232C9CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111530675909673&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111530675909673&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interspire:articlelive:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A916F3-5E6B-4A82-A616-BA3C3491CCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111530871724865&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013895",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/inal.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13493",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111530871724865&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/inal.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3) LastName, (4) Biography, or (5) BlogId parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interspire:articlelive:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A916F3-5E6B-4A82-A616-BA3C3491CCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111530871724865&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013895",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13493",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111530871724865&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a \"\\..\" (backward slash dot dot) with a leading '\"' (double quote) in the GET command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.00b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF92180-09D2-4802-9C06-EEB72A29864C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.20b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83F3EB7-61B8-4B67-8CE2-137B377A0294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.30b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16963987-BC9A-4C07-A76E-9C6D92A1E755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.31b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E284D0C6-A8B5-4B37-A91A-96DBC53FFA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BBB39E-C916-49B0-B316-B67726CB62D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:2.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7757A51-84EA-45EE-B815-7FD2A0D5076F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:2.0.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52EFB45-CCC0-45E9-A4F4-54F9A6CDA95D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DC365E-0B3C-474F-8FB3-B5F070545F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C9B81-DAAA-46C7-BC39-296DD3B0CDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:2.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C94D7A8-FADB-4D4B-89EF-1B198EDD5B38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111530871716145&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111530871716145&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:2.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C94D7A8-FADB-4D4B-89EF-1B198EDD5B38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111530871716145&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15175/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111530871716145&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15175/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2) reqagree, or (3) m parameter to upstracking.php or (4) nlst parameter to display.php.  NOTE: the vendor was not able to reproduce some of the reported vectors but believes that they have been addressed.  The original researcher is known to be unreliable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fishnet:fishcart:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBBECD9-FEE0-4D7F-B10D-BF8E5727B0E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111530799109755&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15232/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/fishc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.fishcart.org/archives/200505/msg00028.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/457754/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13499",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111530799109755&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15232/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/advisories/fishc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.fishcart.org/archives/200505/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/457754/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) cartid parameter to upstnt.php or (2) psku parameter to display.php.  NOTE: the vendor disputes this report, saying that they are forced SQL errors.  The original researcher is known to be unreliable"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fishnet:fishcart:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBBECD9-FEE0-4D7F-B10D-BF8E5727B0E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111530799109755&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15232/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/fishc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/457754/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13499",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111530799109755&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15232/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalparadox.org/advisories/fishc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/457754/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) the E-mail address, Note, or Public Certificate fields to address.html, (2) addressaction.html, (3) the Signature field to settings.html, or (4) the Shared calendars to calendarsettings.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A700C6B-04D1-45F9-87D8-34406ABC6AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B80E1F5-7051-4B99-BB35-F194383DB5A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111530933016434&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111530933016434&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to (1) calendar_addevent.html, (2) calendar_event.html, or (3) calendar_task.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A700C6B-04D1-45F9-87D8-34406ABC6AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B80E1F5-7051-4B99-BB35-F194383DB5A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111530933016434&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15249",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111530933016434&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A700C6B-04D1-45F9-87D8-34406ABC6AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B80E1F5-7051-4B99-BB35-F194383DB5A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111530933016434&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111530933016434&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory via viewaction.html or (2) move arbitrary files via the importfile parameter to importaction.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A700C6B-04D1-45F9-87D8-34406ABC6AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B80E1F5-7051-4B99-BB35-F194383DB5A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111530933016434&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111530933016434&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gossamer_threads:gossamer_threads_links:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD11E263-3B04-4347-8F2B-7DD254A4BB88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gossamer_threads:gossamer_threads_links:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5780E720-F6FF-4E50-9C52-6CAA9B1EB219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gossamer_threads:gossamer_threads_links-sql:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A1BBD1-619D-4582-8ACA-016E913CE221"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gossamer-threads.com/perl/gforum/gforum.cgi?post=281029%3B",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111531023916998&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013891",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gossamer-threads.com/forum/Gossamer_Links_3.0.1_Released_P280986/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13484",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gossamer-threads.com/perl/gforum/gforum.cgi?post=281029%3B",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111531023916998&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gossamer-threads.com/forum/Gossamer_Links_3.0.1_Released_P280986/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary files via a ..\\ (dot dot backslash) in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dead_pirate_software:simplecam:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5479755D-0D3E-4CD1-80E8-3308E94631D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111531466319161&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/SimpleCam1.2-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13495",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/May/1013888.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111531466319161&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/SimpleCam1.2-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/May/1013888.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) entryid or (2) password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:megabook:megabook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1B614B-2EF2-45DD-ACA5-3E6AA33BAF89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:megabook:megabook:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F655F1E1-3B77-4224-9A76-CAC348C1477B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111531609618182&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/397809",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111531609618182&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/397809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape detection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B82E1-D1AD-46F2-8B95-117F38563FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC5FDD9-F24C-4DA2-9CE3-96522DB4A10E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDECF110-F375-4A3C-8BA9-1CF69B6EF027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E604B-6C0D-474F-A3A9-B07EF0A7D2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8667E51F-86A9-4181-8FCC-BECC6F50913B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84E349-48A8-4800-A300-AACEC8659656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323353FE-7ECD-4668-BDB1-3E5CA8F3F9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4237F0-BE51-4FCD-9CF1-83E54723390A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8975840-9843-4034-BBED-B31A9BA16DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A39665-BB49-4135-9850-8CF9E69546FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2764001-8B54-47AD-A265-0C0B0F691A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2720EA-55FB-40B1-BE58-3E16628DA248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BB176D-7A94-4A91-89FC-9971E19FF7C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F012561-EA9E-4665-AD81-0AC7655BA22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:9.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF5BE7D-BB10-43E5-8910-626CB6032D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA959EE-44EE-4B81-B7D3-E1C4B9B29FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330BE6F7-144F-4188-84A4-6597AED71024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C42FED-8E75-4AAD-9870-CD16508DDF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E38EFA-AEFB-4B9E-913C-FFE3C2DABFC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:release_2_9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A742D865-D856-4E44-8C18-82A40E2D85D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:release_2_9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C190DB-8DA7-4858-A646-A62567AFF689"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111531683824209&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/777773",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle-fine-grained-auditing-issue.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111531683824209&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/777773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle-fine-grained-auditing-issue.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Applying patchset 10.1.0.4 is fixing this issue for Oracle 10g. Oracle 9i is still vulnerable."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B82E1-D1AD-46F2-8B95-117F38563FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC5FDD9-F24C-4DA2-9CE3-96522DB4A10E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDECF110-F375-4A3C-8BA9-1CF69B6EF027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E604B-6C0D-474F-A3A9-B07EF0A7D2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8667E51F-86A9-4181-8FCC-BECC6F50913B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84E349-48A8-4800-A300-AACEC8659656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323353FE-7ECD-4668-BDB1-3E5CA8F3F9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4237F0-BE51-4FCD-9CF1-83E54723390A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8975840-9843-4034-BBED-B31A9BA16DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A39665-BB49-4135-9850-8CF9E69546FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2764001-8B54-47AD-A265-0C0B0F691A15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111531740305049&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/exploits/oracle_exploit_dbms_scheduler_select_user.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13509",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111531740305049&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/exploits/oracle_exploit_dbms_scheduler_select_user.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Applying patchset 10.1.0.4 is fixing this issue."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in myBloggie 2.1.1 allows remote attackers to obtain sensitive information via an invalid post_id parameter, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE6763A-BD4B-4A6B-8AF3-04B4BCEC4FDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111531904608224&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mywebland.com/forums/viewtopic.php?t=180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111531904608224&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mywebland.com/forums/viewtopic.php?t=180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) year parameter in viewmode.php, or the (2) cat_id, (3) month_no, or (4) post_id parameter in index.php, which are not properly sanitized before they are displayed in an error message.  NOTE: issues 2, 3, and 4 may be due to a problem in associated products rather than myBloggie itself."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE6763A-BD4B-4A6B-8AF3-04B4BCEC4FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3897412E-B35E-44CE-91C6-6BBA9EB5B047"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111531904608224&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mywebland.com/forums/viewtopic.php?t=180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13507",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111531904608224&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mywebland.com/forums/viewtopic.php?t=180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Download newest myBloggie from http://mywebland.com/"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "delcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by modifying the comment_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE6763A-BD4B-4A6B-8AF3-04B4BCEC4FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3897412E-B35E-44CE-91C6-6BBA9EB5B047"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111531904608224&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mywebland.com/forums/viewtopic.php?t=180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13507",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111531904608224&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mywebland.com/forums/viewtopic.php?t=180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the keyword parameter in search.php; or (2) the date_no parameter in viewdate mode, (3) the cat_id parameter in viewcat mode, the (4) month_no or (5) year parameter in viewmonth mode, or (6) post_id parameter in viewid mode to index.php.  NOTE: item (1) was discovered to affect 2.1.3 as well."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE6763A-BD4B-4A6B-8AF3-04B4BCEC4FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E310D0A0-AB13-44D3-847B-505D4E7EB011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111531904608224&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111722848308367&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mywebland.com/forums/viewtopic.php?t=180",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14980",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111531904608224&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111722848308367&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mywebland.com/forums/viewtopic.php?t=180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/14980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to (1) search_list.php, (2) item_list.php, or (3) item_show.php, which reveal the path in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:midicart_software:midicart_php_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0F7EBA-EE49-40F0-83CC-887CC45E9270"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111533057918993&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hackgen.org/advisories/hackgen-2005-004.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111533057918993&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hackgen.org/advisories/hackgen-2005-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) searchstring parameter to search_list.php or the (2) secondgroup or (3) maingroup parameters to item_list.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:midicart_software:midicart_php_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0F7EBA-EE49-40F0-83CC-887CC45E9270"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111533057918993&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hackgen.org/advisories/hackgen-2005-004.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13516",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13517",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13518",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111533057918993&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hackgen.org/advisories/hackgen-2005-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) searchstring parameter to search_list.php, the (2) maingroup or (3) secondgroup parameters to item_list.php, or (4) code_no parameter to item_show.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:midicart_software:midicart_php_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0F7EBA-EE49-40F0-83CC-887CC45E9270"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111533057918993&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hackgen.org/advisories/hackgen-2005-004.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13512",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13513",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13514",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13515",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111533057918993&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hackgen.org/advisories/hackgen-2005-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \\disc\\ command, which tells the server the CD key is no longer in use."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gamespy:cd-key_validation_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77ABDE7-F8AB-4633-BF03-E3E981171694"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/gskeyinuse-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111539740212818&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15254/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/gskeyinuse-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111539740212818&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15254/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:apple:mail:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A3D9D4-B203-4C9A-B6D4-FDA2AE5F81A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111539448630095&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111539448630095&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via the perm parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cj:ultra_plus:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F735C63F-D847-405D-8BCE-5B1169C61443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cj:ultra_plus:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514774C-4548-4FDC-AB5F-BA2B830561D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111539589013911&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111539589013911&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411BECA0-EE69-4AD6-82C5-B8238A7EE2A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C893246A-4959-4920-B4D1-1114FD0CB22F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111541709402784&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13538",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111541709402784&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PwsPHP 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) month or (2) annee parameters to the news module, (3) nbractif or (4) annee parameters to the stats module, (5) id parameter to profil.php, (6) mb_lettre or (7) lettre parameter to memberlist.php, or (8) chaine_search, or (9) auteur_search parameter to the recherche module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pwsphp:pwsphp:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3C7FE-BFD8-4313-849B-638D3C748514"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111565808024581&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15315",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111565808024581&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in profil.php in PwsPHP 1.2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pwsphp:pwsphp:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3C7FE-BFD8-4313-849B-638D3C748514"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111565808024581&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111565808024581&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PwsPHP 1.2.2 allows remote attackers to obtain sensitive information via a direct request to the admin directory, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pwsphp:pwsphp:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3C7FE-BFD8-4313-849B-638D3C748514"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111565808024581&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111565808024581&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PwsPHP 1.2.2 allows remote attackers to bypass authentication and post arbitrary comments via the Pseudo cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pwsphp:pwsphp:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3C7FE-BFD8-4313-849B-638D3C748514"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111565808024581&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111565808024581&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Admin panel in PwsPHP 1.2.2 does not properly verify uploaded picture files, which allows remote attackers to upload and possibly execute arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pwsphp:pwsphp:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3C7FE-BFD8-4313-849B-638D3C748514"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111565808024581&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15315",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111565808024581&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de enteros en la función stralloc_readyplus en qmail, cuando se ejecuta en plataformas de 64 bits con una gran cantidad de memoria virtual, permite a los atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario a través de una gran solicitud SMTP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qmail_project:qmail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA9D55F-8FDA-4B2C-BE43-82BDFEED1C7D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "902B8056-9E37-443B-8905-8AA93E2447FB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/158203/Qmail-Local-Privilege-Escalation-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/Jun/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/May/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Jun/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013911",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/19/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/20/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/20/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/06/16/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/06/06/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4556-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4692",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/158203/Qmail-Local-Privilege-Escalation-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/Jun/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/May/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Jun/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/19/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/20/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/20/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/06/16/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/06/06/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4556-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index."
      }, {
        "lang" : "es",
        "value" : "command.c en qmail, cuando se ejecuta en plataformas de 64 bits con una gran cantidad de memoria virtual, permite a los atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario a través de un comando SMTP largo sin un carácter de espacio, lo que hace que una matriz sea referenciado con un índice negativo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dan_bernstein:qmail:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BA8B96-AF8A-41FF-AF37-FE686C9B099C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/May/42",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/19/8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/20/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4556-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/May/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/19/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/20/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4556-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands."
      }, {
        "lang" : "es",
        "value" : "El error de firma de enteros en las funciones qmail_put y substdio_put en qmail, cuando se ejecuta en plataformas de 64 bits con una gran cantidad de memoria virtual, permite a los atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario a través de una gran cantidad de comandos SMTP RCPT TO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dan_bernstein:qmail:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BA8B96-AF8A-41FF-AF37-FE686C9B099C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/May/42",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013911",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/19/8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/20/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4556-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/May/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/19/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/05/20/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4556-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the _cmd_sendlog function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:dmail:3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE6CCE4-3F4C-4D9C-AB85-B05739B9EB41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15242",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/dmail31a.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13497",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/dmail31a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists (ACLs)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3\\(1\\)",
            "matchCriteriaId" : "26D72152-412B-4FDB-819D-1D111E66B72E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050511-url.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050511-url.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration, allows local users to cause a denial of service (automountd crash) when \"accessing\" /xfn/_x500."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08003947-A4F1-44AC-84C6-9F8D097EB759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57786-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57786-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1519",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5_stable9",
            "matchCriteriaId" : "01315F91-D843-49EC-81B2-0FDDD95E0789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15294",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-489.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13592",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-dns_query",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0521",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9976",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-489.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-dns_query",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in WebApp Guestbook PRO 3.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content of a message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixysoft:guestbook_pro:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134BDAA4-B085-43C5-8377-FF7919107DA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111585232810150&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15290/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16349",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13593",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/guesbookpro_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111585232810150&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15290/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/guesbookpro_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web module in Neteyes Nexusway allows remote attackers to bypass authentication and gain administrator privileges by setting the cyclone500_auth cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neteyes:nexusway:805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B2892D-CA51-4656-B010-2FB22A1E4C7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0225.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111585017832066&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15150",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16446",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0225.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111585017832066&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in the ip parameter for (1) nslookup.cgi or (2) ping.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:neteyes:nexusway:805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B2892D-CA51-4656-B010-2FB22A1E4C7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033945.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111585017832066&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15150",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16448",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16449",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033945.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111585017832066&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to certain commands, as demonstrated using ping and traceroute."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neteyes:nexusway:805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B2892D-CA51-4656-B010-2FB22A1E4C7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033945.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111585017832066&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15150",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16447",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033945.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111585017832066&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in post.asp in MaxWebPortal 1.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mod, (2) M, or (3) type parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD43E028-53FC-475E-8E62-5660E2E93265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFAB9F0-D654-4ADE-A54A-C3FC7675CC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D88D67-858C-4A64-9EAC-C9634183F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B875DE4-9AEC-4172-9E2D-60651F846B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448A15D5-BB55-4B4D-8751-829A00E644B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111584883727605&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15329",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=2542",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111584883727605&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=2542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MaxWebPortal 1.3.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fpassword parameter to inc_functions.asp, (2) txtAddress, (3) message, or (4) subject parameter to post_info.asp, (5) andor parameter to search.asp, (6) verkey parameter to pop_profile.asp, or (7) Remove or (8) Delete parameter to pm_delete2.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD43E028-53FC-475E-8E62-5660E2E93265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFAB9F0-D654-4ADE-A54A-C3FC7675CC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D88D67-858C-4A64-9EAC-C9634183F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B875DE4-9AEC-4172-9E2D-60651F846B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448A15D5-BB55-4B4D-8751-829A00E644B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B22E55F5-AA5E-4F68-ACC2-F170D811FA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC20472-1004-43E0-8F91-4697824FA769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC344628-1C14-45FE-A073-25ADCE6A0AA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111584883727605&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15329",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=2542",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111584883727605&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=2542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ShowOff! 1.5.4 allows remote attackers to cause a denial of service (server crash) via a malformed request to port 8083."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wenig_and_spitzer-williams:showoff_digital_media_software:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7472A97E-779E-46DD-85D8-8FAE2427A353"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15300",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16333",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin_login.asp for ASP Virtual News Manager allows remote attackers to execute arbitrary SQL commands via the password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:darrel_oneil:asp_virtual_news_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B098C6E-265A-49B1-AE23-5E10B9FCAE85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013933",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.under9round.com/avn13.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://securitytracker.com/id?1013933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.under9round.com/avn13.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boastmachine:boastmachine:3.0:*:platinum:*:*:*:*:*",
            "matchCriteriaId" : "3F1FEADA-C140-4375-80CF-DFD7B486DA24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15312",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernelpanik.org/docs/kernelpanik/bmachines.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16334",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernelpanik.org/docs/kernelpanik/bmachines.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) iCategory or (2) page parameter to index.php, or (3) iCategory parameter in the query string to the forum directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_solution:quick.forum:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8660965-DF15-4C09-A510-348506FBC663"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15200",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16326",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to execute arbitrary SQL commands via the iCategory parameter.  NOTE: the vendor has privately disputed this issue, saying that Quick.cart does not even use SQL and therefore can not be vulnerable to SQL injection"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_solution:quick.cart:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E27F22-EA3D-4EBC-B8E0-216447433CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/quickcart-sword-variable-xss-and.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16331",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/quickcart-sword-variable-xss-and.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via crafted parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/212190",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/212190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/185702",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/185702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/713614",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/713614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:24.410",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1343.  Reason: This candidate is a reservation duplicate of CVE-2005-1343.  Notes: All CVE users should reference CVE-2005-1343 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1531",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via \"Wrapped\" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) \"a nested variant.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "D1CB48E1-FCDD-49B2-B73E-37E912072683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1013962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1013963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-43.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-434.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-435.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13641",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0530",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100015",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10351",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-43.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-435.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1532",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via \"non-DOM property overrides,\" a variant of CVE-2005-1160."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1013964",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1013965",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-44.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-434.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-435.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13645",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0530",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100014",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10791",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-44.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-435.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to \"enter bugs into products that are closed for bug entry\" by modifying the URL to specify the name of the product."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893741D3-062B-45F9-B5A3-1B81058E7FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D53B5F-6AEE-4192-B838-E1DA92C59285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1883A98C-E595-4F3C-87BF-A63393F9F561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4B035-B73E-48E9-BBB9-83219F5D2A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9452C271-2812-4775-8396-394C642EACFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D351AF2-C0AB-4BB3-8692-677A3025A615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B900D9A7-913A-4176-90CF-C7C3B09A4261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B692910E-633D-4A88-B245-56A2B58DD4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86EE5DB-442B-4C78-8152-AF1048C6A974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B82A1A-56EB-41D5-8619-2A717E3A6ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2FC5C7-B218-4B87-9805-F90AC0E7A281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCDA64F-C49A-4F5B-B285-4079D8E3A499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED3457-CC21-4DB3-931F-677F723E1B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8711D3-55CF-4131-BBAC-6BE07068219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D7EA7C-B401-4F5A-AC08-2199DD117403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2DDC7C-CD2B-4597-A5E0-266A884958FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111592031902962&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15338",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.16.8/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16426",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=287109",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111592031902962&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.16.8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=287109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while attempting to view a chart, displays the password in the URL, which may allow local users to gain sensitive information from web logs or browser history."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893741D3-062B-45F9-B5A3-1B81058E7FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D53B5F-6AEE-4192-B838-E1DA92C59285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1883A98C-E595-4F3C-87BF-A63393F9F561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4B035-B73E-48E9-BBB9-83219F5D2A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9452C271-2812-4775-8396-394C642EACFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D351AF2-C0AB-4BB3-8692-677A3025A615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B900D9A7-913A-4176-90CF-C7C3B09A4261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B692910E-633D-4A88-B245-56A2B58DD4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86EE5DB-442B-4C78-8152-AF1048C6A974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B82A1A-56EB-41D5-8619-2A717E3A6ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2FC5C7-B218-4B87-9805-F90AC0E7A281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCDA64F-C49A-4F5B-B285-4079D8E3A499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED3457-CC21-4DB3-931F-677F723E1B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8711D3-55CF-4131-BBAC-6BE07068219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D7EA7C-B401-4F5A-AC08-2199DD117403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2DDC7C-CD2B-4597-A5E0-266A884958FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111592031902962&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15338",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16427",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=287436",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111592031902962&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=287436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directtopics:directtopics:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CA9E4C-4F54-4FB0-929C-1F231B793CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directtopics:directtopics:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B281FEB-B11B-4EC8-AC19-35CDD103180F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directtopics:directtopics:beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1484E6-6C80-4AAB-8738-06AE0F4AE158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directtopics:directtopics:final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18489EEE-6253-4926-AED4-78EE39D64352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111592417803514&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111592417803514&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to obtain sensitive information via an invalid topic parameter, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directtopics:directtopics:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CA9E4C-4F54-4FB0-929C-1F231B793CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directtopics:directtopics:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B281FEB-B11B-4EC8-AC19-35CDD103180F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directtopics:directtopics:beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1484E6-6C80-4AAB-8738-06AE0F4AE158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directtopics:directtopics:final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18489EEE-6253-4926-AED4-78EE39D64352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111592417803514&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111592417803514&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when \"Save to Disk\" is selected, which allows remote attackers to hide the real file types of downloaded files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/12979",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-11/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16432",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/12979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-11/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition (.qtz) file that uses certain patches to read local information, then other patches to send the information to the attacker."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0265.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=301714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/quartzcomposer-dev/2005/May/msg00250.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/quartzcomposer-dev/2005/May/msg00263.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://remahl.se/david/vuln/018",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15307",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013961",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13603",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0265.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=301714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/quartzcomposer-dev/2005/May/msg00250.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/quartzcomposer-dev/2005/May/msg00263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://remahl.se/david/vuln/018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0758",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gzip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.5",
            "matchCriteriaId" : "63ECC611-944C-43B6-A57C-443C413ECC13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=90626",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-357.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18100",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013928",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-05.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:026",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:027",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16371",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-474.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13582",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-158-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20539",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1081",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1107",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9797",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=90626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-357.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-474.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-158-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EnCase Forensic Edition 4.18a does not support Device Configuration Overlays (DCO), which allows attackers to hide information without detection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guidance_software:encase:4.18a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD286C9B-1BA7-4C55-AB9A-E64907E03564"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15340",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/104/398021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/104/398021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261FAE51-5207-4136-9FFE-2330A281266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32C83B9-F7DA-450A-A687-9A73734CD712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9485283A-B73E-4567-914A-42A86F5FFCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95892168-0FB6-4E3F-9303-2F9B3CF60D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5021564-5E0A-4DDC-BC68-200B6050043E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C50750-FE1D-42BA-9125-7D8E872AA2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AA66E5-FDDD-4243-B945-DFEBDD25F258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F359CD-5DC4-4919-B8E1-95BDDBD27EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C8C550-3313-4266-B4B3-E9E9047CFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEEBA7B-81D5-4148-912B-9AD448BBE741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448555FE-8E91-4EA7-BA05-6915F5508319"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=91584",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-130-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=91584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-130-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of libtiff as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the ELF parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a crafted ELF file, which leads to a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.3.991:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1108C417-811D-4CD9-A5B7-7A1A594B5ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.3.992:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA728463-FBA7-4F70-A07D-5EF2E4F607B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B1CDB9-B000-4E34-9E56-62E39CE741B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B824F9A-9454-463F-A638-9C80427A22CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB246D3-D7A8-4AE5-9DB9-2BE8ABF79509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EF9BF0-2B92-439D-B1C3-B37A192C31E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A9468A-A19D-413E-B323-9105A7563B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D793627-8CCB-4F17-A840-9525A87CAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C141C50-4391-41AA-BD99-89D9B3F33B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43736AC1-5698-4BD0-8C18-164F22D359E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4363A59-87F0-4B3B-BD2A-620341B2099B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2EB739-42DA-41B8-AD2B-095D057DC5E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F4778B-3EE7-41F3-8325-D6C191A790AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.6.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4BF6D5-7C26-4503-AF9B-104337A17151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7108F831-CCAD-4AAD-9B8F-771ACBDF8BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B88FE1B4-59D9-423C-A133-8D30AAEB5142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DD7652-1E91-4C79-A9B6-4B8730F7D56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7DCB2C-C038-4D74-80EC-F08753612261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA961D7-1EC0-4633-8782-265CB843A870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DA7CF8-0A79-4448-A987-8409AC86B5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013B1243-B580-4E9D-8B33-4D93997A1C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:2000-01-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A887107-03C8-41C4-B213-F9C08B30F51F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the PE parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a crafted PE file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.3.991:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1108C417-811D-4CD9-A5B7-7A1A594B5ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.3.992:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA728463-FBA7-4F70-A07D-5EF2E4F607B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B1CDB9-B000-4E34-9E56-62E39CE741B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B824F9A-9454-463F-A638-9C80427A22CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB246D3-D7A8-4AE5-9DB9-2BE8ABF79509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EF9BF0-2B92-439D-B1C3-B37A192C31E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A9468A-A19D-413E-B323-9105A7563B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D793627-8CCB-4F17-A840-9525A87CAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C141C50-4391-41AA-BD99-89D9B3F33B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43736AC1-5698-4BD0-8C18-164F22D359E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4363A59-87F0-4B3B-BD2A-620341B2099B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2EB739-42DA-41B8-AD2B-095D057DC5E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F4778B-3EE7-41F3-8325-D6C191A790AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.6.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4BF6D5-7C26-4503-AF9B-104337A17151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7108F831-CCAD-4AAD-9B8F-771ACBDF8BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B88FE1B4-59D9-423C-A133-8D30AAEB5142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DD7652-1E91-4C79-A9B6-4B8730F7D56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7DCB2C-C038-4D74-80EC-F08753612261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA961D7-1EC0-4633-8782-265CB843A870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DA7CF8-0A79-4448-A987-8409AC86B5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013B1243-B580-4E9D-8B33-4D93997A1C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ht_editor:ht_editor:2000-01-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A887107-03C8-41C4-B213-F9C08B30F51F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers to execute arbitrary commands via a large packet to port 20031."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bakbone:netvault:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F9A244-CF55-402E-8136-50A357B6F01C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111600439331242&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111600439331242&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL commands via the entry parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_guestbook:advanced_guestbook:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ACF1A1-BAAA-47EF-AAE2-AEB9C124E345"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111566565621193&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13548",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111566565621193&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. (dot dot) in the print parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:colored_scripts:easy_message_board:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE6228-E431-4DE4-A066-EA01221D523D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111566691005844&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13551",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/easymsgb_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111566691005844&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/easymsgb_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:colored_scripts:easy_message_board:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE6228-E431-4DE4-A066-EA01221D523D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111566691005844&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/easymsgb_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111566691005844&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/easymsgb_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a race condition and may allow remote attackers to bypass virus protection if the file is executed before the antivirus starts on system reboot."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE95D66F-EB8F-4BB1-93FA-B259FC954F6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111566827411376&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111566827411376&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote attackers to gain sensitive information via a direct request to the image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:geovision:digital_surveillance_system:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08BAAF9-E82F-4EDF-9E2E-0A564387D008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:geovision:digital_surveillance_system:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD895F6-EC24-40C4-8167-F147098B54F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:geovision:digital_surveillance_system:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D605A886-BEF5-4A1E-BF8B-62A507EA65CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111574131105737&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.esqo.com/research/advisories/2005/100505-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13571",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111574131105737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.esqo.com/research/advisories/2005/100505-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via sniffing."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:geovision:digital_surveillance_system:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08BAAF9-E82F-4EDF-9E2E-0A564387D008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:geovision:digital_surveillance_system:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD895F6-EC24-40C4-8167-F147098B54F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:geovision:digital_surveillance_system:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D605A886-BEF5-4A1E-BF8B-62A507EA65CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111574131105737&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.esqo.com/research/advisories/2005/100505-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111574131105737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.esqo.com/research/advisories/2005/100505-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers to execute arbitrary SQL commands via the sort_by parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowbb:wowbb_web_forum:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC3DE3E-E2BB-4605-BEC6-143FAC423D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowbb:wowbb_web_forum:1.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C529C1C8-35C5-44AF-B2B5-342DE11F968E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowbb:wowbb_web_forum:1.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3856F564-A6EB-434D-BBCC-030D68D7A76B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111575905112831&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13569",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111575905112831&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gamespy cd-key validation system allows remote attackers to cause a denial of service (cd-key already in use) by capturing and replaying a cd-key authorization session."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gamespy:gamespy_sdk_cd-key_validation_toolkit:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D16D83B-DE00-4BF7-AD6A-27AD8AD1A69D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/gskeyinuse-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0065.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111575820116969&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15254",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/gskeyinuse-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0065.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111575820116969&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893741D3-062B-45F9-B5A3-1B81058E7FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D53B5F-6AEE-4192-B838-E1DA92C59285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1883A98C-E595-4F3C-87BF-A63393F9F561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4B035-B73E-48E9-BBB9-83219F5D2A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9452C271-2812-4775-8396-394C642EACFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D351AF2-C0AB-4BB3-8692-677A3025A615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B900D9A7-913A-4176-90CF-C7C3B09A4261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B692910E-633D-4A88-B245-56A2B58DD4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86EE5DB-442B-4C78-8152-AF1048C6A974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B82A1A-56EB-41D5-8619-2A717E3A6ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64434BFC-DDC0-4C7D-B578-472B0610C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F28D9-B000-4C26-A911-5E1B8A867BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A123F78-A671-4FB5-AE78-83762E9323C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C34288-A326-4B71-99B0-DA9FFD28160F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111592031902962&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15338",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.16.8/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16425",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=287109",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111592031902962&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.16.8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=287109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrowave AAP-3100AR wireless router allows remote attackers to bypass authentication by pressing CTRL-C at the username or password prompt in a telnet session, which causes the shell to crash and restart, then leave the user in the new shell."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:arcowave_systems:wlan_ap_\\+_adsl_router:aap_3100ar:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE87BA0C-D60D-44A5-B93F-9C643C70DDDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111592452331677&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15343",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16445",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111592452331677&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in DirectTopics 2.1 and 2.2 allows remote attackers to inject arbitrary web script via a javascript: URL in (1) a thread or (2) an IMG tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directtopics:directtopics:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CA9E4C-4F54-4FB0-929C-1F231B793CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directtopics:directtopics:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B281FEB-B11B-4EC8-AC19-35CDD103180F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111592417803514&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111592417803514&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:battleaxe_software:bttlxeforum:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E9025B-BA0E-45C7-A90D-4E0ED03B5BF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013934",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in ShowOff! 1.5.4 allow remote attackers to read arbitrary files via \"..\" sequences in arguments to the (1) ShowAlbum, (2) ShowVideo, or (3) ShowGraphic scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wenig_and_spitzer-williams:showoff_digital_media_software:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7472A97E-779E-46DD-85D8-8FAE2427A353"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15300",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Media Player 9 and 10, in certain cases, allows content protected by Windows Media Digital Rights Management (WMDRM) to redirect the user to a web site to obtain a license, even when the \"Acquire licenses automatically for protected content\" setting is not enabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28602CC-7866-4C30-B518-055923599A18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B892313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B892313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/12979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-11/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/12979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-11/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apg_technology:classmaster:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0CD940-3CBD-413B-976D-92D749132429"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securiteam.com/windowsntfocus/5SP0D0AFPQ.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13604",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5SP0D0AFPQ.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Bug Report 1.0 allows remote attackers to inject arbitrary web script or HTML via various fields to bug_report.php, which are not filtered or quoted when processed by bug_list.php or admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eric_fichot:bug_report:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE1328C-0D54-4C65-A63E-E46F81EE359E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013957",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) nom, (2) email, (3) siteweb, or (4) commentaire variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:1two:1two_news:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AADBB0A-F3CF-4D16-96DD-9F0D6D71EFDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013960",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "1Two News 1.0 allows remote attackers to (1) delete images for new stories via a direct request to admin/delete.php or (2) upload arbitrary images via a direct request to admin/upload.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:1two:1two_news:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AADBB0A-F3CF-4D16-96DD-9F0D6D71EFDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013960",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for Quick.Forum 2.1.6 allows remote attackers to inject arbitrary web script or HTML via the topic field in a NewTopic action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_solution:quick.forum:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8660965-DF15-4C09-A510-348506FBC663"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15200",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16327",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13602",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored words, and backups under the web document root, which allows remote attackers to obtain that information via a direct request to (1) db/users.txt, (2) db/banList.txt, (3) db/censureWords.txt, or (4) backup files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_solution:quick.forum:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8660965-DF15-4C09-A510-348506FBC663"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15200",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16328",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16329",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to inject arbitrary web script or HTML via the sWord parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_solution:quick.cart:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC0B105-38F2-4896-9E21-375206AC3DDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/quickcart-sword-variable-xss-and.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://opensolution.org/forum/?p=readTopic&nr=948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15297",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16330",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13599",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/quickcart-sword-variable-xss-and.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://opensolution.org/forum/?p=readTopic&nr=948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, privmsg.php, and other scripts, allow remote attackers to execute arbitrary script via a BBcode tag with a (1) javascript:, (2) applet:, (3) about:, (4) activex:, (5) chrome:, or (6) script: URI scheme, as demonstrated using the URL tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://castlecops.com/t123194-.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111552510000088&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/May/0098.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15298",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013918",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/113196",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/16439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=288194",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13545",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://castlecops.com/t123194-.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111552510000088&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/May/0098.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/113196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/16439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=288194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple iTunes before 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42486BD7-4371-46EE-B670-CED685872E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B6A66A-AC5F-48E0-ABCE-68828207B106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071BFB1F-402B-4D8C-8155-671792AEDB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=301596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15310",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013927",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/itunes.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13565",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=301596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/itunes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading \"/\" (slash) characters and \"..\" sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17AFBCF-30CD-4628-B45E-AC7868029B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE287C32-79D5-41C4-9DFD-A048577BBA7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2187189B-15D7-4DB8-88C4-7C05F288BCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F66A504-6100-4B59-9EBB-CE64520B1760"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111625635716712&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=327708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-010.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111625635716712&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=327708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via \"dirname/../cgi-bin\" in a URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17AFBCF-30CD-4628-B45E-AC7868029B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE287C32-79D5-41C4-9DFD-A048577BBA7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2187189B-15D7-4DB8-88C4-7C05F288BCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F66A504-6100-4B59-9EBB-CE64520B1760"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111625623909003&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=327708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-011.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111625623909003&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=327708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-011.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17AFBCF-30CD-4628-B45E-AC7868029B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE287C32-79D5-41C4-9DFD-A048577BBA7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2187189B-15D7-4DB8-88C4-7C05F288BCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F66A504-6100-4B59-9EBB-CE64520B1760"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111625623909003&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111625623909003&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the \"Altiris Client Service\" hidden window, disabling the password protection, disabling the \"Hide client tray icon box\" option, then opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2004-2070."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altiris:client_service:6.0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055CDF89-6BB9-40FB-9972-E29A812B0763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altiris:deployment_solution:5.6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB400B1-E748-4523-877C-AA254877CCC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altiris:deployment_solution:5.6.181:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C413719-FF42-4EAA-A524-5DE756457124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altiris:deployment_solution:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A834C4D-ADDF-4FAB-A0F6-9288C4655450"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-04/0614.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15159",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15897",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-04/0614.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/15897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in NIS+ on Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (rpc.nisd disabled and NIS+ unavailable) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08003947-A4F1-44AC-84C6-9F8D097EB759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57780-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57780-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"javascript vulerabilities in BB code\" in BirdBlog before 1.3.1 allow remote attackers to inject arbitrary Javascript."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birdblog:birdblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "C958F714-33CF-4F4B-9E0C-EC8C4D6079F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15206",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=324788",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=324788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codethat:shoppingcart:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE8C8D2-C040-4772-B2F5-90291A15F45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15251",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013924",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codethat:shoppingcart:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE8C8D2-C040-4772-B2F5-90291A15F45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15251",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013924",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sensitive information via a direct request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codethat:shoppingcart:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE8C8D2-C040-4772-B2F5-90291A15F45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15251",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013924",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16157",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Fusion SBX 1.2 and earlier does not properly use the extract function, which allows remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusion:sbx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "F7592A81-DCAB-48E5-B201-A24304F46A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15257",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploits.co.in/Article1134.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/16216",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16217",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5OP042KFPU.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploits.co.in/Article1134.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/16216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5OP042KFPU.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlite parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC7F0E6-7DA6-41E3-9F73-4FFF699195C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA35A95-B8FD-4ED8-95E0-409E50BF13AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4066556-F0CE-4E8B-B88D-C3BA03D98D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25D5B0-082C-41AF-A3BA-5B35E54BCCAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93242B-85AD-451E-BC0A-D8561C292430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52954D4B-72E9-434C-991A-7B3D6C71183C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_alpha_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8C2DB4-06C3-4400-B0F3-2025FD829788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pdr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053B554A-AC3D-496F-9E3D-D357D14B87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=168016",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111539908705851&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00073-05052005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=168016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111539908705851&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00073-05052005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC7F0E6-7DA6-41E3-9F73-4FFF699195C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA35A95-B8FD-4ED8-95E0-409E50BF13AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4066556-F0CE-4E8B-B88D-C3BA03D98D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25D5B0-082C-41AF-A3BA-5B35E54BCCAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93242B-85AD-451E-BC0A-D8561C292430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52954D4B-72E9-434C-991A-7B3D6C71183C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_alpha_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8C2DB4-06C3-4400-B0F3-2025FD829788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pdr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053B554A-AC3D-496F-9E3D-D357D14B87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=168016",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111539908705851&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111712587206834&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00073-05052005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5GP0E2KFQQ.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=168016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111539908705851&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111712587206834&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00073-05052005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5GP0E2KFQQ.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Kryloff Technologies Subject Search Server (SSServer) 1.1 allows remote attackers to inject arbitrary web script or HTML via the \"Search For\" field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryloff_technologies:subject_search_server:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC396ADE-2429-4593-89CA-86C54B627903"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"mathematical flaw\" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtomcrypt:libtomcrypt:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4FFABF-AAC4-4D75-8DAD-AB640A80DB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtomcrypt:libtomcrypt:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42BC54B5-3148-42B8-B29D-339D9053E9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtomcrypt:libtomcrypt:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5BD53C1-5807-4E8A-8CD5-8578D3096287"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5JP092AFPG.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.org/archive/1/397649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5JP092AFPG.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.org/archive/1/397649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MRO Maximo Self Service 4 and 5 stores certain information under the web document root using file extensions that are not processed by Tomcat, which allows remote attackers to obtain sensitive information via a direct request for the file, such as MXServer.properties."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mro_software:maximo_self_service:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3829CCC6-E6C5-43BF-B123-E6E7B03C0AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mro_software:maximo_self_service:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03233D4A-0344-460C-B422-33449AD807B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/397522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/397522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net56:file_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3347AA-951A-46BE-AFC6-EFF12C23ADAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0134.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13547",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0134.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service (crash) via a crafted string to TCP port 7080."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niteenterprises:remote_file_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18B4ABA-4D02-44D3-AA04-64AD14C4A922"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0129.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in \"php.ns\", which allows execution of arbitrary PHP code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "223492A7-A72D-4353-82A5-94A281B9FAC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/May/0075.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415300/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13542",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/May/0075.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415300/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to (1) psoft.guestbook.GuestBookServ in Standalone Site Studio or (2) E-Guest_sign.pl in Integrated Site Studio with H-Sphere."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:sitestudio:1.6_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54327A92-BD33-4E42-9969-CDC2292D59A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:sitestudio:1.6_patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF915BB0-A2FA-43B7-97AE-7043D9FEA611"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-008-sitestudio.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15286",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0154.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.psoft.net/SS/ss_16_security_update_guestbook.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.psoft.net/misc/hsphere_winbox_security_update_guestbook.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-008-sitestudio.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.psoft.net/SS/ss_16_security_update_guestbook.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.psoft.net/misc/hsphere_winbox_security_update_guestbook.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere_winbox:2.4.2_patch_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9194C643-1B8C-45BB-95A1-75B3842D7609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere_winbox:2.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A88D79-BFC9-487E-91E6-D69269B7859B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-007-hsphere.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15287",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.psoft.net/misc/hsphere_winbox_security_update_passwd.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13559",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-007-hsphere.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.psoft.net/misc/hsphere_winbox_security_update_passwd.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the (1) merchant or (2) demo parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remote_cart:remote_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4402BE0A-E306-4FC9-903A-4EA8CBCD6BB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013903",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.governmentsecurity.org/forum/lofiversion/index.php/t14715.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16454",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.governmentsecurity.org/forum/lofiversion/index.php/t14715.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke have unknown impact."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spidean:at-lite:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787C499F-29FA-457E-ADA7-FE92BE095CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spidean:autotheme:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CDE96B-947B-4F26-BC79-52BFA90AB56D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://news.postnuke.com/Article2687.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15289",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013908",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16346",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13539",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/Article2687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remote attackers to delete data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sun:storedge_6130_arrays:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F280F49D-347D-4116-8AD6-DB9553BE2948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15306",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013921",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57771-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/812438",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/16325",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57771-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/812438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/16325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in security.php for Tru-Zone NukeET 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via a base64 encoded Codigo parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tru-zone:nukeet:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2F14C5-6990-49F8-B009-1017D717096B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tru-zone:nukeet:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF251E2C-EA78-4C4B-88AB-35A1077BC4A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/nukeet-codigo-variable-cross-site.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15332",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013936",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16214",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13570",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/nukeet-codigo-variable-cross-site.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebX in Web Crossing 5.x allows remote attackers to inject arbitrary web script or HTML via a URL with an \"@\" followed by the desired script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_crossing_inc:web_crossing:5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633F49F4-527C-4801-8956-02F44456EAAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/16/16070-webcrossing.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15218",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16070",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13482",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/16/16070-webcrossing.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via the TID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbb:openbb:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7701BCD0-C552-4BCC-87DA-CF48B3FBD2A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111601780332632&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13624",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111601780332632&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to inject arbitrary web script or HTML via the reverse parameter in a list action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbb:openbb:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7701BCD0-C552-4BCC-87DA-CF48B3FBD2A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111601780332632&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13625",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111601780332632&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the postorder parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111600262424876&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13621",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111600262424876&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111600262424876&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111600262424876&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or possibly (2) postorder parameter, which reveals the path in an error message when a file can not be opened."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111600262424876&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111600262424876&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Willings WebCam and WebCam Lite 2.8 and earlier stores the password in memory in plaintext, which allows local users to gain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:willings:webcam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "81630B11-6CE4-4902-B3AF-7AC8A7D78FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:willings:webcam_lite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "8D96A0F4-944E-4F7F-8682-1AA99D54E62A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111601481221137&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111601481221137&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a room join request packet with a third : (colon) and an & (ampersand), which causes Messenger to send a corrupted packet to the server, which triggers a disconnect from the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349A209F-6609-4809-B228-E84623FA268D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92465439-530F-435E-976F-491AD3C56944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE7278-FFAD-489B-BDCC-BF6BA8D5DF0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111601904204055&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111601904204055&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.css.php3 in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML commands via the FontName parameter.  NOTE: it was later reported that 0.14.5 is also affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpheaven:phpmychat:0.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04FEECB-A07E-47FC-BF1E-2F8CC5455A3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111602076500031&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/484575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111602076500031&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/484575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Skull-Splitter Guestbook 1.0, 2.0 and 2.2 allows remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content of a message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soren_boysen:skull-splitter_guestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F138AD-75AC-4D8E-9940-2825870697EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soren_boysen:skull-splitter_guestbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E31AAC49-F320-405C-A1C5-EC427424FD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soren_boysen:skull-splitter_guestbook:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21430DE2-0888-4B34-B59A-6777095D7568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111609838307070&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.m0r1n3x.com/Skull-splitter_adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111609838307070&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.m0r1n3x.com/Skull-splitter_adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750 through 0.760rc4 allows remote attackers to read arbitrary files via a .. (dot dot) in the func parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7B5757-8E02-4764-BF26-B51AB98E141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3700514A-DB69-49F4-AB13-B9DAEB93F303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B720E0CD-7975-4D56-9F09-371E742443C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04899497-8B17-4428-9E60-EF8FDEA5F966"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/includes/pnMod.php.diff?r1=1.47&r2=1.48",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627124301526&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/Article2690.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/includes/pnMod.php.diff?r1=1.47&r2=1.48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627124301526&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/Article2690.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in productsByCategory.asp in MetaCart e-Shop allows remote attackers to inject arbitrary web script or HTML via the strCatalog_NAME parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalinks:metacart_e-shop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7C1209-B6EE-4388-AF02-28E5CCBBEC4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv13-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627073203176&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv13-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627073203176&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1264",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=111630512512222",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13651",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0557",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10264",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=111630512512222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:version_cue:gold:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "A10F07F5-5C99-40D5-9C15-C1DDA8D98B7C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2004-12/0040.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627622403544&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1012446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331621.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/12297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/12298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5EP0D20FQC.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2004-12/0040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627622403544&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331621.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/12297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/12298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5EP0D20FQC.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users to cause a denial of service and possibly execute arbitrary code, a similar vulnerability to CVE-2005-1264."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc4:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.12",
            "matchCriteriaId" : "64C51EA6-1658-4B37-8C49-20F3830FACE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0047.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=111630531515901&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0047.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=111630531515901&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in handlers.c for Pico Server (pServ) before 3.3 may allow attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17AFBCF-30CD-4628-B45E-AC7868029B0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE287C32-79D5-41C4-9DFD-A048577BBA7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2187189B-15D7-4DB8-88C4-7C05F288BCC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F66A504-6100-4B59-9EBB-CE64520B1760"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=327708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13648",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=327708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Viewglob before 2.0.1, related to \"a potential security issue with the Viewglob display and ssh X forwarding,\" has unknown impact."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D4ABA4-411E-4527-BA4A-3D3F40D57E2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F61DE86E-EB8E-4446-BFFF-5A7C18C7F9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D683563-F352-4B3F-A395-E76C22D89782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABEB345-4165-4D29-92B0-9F85C92F0832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D26CFF-0BAD-482B-81E0-D9C6F171F9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7437F3-C198-4D6B-B0AF-96F4CDEC53C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CBD0E8-C86B-4560-A9AB-30CA6D0532F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F375AC32-8E09-4CF2-95ED-F472546C4D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E3AEB0-1FB0-4CB1-8406-466CBA3690D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005B3AA4-7665-4EE5-B727-D0E2764A20D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924342E2-659A-4387-BC6E-D74E22F6B04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A446C44-5E73-443E-8830-52F00F46624B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0FBD00-55A7-41D6-8770-716C8B642881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewglob:viewglob:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2D953-DD3C-4877-8999-5BE09C994285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15293",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013937",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=325574",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=325574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79090F47-9D7C-42F4-A64E-6633A3CF73F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B45A79-F173-44D6-8737-22DDE3877AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A343A7FD-E5BA-4C84-913B-2B56AFA555FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.defacers.com.mx/advisories/3.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449517/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449573/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13637",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/tools/sbwebapp.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0554",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.defacers.com.mx/advisories/3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449517/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449573/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/tools/sbwebapp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C8CE03-944A-480E-9349-9143A74ADCBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "762D922E-387C-41D6-BA4B-9D97692B7570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D07B06C-3872-4D39-95FA-C0FAEBD9C2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36E11FE-5E1F-4BF9-A223-64B74984C5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D19ECFF-EAE7-4FCB-BE21-B0C08FF65AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F04E77C-C9ED-4CAE-964C-6AB395BFEBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DEC786-BC61-44F7-8B93-3ECDA07C0772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604A06DE-F946-42A0-8629-B87E7D6E9A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/May/0311.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13620",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/May/0311.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Attachment Mod before 2.3.13, related to a \"serious issue with realnames,\" has unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentools:attachment_mod:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "626E98FA-1EDB-49CF-9A03-B9D2F21B6CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentools:attachment_mod:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7B4E6E-1890-4974-AB51-15B2C670A60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentools:attachment_mod:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC155A0F-DB78-4D17-A726-4970E569FCC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentools:attachment_mod:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72A217E-D6F1-4132-B249-E279D0CC4180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentools:attachment_mod:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE097A3-F2AB-4F17-AD93-F186153EE98F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentools:attachment_mod:2.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B11B13-9379-4147-9180-70EA25DDE1D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentools:attachment_mod:2.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0215AB18-41C7-43E9-A9AE-8795A76DE5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentools:attachment_mod:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2539201C-3AD0-46E3-BB39-7DB83CA9026D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentools:attachment_mod:2.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAAE3AE-08C4-42EA-AD0D-19E1E1735083"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15327",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=326408",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=326408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "booby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by guessing item IDs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booby:booby:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F18440-BAB5-45CD-A0EF-468CD5C7ED30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booby:booby:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE213C2-B74B-4D4F-863D-4CDB31CC52B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booby:booby:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D95FD1-ADCB-4726-AEC7-CB77FDA04B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booby:booby:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46F95DC-41A5-42B8-B39F-9C746A8721F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booby:booby:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE675B5-4C75-46BA-993E-CFF0261D504C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booby:booby:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6234B6-664A-4C56-BF3A-7C2E0DECBBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booby:booby:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442305D2-B612-459D-A9BA-C502283E2A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booby:booby:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B52722-C08B-4107-8624-16A5FBEFF3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booby:booby:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006F11F1-67CE-439A-9DF5-49A3E5428248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booby:booby:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC294FC5-504D-45EC-8F56-F689CD1352F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booby:booby:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B8158F-96AD-4B70-BE65-1B72E1586126"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15305",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=326826",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13623",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=326826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tavis_rudd:cheetah:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA17A02D-B053-405C-9A39-04B3634363C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tavis_rudd:cheetah:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CDAD22-A1DE-4430-8101-18096C70E8C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=7070332&forum_id=1542",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=7070332&forum_id=1542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) anzahl_beitraege parameter to jgs_portal.php, 2) year parameter to (jgs_portal_statistik.php, 3) year parameter to (jgs_portal_beitraggraf.php, 4) tag parameter to (jgs_portal_viewsgraf.php, 5) year parameter to (jgs_portal_themengraf.php, 6) year parameter to (jgs_portal_mitgraf.php, 7) id parameter to jgs_portal_sponsor.php, or (8) the Accept-Language header to jgs_portal_log.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jgs-xa:jgs-portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "0239815A-81AE-4752-A71A-425DFD9FFB32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111627681218415&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627681218415&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) anzahl_beitraege parameter to jgs_portal.php, (2) year parameter to jgs_portal_statistik.php, (3) year parameter to jgs_portal_beitraggraf.php, (4) tag parameter to jgs_portal_viewsgraf.php, (5) year parameter to jgs_portal_themengraf.php, (6) year parameter to jgs_portal_mitgraf.php, (7) id parameter to jgs_portal_sponsor.php, or (8) the Accept-Language header to jgs_portal_log.php.  NOTE: this issue may stem from the same core problem as CVE-2005-1633."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jgs-xa:jgs-portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "0239815A-81AE-4752-A71A-425DFD9FFB32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111627681218415&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627681218415&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server path via direct requests to (1) jgs_portal_ref.php, (2) jgs_portal_land.php, (3) jgs_portal_log.php, (4) jgs_portal_global_sponsor.php, (5) jgs_portal_global.php, (6) jgs_portal_system.php, (7) jgs_portal_views.php; or multiple files in the jgs_portal_include directory, including (8) jgs_portal_boardmenue.php, (9) jgs_portal_forenliste.php, (10) jgs_portal_geburtstag.php, (11) jgs_portal_guckloch.php, (12) jgs_portal_kalender.php, (13) jgs_portal_letztethemen.php, (14) jgs_portal_links.php, (15) jgs_portal_neustemember.php, (16) jgs_portal_newsboard.php, (17) jgs_portal_online.php, (18) jgs_portal_pn.php, (19) jgs_portal_portalmenue.php, (20) jgs_portal_styles.php, (21) jgs_portal_suchen.php, (22) jgs_portal_team.php, (23) jgs_portal_topforen.php, (24) jgs_portal_topposter.php, (25) jgs_portal_umfrage.php, (26) jgs_portal_useravatar.php, (27) jgs_portal_waronline.php, (28) jgs_portal_woonline.php, or (29) jgs_portal_zufallsavatar.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jgs-xa:jgs-portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "0239815A-81AE-4752-A71A-425DFD9FFB32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111627681218415&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627681218415&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "19001041-22C4-4D2C-A918-378DACBB1DF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111632686805498&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-685.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/mysql-05172005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=158688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111632686805498&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-685.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/mysql-05172005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=158688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via the thold parameter to (1) comments.php or (2) pollcomments.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npds:npds:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D565FC-1787-4076-8C5F-265D6BFF9D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npds:npds:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D63132-CB80-46B8-A225-D05818EC437A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013973",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.npds.org/article.php?sid=1258",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.npds.org/article.php?sid=1258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in attribute values, which could allow remote attackers to exploit cross-site scripting (XSS) vulnerabilities in applications that rely on SafeHTML for protection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixel-apes_group:safehtml:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295BAE04-5089-4E17-AF67-34B957D27683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixel-apes_group:safehtml:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4F90DF-4D0F-40C6-9697-06E557F9468E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixel-apes_group:safehtml:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2C67F5-21CD-4691-B0BA-E28532910F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixel-apes_group:safehtml:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2938B64B-44D8-4377-99F9-D329BF73B34B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixel-apes_group:safehtml:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5605AF1F-1D54-49F8-B386-3D3C7352BD17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pixel-apes.com/safehtml/feed",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pixel-apes.com/safehtml/feed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Sigmaweb.DLL in Sigma ISP Manager 6.6 allows remote attackers to execute arbitrary SQL commands via the (1) username, (2) password, or (3) domain fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atinegar:sigma_isp_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.6",
            "matchCriteriaId" : "D53979FC-2370-4FB8-97CB-62C39876CBF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.under9round.com/sigma.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.under9round.com/sigma.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB800EF2-EB9C-4FBB-ACE6-0E42C90A349B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA86F865-68C6-49A4-88BA-8E0691926618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799A4534-1419-4F01-BC3F-5955529A347D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0193665-A611-486F-973D-4136997450CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7C6AFA-E1BC-4173-BC66-5AE03B6DF43F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E5A5EE-2EE0-4709-AE04-41D6543AA1C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B65A3D73-7721-4A39-8807-C1DCBEA7FAB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15388",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ignition-project.com/security/20050414-hosts-delete-owner-access-entries",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ignition-project.com/security/20050414-hosts-delete-owner-access-entries",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mod_channel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not allow protected operators to access channels that have been locked out by a key, which allows IRC users to cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB800EF2-EB9C-4FBB-ACE6-0E42C90A349B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA86F865-68C6-49A4-88BA-8E0691926618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799A4534-1419-4F01-BC3F-5955529A347D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0193665-A611-486F-973D-4136997450CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7C6AFA-E1BC-4173-BC66-5AE03B6DF43F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E5A5EE-2EE0-4709-AE04-41D6543AA1C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B65A3D73-7721-4A39-8807-C1DCBEA7FAB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15388",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ignition-project.com/security/20050515-protected-opers-cannot-join-channel-with-key",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ignition-project.com/security/20050515-protected-opers-cannot-join-channel-with-key",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the verify_email function in Woltlab Burning Board 2.x and earlier allows remote attackers to execute arbitrary SQL commands via the $email variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3912B7F7-8BC3-4B44-8ACF-0DC38DAD1365"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0199.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2005-May/000047.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00075-05162005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2005-May/000047.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00075-05162005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZCom_BitStream::Deserialize function in Zoidcom 1.0 beta 4 and earlier allows remote attackers to cause a denial of service via a crafted UDP packet with a large size value, which causes a memory allocation error or an out-of-bounds read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jorg_ruppel:zoidcom:1.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94A518B4-17D3-440A-BC25-2CEBA83D15B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jorg_ruppel:zoidcom:1.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112C303C-059F-4757-8C8F-05A29D6C6607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jorg_ruppel:zoidcom:1.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4264A08-60D5-4A02-8C98-E0EC34026D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/zoidboom-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0107.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013939",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zoidcom.com/download/changelog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/zoidboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0107.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zoidcom.com/download/changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DDB9D9-AD7B-479D-B128-7150286EE563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E12F60-B4AF-4EF1-A4AA-5E9F0B8B0690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059218D3-A3AD-4A10-9AA4-FBB689321D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.8/SCOSA-2005.8.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.8/SCOSA-2005.8.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Smc.exe in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before launching the Log Viewer export functionality, which allows local users to corrupt arbitrary files by saving log files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webroot_software:my_firewall_plus:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBD080F-58F3-4114-966D-A026A9B36C05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13577",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-20/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12842",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.webroot.com/services/mfp_advisory.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/13577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2004-20/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.webroot.com/services/mfp_advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0757",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service (system crash) via certain actions on an ext3 file system with extended attributes enabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*",
            "matchCriteriaId" : "81B543F9-C209-46C2-B0AE-E14818A6992E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "DB89C970-DE94-4E09-A90A-077DB83AD156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-294.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13680",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11406",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-294.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in guestbook.php for 1Two Livre d'Or 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) livreornom, (2) livreoremail, or (3) livreormessage parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:1two:livre_d_or:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA08B191-5211-4E6E-BC50-188DF8433161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013971",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Keyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keyvan1:imagegallery:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F816307-B82E-47DA-BD8B-8084661ED299"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15362",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013970",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13630",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default installation of Fastream NETFile FTP/Web Server 7.4.6, which supports FXP, does not require that the IP address in a PORT command be the same as the IP of the logged in user, which allows remote attackers to conduct FTP Bounce attacks to bypass firewall rules or cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastream:netfile_ftp_web_server:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D6A6D8-6C83-4E71-BF09-6FFF07C22466"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15394",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.org.sg/vuln/netfileftp746port.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.org.sg/vuln/netfileftp746port.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gurgens (GASoft) Guest Book 2.1 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gurgens:gurgens_guest_book:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D8B428-74D7-4EB0-BBF6-556EA5CA7DBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0351.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15373",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013976",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0351.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gurgens:gurgens_ultimate_forum:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB182061-ADB6-43B0-811F-6CDAE5C0B685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0350.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013974",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0350.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, a variant of CVE-2005-0688 and a reoccurrence of the \"Land\" vulnerability (CVE-1999-0016)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0505&L=NTBUGTRAQ&P=R409&D=0&F=N&H=0&O=D&T=0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13658",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0505&L=NTBUGTRAQ&P=R409&D=0&F=N&H=0&O=D&T=0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woppoware:postmaster:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C19B5FBE-B99E-4B83-B45D-EFD89DEB214C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15268",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13597",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/15268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the wmm parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woppoware:postmaster:4.2.2_build3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131C5E2A-4F44-4D74-A502-59BDF0B9B070"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to bypass authentication by modifying the email parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woppoware:postmaster:4.2.2_build3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131C5E2A-4F44-4D74-A502-59BDF0B9B070"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to inject arbitrary web script or HTML via the email parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woppoware:postmaster:4.2.2_build3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131C5E2A-4F44-4D74-A502-59BDF0B9B070"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "6E7FF6CB-8436-46E4-B2F2-669A4B3C9336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:6.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B09C359F-F351-4854-9C76-1BFCA6C625F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:6.1:hotfix1.0:*:*:*:*:*:*",
            "matchCriteriaId" : "B1605211-8185-4812-97EE-8B4215FC348C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:6.1:hotfix1.1:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FCB468-9B1A-4D57-93E7-2EF96BCEFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:6.1:hotfix1.2:*:*:*:*:*:*",
            "matchCriteriaId" : "65126C91-193A-4961-BF65-5F89A86FB6C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:6.1:hotfix1.3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1184883-0A21-418C-AEBF-D3B8D0B3A403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:6.1:hotfix1.4:*:*:*:*:*:*",
            "matchCriteriaId" : "C7425EE0-8F2A-4458-9406-C51A1995EC88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:6.1:hotfix1.5:*:*:*:*:*:*",
            "matchCriteriaId" : "507E1F49-DB92-48C2-B2AE-7C40F820D4E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:6.1:hotfix1.6:*:*:*:*:*:*",
            "matchCriteriaId" : "2643F769-477B-4A82-8864-8B963B543E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:6.1:hotfix1.7:*:*:*:*:*:*",
            "matchCriteriaId" : "38BF2AE8-9564-41D0-AD32-C4C78A772DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:6.1:hotfix1.8:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB6D27D-F410-4415-AC37-29DCAEC2C2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostingcontroller:hosting_controller:6.1:hotfix1.9:*:*:*:*:*:*",
            "matchCriteriaId" : "3A293DFA-7D0F-4CF8-8405-E011EDCDB5D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isun.shabgard.org/hc3.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15271",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://isun.shabgard.org/hc3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E6F399-02F7-4D45-9810-7A3B2DCB0069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:2.0.912:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A5F43B-BF1D-4186-A72B-1DD5367A494B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:2.0.996:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D7D3BC-DE4A-4D56-A239-90A5D23BDA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:2.0_n:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED10DFD8-2532-466D-8EBB-F05081F2935D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:2.1.1236:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2FD74E-8AB0-4A19-AE4E-0823F1AC63DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:2.5.1366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D371BDC-9E31-4EB1-88E9-82C2976086E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:2.5.1598:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64B46D19-9103-40C5-A6A4-D5BE8DF8276E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:3.0.1415:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FC8258-541C-47D9-81B7-F211451B1C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:3.0.1470:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D47319C5-1E96-4AEB-ABA9-638DFF22BD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:3.0_n:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483C0045-4C10-4120-AB89-C36467993E25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:3.5.1635:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7577D890-E06A-477C-80BE-48075FB16437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:3.5.1670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B6D42F-9FD9-4E0D-BB59-8E65E817889C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:3.5.1808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B7D7B-DB48-458B-9CA5-813782BA600D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:3.5.1856:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF19BBC6-C4F2-4636-8650-E178FFD6BF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00F0805-8C73-43B1-87AC-744434046E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3098DC2A-6A68-4160-9DAC-8F31A49BA45D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.1.2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2707D6-D5EC-4A22-B5E1-2A34913CB3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7577EED-D28B-430A-B554-CE40D9154893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.2.1193:*:*:*:*:*:*:*",
            "matchCriteriaId" : "172E406F-108C-4D9A-80AB-78CDF134C4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81E472E-45B5-465B-B2D7-40F906AC31E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A04B5F-F17B-4177-861B-66DFD4FBE225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D8157E-3447-44BF-AC22-5A65F4C707E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA52A0F-2A09-4FA8-AC10-2D1B6B41D13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4FA9B9-E98C-435C-9F7A-D62E348D92D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0ADB0D5-BD25-488D-87D3-426ABB036B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FCCE0C-E6F9-4A01-872E-38C5F23C479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80E2514-9F43-48FB-B55E-094F45088D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.8.2646:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E553111-8B78-4B66-95BC-FD0EE897DDC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:4.8.2790:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB04B46-B3A6-40B1-9519-EA8896033961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:5.0.2938:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FDEE59-4E96-4AA7-BE33-9199CF9EA9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:5.1.3036:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD9C099B-C975-46A4-A9A2-F1160DDC0242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:5.2.3292:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE333F-6793-4A80-8B61-3AF5EFD1B52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6955CC4D-1130-46DB-819A-EAFB3BBDAB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:5.5.3415_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDD88ED-D59C-4EA3-8C33-E255A39DC2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:5.5.3595:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3331131F-F11D-4F6B-9C61-710030273D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:5.9.3702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA116CAF-B99A-4B68-8200-9B2501829BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/13553",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space (\"%20\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercur:mercur_messaging:2005_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5599BD24-5F07-4495-9869-81A5A2F4988F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15234",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) origmessage.ctml, or (4) readmessage.ctml, the Message.Id parameter to editmessage.ctml, or the (5) Message.Command parameter to messages.ctml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercur:mercur_messaging:2005_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5599BD24-5F07-4495-9869-81A5A2F4988F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to list the parent directory of the web root via a URL with a \"...\"  (triple dot)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myserver:myserver:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0262C9F6-44FD-49EF-9BC4-B3EBF1C74204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/myserverweb/myserverweb/source/filemanager.cpp?rev=1.116&view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15274",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/myserverweb/myserverweb/source/filemanager.cpp?rev=1.116&view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to inject arbitrary Javascript via a URL with a \"...\"  (triple dot) followed by an onmouseover event."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:myserver:myserver:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0262C9F6-44FD-49EF-9BC4-B3EBF1C74204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/myserverweb/myserverweb/source/filemanager.cpp?rev=1.116&view=log",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15274",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/myserverweb/myserverweb/source/filemanager.cpp?rev=1.116&view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTMLJunction EZGuestbook stores the guestbook.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the administrative password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmljunction:ezguestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C371EE4-4C8A-4AD1-A0F1-C37F5941F8D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013912",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jeuce Personal Webserver 2.13 allows remote attackers to cause a denial of service (server crash) via a long GET request, possibly triggering a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeuce:jeuce_personal_web_server:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96100B0-C03F-4973-9396-E4824972A747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13732",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013902",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://users.pandora.be/bratax/advisories/b005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://users.pandora.be/bratax/advisories/b005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Jeuce Personal Web Server 2.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:jeuce:jeuce_personal_web_server:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96100B0-C03F-4973-9396-E4824972A747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13732",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1012791",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/12718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5JP011PEKY.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1012791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/12718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5JP011PEKY.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jeuce Personal Web Server 2.13 allows remote attackers to cause a denial of service (server crash) via a GET request beginning with \"://\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeuce:jeuce_personal_web_server:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96100B0-C03F-4973-9396-E4824972A747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/13732",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1012791",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/12719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5JP011PEKY.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1012791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/12719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5JP011PEKY.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2) reuse ViewState information after the application's state has changed, or (3) use the ViewState to conduct attacks or expose content to third parties."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23853366-133E-40D0-9CD5-9995A642728F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D8B732-4FC7-4454-9F94-B1C99952462A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111513127704270&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111532887612517&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://scottonwriting.net/sowblog/posts/3747.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15241",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111513127704270&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111532887612517&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://scottonwriting.net/sowblog/posts/3747.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service (CPU consumption) via deeply nested markup."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23853366-133E-40D0-9CD5-9995A642728F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D8B732-4FC7-4454-9F94-B1C99952462A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111513127704270&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://scottonwriting.net/sowblog/posts/3747.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15241",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111513127704270&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://scottonwriting.net/sowblog/posts/3747.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via long arguments to FTP commands such as MKD, RMD, or DELE, which are processed by the (1) ftp_xlate_path, (2) ftp_is_canonical, or (3) os_fn_nativize functions, or (4) a long SSI command that is processed by the parse_cmd function in cgissi.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orenosv:orenosv_http_ftp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.1",
            "matchCriteriaId" : "C25090E5-3466-418B-BEB1-2F365ED30B1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hp.vector.co.jp/authors/VA027031/orenosv/index_en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15302",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013923",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5FP0H00FPS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/orenosv081.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13546",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13549",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hp.vector.co.jp/authors/VA027031/orenosv/index_en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5FP0H00FPS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/orenosv081.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long HTTP GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datatrac:activity_console:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE0C4C8-1CBA-4390-AB1E-89016BD2F9F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5FP052AFPA.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13558",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5FP052AFPA.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "YusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to assetmanager.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yusasp:web_asset_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31040A6F-D2E7-4E08-911A-CB02F92F5F02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/16198",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5OP0115FPQ.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13501",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/16198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5OP0115FPQ.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitrary web script or HTML via the (1) register a new user page, (2) User-Agent, or (3) Username, which is not properly quoted before sending to the error log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotnetnuke:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.11",
            "matchCriteriaId" : "377C91A4-C1C6-4A99-B459-030929A262CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111627180518591&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.woany.co.uk/advisories/dotnetnukexss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111627180518591&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.woany.co.uk/advisories/dotnetnukexss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0392",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:ppxp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283D945F-9367-4CDB-964A-B8B53FB88A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-725",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13681",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1260",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a \"decompression bomb\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:bzip2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3",
            "matchCriteriaId" : "B04C92B8-8CEB-428B-BE76-88A8B7EA276B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.11",
            "matchCriteriaId" : "A1E0F574-6859-45A6-B160-7DDE92C07CC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307041",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15447",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27274",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27643",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-741",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-474.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13657",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/26444",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-319A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3525",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3868",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10700",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A749",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/127-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-474.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/26444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-319A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/127-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1454",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95ADE53-BFBE-4B06-A1BF-EF576D567554"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0492.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.freeradius.org/security.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-13.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_14_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-524.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13540",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/May/1013909.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20449",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9610",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0492.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.freeradius.org/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_14_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-524.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/May/1013909.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1455",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the sql_escape_func function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial of service (crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95ADE53-BFBE-4B06-A1BF-EF576D567554"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0492.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.freeradius.org/security.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-13.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_14_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-524.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13541",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/May/1013909.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20450",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9579",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0492.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.freeradius.org/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_14_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-524.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/May/1013909.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11.1 before 11.1.3.3, 11.0 before 11.0.2.4, and 10.x allows remote authenticated users to execute arbitrary commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremeware_xos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "2BA7B2D6-8210-401D-9919-28EF4DC75991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremeware_xos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.0.2.4",
            "matchCriteriaId" : "234C1CBB-BA61-41C3-9509-75BE323310D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremeware_xos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1",
            "versionEndExcluding" : "11.1.3.3",
            "matchCriteriaId" : "87E24F66-409C-42D3-AC8A-7607B9AE7B4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:extremenetworks:blackdiamond_10808:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14654E85-CC6C-474B-B133-0B8997EC1F5E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:extremenetworks:blackdiamond_8800:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0F2DF8-A86F-4673-9FB1-79C9CD914B4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15438",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/937838",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0572",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/937838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive information from other users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349A209F-6609-4809-B228-E84623FA268D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92465439-530F-435E-976F-491AD3C56944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:5.6.0.1351:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38232D5E-568C-4CFA-BA01-C35939D68AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE7278-FFAD-489B-BDCC-BF6BA8D5DF0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111643475210982&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111643475210982&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the (1) find parameter to index.php, (2) name or (3) message field of a chat request, or (4) the message body when opening a trouble ticket."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361544AA-7E0A-40C7-93A4-5ECF5C3CC6F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gulftech.org/?node=research&article_id=00076-05172005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/398457",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00076-05172005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/398457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to index.php, (2) tid parameter to view.php, fid parameter to (3) download.php or (4) chat_download.php, (5) status parameter to icon.php, TICKET_tid parameter to (6) index.php or (7) view.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361544AA-7E0A-40C7-93A4-5ECF5C3CC6F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gulftech.org/?node=research&article_id=00076-05172005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00076-05172005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpcenterlive:help_center_live:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC1DC88-215E-4C8E-AA46-20C46E048EB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gulftech.org/?node=research&article_id=00076-05172005",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00076-05172005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1934",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "2F2CA84A-79B4-46B3-82A2-EF3DA1338B0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1205290&group_id=235&atid=100235",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-734",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:099",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-518.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10368",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1205290&group_id=235&atid=100235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-518.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure EVERYBODY permissions, which allows local users to gain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:groove_workspace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5n_build_1871",
            "matchCriteriaId" : "9116E06A-E429-4193-991B-0ECD852F41ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1_build_2338",
            "matchCriteriaId" : "06B292AF-507B-4D53-905C-6B44CC3CB642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1a_build_2364",
            "matchCriteriaId" : "0AC87C28-3648-4ED6-A6D6-4B5FB81235E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15421",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/443370",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BCRBX",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/15421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/443370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BCRBX",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:groove_workspace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5n_build_1871",
            "matchCriteriaId" : "9116E06A-E429-4193-991B-0ECD852F41ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1_build_2338",
            "matchCriteriaId" : "06B292AF-507B-4D53-905C-6B44CC3CB642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1a_build_2364",
            "matchCriteriaId" : "0AC87C28-3648-4ED6-A6D6-4B5FB81235E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15421",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/372618",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/514386",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BCRCC",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/15421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/372618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/514386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BCRCC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass restrictions on COM objects."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:groove_workspace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5n_build_1871",
            "matchCriteriaId" : "9116E06A-E429-4193-991B-0ECD852F41ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1_build_2338",
            "matchCriteriaId" : "06B292AF-507B-4D53-905C-6B44CC3CB642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1a_build_2364",
            "matchCriteriaId" : "0AC87C28-3648-4ED6-A6D6-4B5FB81235E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15421",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/155610",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BCRCM",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/15421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/155610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BCRCM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:groove_workspace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5n_build_1871",
            "matchCriteriaId" : "9116E06A-E429-4193-991B-0ECD852F41ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1_build_2338",
            "matchCriteriaId" : "06B292AF-507B-4D53-905C-6B44CC3CB642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1a_build_2364",
            "matchCriteriaId" : "0AC87C28-3648-4ED6-A6D6-4B5FB81235E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15421",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/232232",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BCRD6",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/15421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/232232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BCRD6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timo_rossi:picasm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12b",
            "matchCriteriaId" : "D5DF09C2-8747-4215-B74F-F499F1BE89D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111661253517089&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.co.jyu.fi/~trossi/pic/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111661253517089&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.co.jyu.fi/~trossi/pic/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication (1) if their IP address already exists in /var/tmp/fw_ip or (2) if their request is the first, which causes /var/tmp/fw_ip to be created and contain their IP address."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dsl-502t:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC426441-982E-4AD0-8CE8-AD4E72CD0DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dsl-504t:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00981E3-CF35-41A4-80E2-1086D3540B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dsl-562t:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271FA6C5-A5A0-40A2-BFBB-103CE6826282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dsl-g604t:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A13C0C-C808-41AC-8AB2-E04DF1669086"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111652806030943&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111652806030943&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the include_location parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8587D302-C1C5-4C47-A1F4-87F1B344D0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "223492A7-A72D-4353-82A5-94A281B9FAC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111653168810937&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111653168810937&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the MimeMessage constructor in javax.mail.internet.InternetHeaders, which allows remote authenticated users to read other users' e-mail messages by modifying the msgno parameter.  NOTE: Sun disputes this issue, stating \"The report makes references to source code and files that do not exist in the mentioned products."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solstice:solstice_internet_mail_server:pop3_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E22CE6-29EF-4D90-861E-DEA6DF656578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111653029605189&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0574",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111653029605189&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:*:gold:mac:*:*:*:*:*",
            "matchCriteriaId" : "256EC786-EB3F-4E1F-A622-03D4DFF294B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111653088303057&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/398649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111653088303057&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/398649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitrary web script or HTML via the Name field and other fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:episodex:episodex_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB36A97C-00E0-4FF5-B66E-2C70358D5E9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111661380018313&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111661380018313&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:episodex:episodex_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB36A97C-00E0-4FF5-B66E-2C70358D5E9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111661380018313&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111661380018313&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename.  NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gedit:2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3096CD-F44B-4D90-83AC-633666FD5ADB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111661117701398&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-499.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/138-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111661117701398&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/138-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111661517716733&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111661517716733&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "94082842-67EC-4709-A093-198B69DE582A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111661517716733&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111661517716733&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:gxine:0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4805085A-4830-4DD6-8CF4-7430BAEC8BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:gxine:0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA81B74-C1A8-4EC9-9066-F06547ACD668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:gxine:0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D2527B-EB8F-4E4C-B89E-880CE05BBB47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:gxine:0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "660354B5-011B-469C-BDEE-D30A0F56C04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/xine/gnome-xine/ChangeLog?rev=HEAD&content-type=text/vnd.viewcvs-markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111670637812128&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-19.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.0xbadexworm.org/adv/gxinefmt.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/16747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/xine/gnome-xine/ChangeLog?rev=HEAD&content-type=text/vnd.viewcvs-markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111670637812128&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.0xbadexworm.org/adv/gxinefmt.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/16747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet Antivirus, Zonelabs ZoneAlarm Security Suite, and ZoneAlarm Antivirus, allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, which leads to a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E6F7CD-745B-40A3-97E1-7F2127F257D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB32FD77-F67F-4D62-B9F1-46F4569ACBEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A08C715-A351-466D-99EC-006C106A3366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus_ee:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E22BC0B-8EDE-42A8-83C8-042527239671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus_ee:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8E9674-8578-4757-AC1E-F91A226A43FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_ez_armor:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714BCFBA-B843-4C14-AA78-F7CF17899D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_ez_armor:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61D9546-7619-465B-B3CA-C60218CD574B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_ez_armor:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B192C7-1FC3-4D18-A17F-E3414BF56713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_ez_armor:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217ED722-3ECD-47B5-8AB3-E1789675D1C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_ez_armor:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9E5743-8B07-481A-B647-744DA615F779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_ez_armor_le:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74FE5C87-46B1-471F-A187-45399A00DBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_ez_armor_le:3.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD6F73B-C8C0-47DE-BDC5-243712892AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_intrusion_detection:1.4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511E44CE-86E6-4777-9AEC-9C9A5DA2FAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_intrusion_detection:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B65AC50D-032F-4D8E-AC46-6AD69AC4B16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_intrusion_detection:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18F12F09-BFCC-430B-BDC0-38643E90C10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DDF2EE3-753B-4C7E-84EF-144FA5986A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_secure_content_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9F9A7A-CC5E-42FD-87F7-4E7473A903D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_secure_content_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69184A5E-4FA9-4896-B6E8-1B9D4D62D099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:inoculateit:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAE9329-AA34-4F56-B4BE-B028F021173B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9E11A387-BF4A-4A54-8F29-37EFF14D72DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_antivirus:7.0:*:gateway:*:*:*:*:*",
            "matchCriteriaId" : "B138DD19-1453-4167-A88A-EC861E4BBAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_antivirus:7.0_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BDDF08-C3D9-4714-91CB-F865BBF9FCE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_antivirus:7.1:*:gateway:*:*:*:*:*",
            "matchCriteriaId" : "9A36A178-36EB-4A90-AC52-B98C2DE20011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D10B864B-AA39-4702-A42B-F33BAF2D8059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_secure_content_manager:1.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5005F6FB-8808-4FA0-9EFF-F50A94419E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:vet_antivirus:10.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5CB7EE-225A-4356-BDAF-F7F41BD7C150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B8B67A-6F75-4176-A6A5-E2F695F52C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC159EA2-7A06-4C5B-85D7-00EE6ABE8033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter=1588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111686576416450&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rem0te.com/public/images/vet.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13710",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32896",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter=1588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111686576416450&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rem0te.com/public/images/vet.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Xanthia.php in the Xanthia module in PostNuke 0.750 allow remote attackers to execute arbitrary SQL commands via the (1) name or (2) module parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7B5757-8E02-4764-BF26-B51AB98E141F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111670823128472&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111670823128472&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) rss_url parameter to magpie_slashbox.php, or the url parameter to (2) magpie_simple.php or (3) magpie_debug.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7B5757-8E02-4764-BF26-B51AB98E141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3700514A-DB69-49F4-AB13-B9DAEB93F303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B720E0CD-7975-4D56-9F09-371E742443C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111670482500552&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111670506926649&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111670482500552&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111670506926649&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.750 and 0.760RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) skin or (2) paletteid parameter to demo.php in the Xanthia module, or (3) the serverName parameter to config.php in the Multisites (aka NS-Multisites) module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7B5757-8E02-4764-BF26-B51AB98E141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B720E0CD-7975-4D56-9F09-371E742443C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111670506926649&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111670506926649&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allows remote attackers to obtain sensitive information via a direct request to simple_smarty.php, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke:postnuke:0.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541C4426-713E-43C5-BFC2-E269640B3A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke:postnuke:0.760:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C06C6F5D-5510-4A7C-84F1-6DD31E4B87AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke:postnuke:0.760:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2E27E6-2C26-4A6F-B621-C59B3822130B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111670482500552&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111670482500552&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to (1) theme.php or (2) Xanthia.php in the Xanthia module, (3) user.php, (4) thelang.php, (5) text.php, (6) html.php, (7) menu.php, (8) finclude.php, or (9) button.php in the pnblocks directory in the Blocks module, (10) config.php in the NS-Multisites (aka Multisites) module, or (11) xmlrpc.php, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke:postnuke:0.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541C4426-713E-43C5-BFC2-E269640B3A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke:postnuke:0.760:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2E27E6-2C26-4A6F-B621-C59B3822130B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111670506926649&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111670506926649&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in pnadminapi.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to read arbitrary files via a .. (dot dot) in the skin parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B720E0CD-7975-4D56-9F09-371E742443C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111670586322172&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111670586322172&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in pnadmin.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to execute arbitrary SQL commands via the riga[0] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B720E0CD-7975-4D56-9F09-371E742443C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111670586322172&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111670586322172&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the (1) News, (2) File, (3) Liens, or (4) Faq modules."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portailphp:portailphp:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E2A526-051B-498D-B2C5-87910448D399"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111686643823025&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13708",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111686643823025&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a nickname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:black_cactus:warrior_kings:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "C680CBE4-8A1B-46EB-B386-AD8A58FA372C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:black_cactus:warrior_kings_battles:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.23",
            "matchCriteriaId" : "8D5FE138-8E4F-41B6-B316-261BB68E8531"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/warkings-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111686776303832&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/warkings-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111686776303832&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Warrior Kings: Battles 1.23 and earlier allows remote attackers to cause a denial of service (server crash) via a partial join packet that triggers a NULL pointer dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:black_cactus:warrior_kings_battles:1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE1A419-D5C2-47F9-97B9-291EB387249A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/warkings-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111686776303832&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13712",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/warkings-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111686776303832&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gdb:*:r2:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "54381A01-33D2-4B69-9E03-162E37081E06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=91398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15527",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17072",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17257",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17356",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17718",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21122",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21717",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24788",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-15.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-222.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-015.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-178.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-659.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-673.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-709.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-763.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-801.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0354.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464745/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0025/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-55052-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1267",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/136-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=91398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-222.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-015.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-178.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-659.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-673.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-709.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-763.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0025/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-55052-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/136-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gdb:*:r2:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "54381A01-33D2-4B69-9E03-162E37081E06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17072",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-15.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-015.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:095",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-709.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-801.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=88398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-015.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-709.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in MailScanner 4.41.3 and earlier, related to \"incomplete reporting of viruses in zip files,\" allows remote attackers to bypass virus detection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.41.3",
            "matchCriteriaId" : "28F9D14D-2F11-4A12-BA68-5D655665D95D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.39.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8545D994-CE45-4AE3-BF1A-113921761639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.39.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A240F08-748D-4635-B321-6EE575B04C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.39.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3C0F0-47E9-4EBC-80D2-1105E2B0AF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.40.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695D9808-11CB-49A5-90BE-77E66C944BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.40.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ADFD03C-7880-44AF-832D-4992C08F4362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.40.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD738F06-8799-4BA0-96AE-BD585B906E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.40.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6B6F98-6E09-4D2C-88E6-95F3D6463DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.40.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F86939F-E85C-461B-9507-8DBBA4D41B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.40.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E5D938-9944-425B-8A89-9137910A0746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.40.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A9CF9D6-CE9E-423D-AD34-3FD61324FEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.41.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D14E230-0083-4040-BFE6-1098F6357917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:4.41.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CD2A1C-AFEC-4E7C-9742-1BC9E1FC2599"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sng.ecs.soton.ac.uk/mailscanner/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sng.ecs.soton.ac.uk/mailscanner/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor has released a fixed version (4.42.2)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:linux_webapp-config:1.10:r14:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F3F207-A0A5-4FE8-A61E-59A120236E23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=91785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15445",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014027",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-13.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/webapp-config-05182005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=91785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/webapp-config-05182005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:reporter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "99757DB4-5255-43D0-B42C-72FC8DC03545"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111695726810435&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111695726810435&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:reporter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "99757DB4-5255-43D0-B42C-72FC8DC03545"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the username in an Add User window or (2) the license key (volatile.license_to_add parameter) in the Licensing page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:reporter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "99757DB4-5255-43D0-B42C-72FC8DC03545"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111695726810435&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111695726810435&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A85C689-95E0-41F7-83D9-5A8B0AB42390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gibraltar:gibraltar_firewall:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA242C-9328-484D-A8E8-D185DE475B20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D590FB-2759-475E-8136-1B15352605EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014030",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitrary media files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sy9:serendipity:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "806E3F48-B3E8-4492-A4C7-D3D99D166FB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=328092",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=328092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Serendipity 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) templatedropdown and (2) shoutbox plugins."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7515A9A-1FD0-484E-97CB-5969729804DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=328092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16660",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16661",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=328092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/16661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 3.0c2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:surgemail:3.0c2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5470DC1D-DBE4-4C03-B831-42533DF08D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15425",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrary web script or HTML via the (1) m, (2) s, (3) ID, or (4) t parameters, or the (5) field name, (6) Your Web field, or (7) email field in the comments section."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ej3:topo:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97DE3DF-26E0-4899-BD33-D05E91C968FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ej3:topo:2.2.178:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4C4E28-C301-427D-9E29-69A85EEC3ED6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/topo-22-multiple-variable-fields-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16699",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13700",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/topo-22-multiple-variable-fields-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as client IP addresses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ej3:topo:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97DE3DF-26E0-4899-BD33-D05E91C968FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ej3:topo:2.2.178:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4C4E28-C301-427D-9E29-69A85EEC3ED6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/topo-22-multiple-variable-fields-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014016",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16700",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/topo-22-multiple-variable-fields-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40(KO.1) allows remote attackers to cause a denial of service (CPU consumption and network loss) via crafted fragmented IP packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:zyxel:prestige_650r-31:3.40_ko.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B947E95-33DB-4EE4-B630-8C1D73AB52AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15463",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in LS Games War Times 1.03 and earlier allows remote attackers to cause a denial of service (server crash) via a long nickname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ls_games:war_times:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D986715F-AB2C-44E1-B119-36ECA4D4AB4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/wartimesboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15363",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/wartimesboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1013981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in ALWIL avast! antivirus 4 (4.6.6230) and earlier, when running on Windows NT 4.0, does not properly detect certain viruses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C40879-2EA4-459C-8B09-7BD7B08CE746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026ABB4A-ABB0-4EAB-80AA-D0904AADD499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.183:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10EE0F87-3F43-4539-A6C0-6093137988AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3608831-EDD7-4DC9-B22C-20A49C58C3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010D3CD8-6E19-4A3C-AF3A-891A773E8A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC9FA41-C6B7-47D0-B087-424C1EB33C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AB0737-7E86-40E3-B356-F364817F3881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D2E6379-791B-4220-827D-833F23252CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.268:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE89970-5A5C-4F12-9191-7E9609ED0D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.278:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831FC302-4DF5-4C6B-8458-A6DC94B4ABD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.287:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074B74D5-1F16-484A-9E26-6EEB6027B5EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.289:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66598B99-1426-4326-AE5C-27ACCE2BADBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA7C524-30C1-442A-BC36-58CC88400A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.319:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4E7BB2-9513-4367-821D-51F79B3CCBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.335:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DEC005-1F28-4227-9A7B-1244560769F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.342:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E4EB75-746A-4C9C-83F2-46CF3BC6C70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.357:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96927EC7-346F-4BB7-A0B8-FFDB95912A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.389:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B12B74-07D2-410E-99BB-0E9EBF3B51A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.396:*:*:*:*:*:*:*",
            "matchCriteriaId" : "319673EC-3F80-4AA2-9598-B6BA3CA0EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.412:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0C74DD-7735-4C18-975B-B47CAFD96FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.418:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9EEA66-3313-4FB1-9342-304162A92366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.501:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FED369-86BA-4C6A-AB16-F3974F84D56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.5.518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C92A34-E4D8-4BA3-B01E-8743719D00EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.5.549:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3253D43C-1325-4A3E-8442-1D432E98EFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.5.561:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FEB250C-87AB-422D-AE85-C473974FA160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C26411-1364-49CB-8715-4E5F9D07119F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.623:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71EC304A-2729-4B91-9B87-2DCB3B975DD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013991",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.avast.com/eng/av4_revision_history.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1013991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.avast.com/eng/av4_revision_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metro_marketing:cookie_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E12C2A-88FE-4760-A54A-F44501A0BC8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111686721022831&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014026",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/cookiec_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111686721022831&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/cookiec_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metro_marketing:cookie_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E12C2A-88FE-4760-A54A-F44501A0BC8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111686721022831&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014026",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/cookiec_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111686721022831&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/cookiec_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PROMS before 0.11 allow remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10",
            "matchCriteriaId" : "BFF49A2D-9F5F-43B7-AB47-3398E380EC34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECB79A4-63F0-4C79-9C4E-EE6DD391844B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF67803-AFDB-49A4-903B-DA298C234DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA46611-9462-44E1-A839-635BDB6E2D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D14BB06-1248-4889-8C30-AFFC0CD2B049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2288F73F-4690-4482-8F81-99691B28D8B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013992",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10",
            "matchCriteriaId" : "BFF49A2D-9F5F-43B7-AB47-3398E380EC34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECB79A4-63F0-4C79-9C4E-EE6DD391844B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF67803-AFDB-49A4-903B-DA298C234DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA46611-9462-44E1-A839-635BDB6E2D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D14BB06-1248-4889-8C30-AFFC0CD2B049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2288F73F-4690-4482-8F81-99691B28D8B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013992",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PROMS 0.11 does not properly handle \"certain combinations of rights,\" which gives more rights to users than intended."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.11",
            "matchCriteriaId" : "6A9F0923-D736-4B3D-AA15-415B78B72FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECB79A4-63F0-4C79-9C4E-EE6DD391844B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF67803-AFDB-49A4-903B-DA298C234DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA46611-9462-44E1-A839-635BDB6E2D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D14BB06-1248-4889-8C30-AFFC0CD2B049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2288F73F-4690-4482-8F81-99691B28D8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5E15FD-0567-4F8E-AAD6-87CEB77A425F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in PROMS 0.11 allow \"non-authorized users\" to (1) view or modify the project member list or (2) modify the todos list."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electricmonk:proms:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A26A01-8D2D-404A-8F44-03DAD2B3A6F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013992",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the logPrintBadfile function in delbadfiles.c Iron Bars SHell (ibsh) before 0.3d allows users to \"access files outside the home directory\" and possibly execute arbitrary code via certain inputs that are not properly handled in a syslog call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iron_bars_shell:iron_bars_shell:0.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24242D6A-941E-4E0C-A750-70914C477D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iron_bars_shell:iron_bars_shell:0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAC396-66E7-471E-B04D-554DCC738519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iron_bars_shell:iron_bars_shell:0.3c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B785B4-EA51-4A6F-9B63-3819566C5109"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15473",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=329340",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13720",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=329340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "Fixed in version 0.3 d"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service (infinite loop) via an image with a zero color mask."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3834A3-8A7E-4914-A20C-EE694150D044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7E2792-B4BC-4C71-990D-0B7462919568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F2FD22-4058-45D6-8352-0AA6382746C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF103AE-6F15-4F2D-A375-F2AF91171EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65929D5C-31B1-4A70-8E9C-AC6749332480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC45DB14-ABB2-4116-930D-349A81CDB982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0573F148-0204-4F6B-A7B7-12DDF61C7383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D83FADC-4C7F-4C16-BBAA-9883D7449744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A019EA-DB16-41D5-A625-CBD96F24416E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45B5EE8-00FB-46FE-9A26-7468AD30B540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6534A963-C0A7-47D6-8E1B-B8D0F3933428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD06A99-7CBF-4593-9EA1-5D1A800D8C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDC9494-E79B-4497-8413-A44DF326ABB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563F49AC-D60F-4E00-9E0D-7EDAA2FFFCD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB0628-9BFD-4262-886C-E971EC262134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F61BB-FF5B-4196-8723-AA165B077E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02E4063-E2B2-4EC5-9864-D2FB3E73F574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CEEBE6-7CE6-4E1B-8828-EDD64EA3A338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193A610A-5E5E-4A87-A501-902100D1C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A27CAC75-BFE8-4865-A6AE-20225BFCDBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6393827E-8F17-4C95-B1E2-D6049B8AA63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F682CD-0117-4770-877F-1F3903BAFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5717E4CF-15CD-4369-801F-7E113F0FAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34B9CBD-54BC-4131-820F-9483E50086BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD7EB24-20F1-493F-BD38-DF39638C319B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E62DFAA-1EFC-40D6-A4B5-9113DF0656B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BD0D69-A809-4DD3-824B-C68E3EF4F724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC271B0-ACAC-478E-B00B-FFBAAE33B5E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9BACC6-DEF1-4C20-B627-3AA55471B372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA96D5B-FD43-418E-980C-22DEBA4FC03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12378D7-6A7E-4636-9551-C224907A3219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55053EA-780E-46A9-91AE-F983DD54D154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8168249B-863D-44E3-8BC3-B877A64981B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A688471B-3A88-410B-AAD3-20A75E1A767E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F76B8D-D105-4106-B52C-FC201F5930AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB7AE5B-83D9-4DF5-A9A0-B0412D8C0B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600590DA-A2F4-488F-B85B-9B3B86A8FC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096FC2CB-49A7-444A-BDA6-802E123A9ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB2E37B-323A-4336-B081-56BD32260E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AB4F80-4136-4007-8C33-E1C8A84C11B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03ADE3A3-8FA5-439A-97ED-6EE93ED43699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A48433-240E-4555-966B-4BA767AA3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0900904-462F-47DF-82C8-DD69D3E1EC2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=90423",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15429",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-16.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-480.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13705",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/132-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=90423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/132-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E8FC05-D498-4D5D-B5A3-3F16749B7491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A07BEF-C759-459E-A144-D37C1A55A9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.4_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D95BAC-CCF3-4E8B-BF31-E277B03C0FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97B7D0D-68CC-463D-A14B-3651D8DD4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCF39FC-D220-4F4A-8CBF-B993C65671FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5512FA-8B74-4585-ADEF-F710C0DF83A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AAC2EA-8AA7-4303-BD64-74CFC7938D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C872A9B0-0B3C-47B2-82F5-344BEBA221CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88517EE-17E2-4128-8355-FAAC815718CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-18.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-373.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-395.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/net-snmp-05182005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200505-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-373.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-395.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/net-snmp-05182005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service (infinite loop) via malformed data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gearbox_software:halo_combat_evolved:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C47CB7-E731-4035-A7E0-218B8F8C096E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/haloloop-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/398833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13728",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/haloloop-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/398833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role to \"shrink or reset JDBC connection pools.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "80D90123-74BA-4A70-9A10-6980BAD270B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "565CBD39-28D6-4A03-BECE-287083CE9FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE9282D-C32F-4D2F-81BE-75E447925A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "14A085BB-27C9-488F-91F8-19625BF23B94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "D1A33785-23D9-4428-B746-71FD404C09E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6644EF-C875-4005-A628-0AED7B7BB94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "8556E775-D130-4658-AFE2-28188224ED54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "1B92BC8B-15AB-4E9A-AC2F-DD6A2F443B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "25C711BB-E7E0-41D8-985E-5DD386C54637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "38EFE72C-10E5-4EED-B016-D914FA52DE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E8797D-1B62-4480-A79D-0345E65699E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "071FAD20-D502-4634-852A-4CD06FE8E114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "97E6F518-D320-4655-B698-2D1A82CA3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC1486C-6AC4-44F7-9015-40FD4A341C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "AB5909DB-B2E2-4358-9D45-C225C6B02360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "04C3F96B-A1FF-4E3E-B059-366E176E5E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5485722F-5DE4-4CD4-865F-32585537F523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "BCB01060-2C29-4F75-8D0A-74F62E9F0A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCEDE54-97F3-457A-9886-5BD91C9AED2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "2269D44C-65EA-4ED0-9F03-A32AC5D44EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A220FA9-69A3-4857-A73D-287FDF0E68A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/125",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may cause WebLogic to use incorrect identity for the thread, or to fail to audit security exceptions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "80D90123-74BA-4A70-9A10-6980BAD270B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "565CBD39-28D6-4A03-BECE-287083CE9FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE9282D-C32F-4D2F-81BE-75E447925A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "14A085BB-27C9-488F-91F8-19625BF23B94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "D1A33785-23D9-4428-B746-71FD404C09E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6644EF-C875-4005-A628-0AED7B7BB94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "8556E775-D130-4658-AFE2-28188224ED54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "1B92BC8B-15AB-4E9A-AC2F-DD6A2F443B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "25C711BB-E7E0-41D8-985E-5DD386C54637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "38EFE72C-10E5-4EED-B016-D914FA52DE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E8797D-1B62-4480-A79D-0345E65699E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "071FAD20-D502-4634-852A-4CD06FE8E114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "97E6F518-D320-4655-B698-2D1A82CA3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC1486C-6AC4-44F7-9015-40FD4A341C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "AB5909DB-B2E2-4358-9D45-C225C6B02360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "04C3F96B-A1FF-4E3E-B059-366E176E5E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5485722F-5DE4-4CD4-865F-32585537F523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "BCB01060-2C29-4F75-8D0A-74F62E9F0A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCEDE54-97F3-457A-9886-5BD91C9AED2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "2269D44C-65EA-4ED0-9F03-A32AC5D44EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A220FA9-69A3-4857-A73D-287FDF0E68A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/126",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "767A0007-20E7-4E77-ACA9-2A812433B509"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/127",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0604",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to guess the correct password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "80D90123-74BA-4A70-9A10-6980BAD270B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "565CBD39-28D6-4A03-BECE-287083CE9FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE9282D-C32F-4D2F-81BE-75E447925A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "14A085BB-27C9-488F-91F8-19625BF23B94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "D1A33785-23D9-4428-B746-71FD404C09E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6644EF-C875-4005-A628-0AED7B7BB94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "8556E775-D130-4658-AFE2-28188224ED54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "1B92BC8B-15AB-4E9A-AC2F-DD6A2F443B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "25C711BB-E7E0-41D8-985E-5DD386C54637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "38EFE72C-10E5-4EED-B016-D914FA52DE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E8797D-1B62-4480-A79D-0345E65699E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "071FAD20-D502-4634-852A-4CD06FE8E114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "97E6F518-D320-4655-B698-2D1A82CA3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC1486C-6AC4-44F7-9015-40FD4A341C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "AB5909DB-B2E2-4358-9D45-C225C6B02360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "04C3F96B-A1FF-4E3E-B059-366E176E5E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5485722F-5DE4-4CD4-865F-32585537F523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "BCB01060-2C29-4F75-8D0A-74F62E9F0A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCEDE54-97F3-457A-9886-5BD91C9AED2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "2269D44C-65EA-4ED0-9F03-A32AC5D44EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A220FA9-69A3-4857-A73D-287FDF0E68A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote attackers to cause a denial of service (cluster slowdown) via modified cookies."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "80D90123-74BA-4A70-9A10-6980BAD270B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "565CBD39-28D6-4A03-BECE-287083CE9FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE9282D-C32F-4D2F-81BE-75E447925A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "14A085BB-27C9-488F-91F8-19625BF23B94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "D1A33785-23D9-4428-B746-71FD404C09E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6644EF-C875-4005-A628-0AED7B7BB94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "8556E775-D130-4658-AFE2-28188224ED54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "1B92BC8B-15AB-4E9A-AC2F-DD6A2F443B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "25C711BB-E7E0-41D8-985E-5DD386C54637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "38EFE72C-10E5-4EED-B016-D914FA52DE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E8797D-1B62-4480-A79D-0345E65699E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "071FAD20-D502-4634-852A-4CD06FE8E114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "97E6F518-D320-4655-B698-2D1A82CA3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC1486C-6AC4-44F7-9015-40FD4A341C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "AB5909DB-B2E2-4358-9D45-C225C6B02360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "04C3F96B-A1FF-4E3E-B059-366E176E5E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5485722F-5DE4-4CD4-865F-32585537F523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "BCB01060-2C29-4F75-8D0A-74F62E9F0A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCEDE54-97F3-457A-9886-5BD91C9AED2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "2269D44C-65EA-4ED0-9F03-A32AC5D44EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A220FA9-69A3-4857-A73D-287FDF0E68A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/129",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 6, allow remote attackers to inject arbitrary web script or HTML, and possibly gain administrative privileges, via the (1) j_username or (2) j_password parameters in the login page (LoginForm.jsp), (3) parameters to the error page in the Administration Console, (4) unknown vectors in the Server Console while the administrator has an active session to obtain the ADMINCONSOLESESSION cookie, or (5) an alternate vector in the Server Console that does not require an active session but also leaks the username and password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "80D90123-74BA-4A70-9A10-6980BAD270B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "565CBD39-28D6-4A03-BECE-287083CE9FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE9282D-C32F-4D2F-81BE-75E447925A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "14A085BB-27C9-488F-91F8-19625BF23B94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "D1A33785-23D9-4428-B746-71FD404C09E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6644EF-C875-4005-A628-0AED7B7BB94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "8556E775-D130-4658-AFE2-28188224ED54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "1B92BC8B-15AB-4E9A-AC2F-DD6A2F443B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "25C711BB-E7E0-41D8-985E-5DD386C54637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "38EFE72C-10E5-4EED-B016-D914FA52DE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E8797D-1B62-4480-A79D-0345E65699E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "071FAD20-D502-4634-852A-4CD06FE8E114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "97E6F518-D320-4655-B698-2D1A82CA3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC1486C-6AC4-44F7-9015-40FD4A341C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "AB5909DB-B2E2-4358-9D45-C225C6B02360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "04C3F96B-A1FF-4E3E-B059-366E176E5E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5485722F-5DE4-4CD4-865F-32585537F523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "BCB01060-2C29-4F75-8D0A-74F62E9F0A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCEDE54-97F3-457A-9886-5BD91C9AED2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "2269D44C-65EA-4ED0-9F03-A32AC5D44EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A220FA9-69A3-4857-A73D-287FDF0E68A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/130",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111695844803328&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111695921212456&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111722298705561&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111722380313416&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acrossecurity.com/aspr/ASPR-2005-05-24-1-PUB.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acrossecurity.com/aspr/ASPR-2005-05-24-2-PUB.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/general/BEA-001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/general/BEA-002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111695844803328&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111695921212456&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111722298705561&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111722380313416&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acrossecurity.com/aspr/ASPR-2005-05-24-1-PUB.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acrossecurity.com/aspr/ASPR-2005-05-24-2-PUB.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/general/BEA-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/general/BEA-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "80D90123-74BA-4A70-9A10-6980BAD270B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "565CBD39-28D6-4A03-BECE-287083CE9FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE9282D-C32F-4D2F-81BE-75E447925A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "14A085BB-27C9-488F-91F8-19625BF23B94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "D1A33785-23D9-4428-B746-71FD404C09E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6644EF-C875-4005-A628-0AED7B7BB94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "8556E775-D130-4658-AFE2-28188224ED54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "1B92BC8B-15AB-4E9A-AC2F-DD6A2F443B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "25C711BB-E7E0-41D8-985E-5DD386C54637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "38EFE72C-10E5-4EED-B016-D914FA52DE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E8797D-1B62-4480-A79D-0345E65699E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "071FAD20-D502-4634-852A-4CD06FE8E114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "97E6F518-D320-4655-B698-2D1A82CA3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC1486C-6AC4-44F7-9015-40FD4A341C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "AB5909DB-B2E2-4358-9D45-C225C6B02360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "04C3F96B-A1FF-4E3E-B059-366E176E5E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5485722F-5DE4-4CD4-865F-32585537F523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "BCB01060-2C29-4F75-8D0A-74F62E9F0A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCEDE54-97F3-457A-9886-5BD91C9AED2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "2269D44C-65EA-4ED0-9F03-A32AC5D44EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A220FA9-69A3-4857-A73D-287FDF0E68A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4 allows remote attackers to cause a denial of service (CPU consumption from thread looping)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "80D90123-74BA-4A70-9A10-6980BAD270B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "565CBD39-28D6-4A03-BECE-287083CE9FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE9282D-C32F-4D2F-81BE-75E447925A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "14A085BB-27C9-488F-91F8-19625BF23B94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "D1A33785-23D9-4428-B746-71FD404C09E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6644EF-C875-4005-A628-0AED7B7BB94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "8556E775-D130-4658-AFE2-28188224ED54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "1B92BC8B-15AB-4E9A-AC2F-DD6A2F443B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "25C711BB-E7E0-41D8-985E-5DD386C54637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "38EFE72C-10E5-4EED-B016-D914FA52DE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E8797D-1B62-4480-A79D-0345E65699E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "071FAD20-D502-4634-852A-4CD06FE8E114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "97E6F518-D320-4655-B698-2D1A82CA3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC1486C-6AC4-44F7-9015-40FD4A341C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "AB5909DB-B2E2-4358-9D45-C225C6B02360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "04C3F96B-A1FF-4E3E-B059-366E176E5E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5485722F-5DE4-4CD4-865F-32585537F523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "BCB01060-2C29-4F75-8D0A-74F62E9F0A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCEDE54-97F3-457A-9886-5BD91C9AED2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "2269D44C-65EA-4ED0-9F03-A32AC5D44EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A220FA9-69A3-4857-A73D-287FDF0E68A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/132",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1151",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:qpopper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.4",
            "matchCriteriaId" : "BCD2F188-E4A3-45A3-8387-1B48E8AFB760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:qpopper:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95574479-C9F8-4C54-873B-1D485A8CF78A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=90622",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/15475",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/15478",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/15505",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-728",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-17.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=90622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1152",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-05-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:qpopper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.4",
            "matchCriteriaId" : "BCD2F188-E4A3-45A3-8387-1B48E8AFB760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:qpopper:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95574479-C9F8-4C54-873B-1D485A8CF78A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/attachment.cgi?id=58329&action=view",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=90622",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/15475",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/15478",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/15505",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-728",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-17.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.gentoo.org/attachment.cgi?id=58329&action=view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=90622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (CPU consumption) via an LSUB command with a large number of null characters, which causes an infinite loop."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C28E243-026F-4252-9D80-4D69C50467D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=245&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=245&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via \"..\\\" (dot dot backslash) sequences in the query string argument in a GET request to a non-existent .jsp file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail:8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443C3EE1-1C98-40F6-93DD-F60BD0C46C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2_hotfix_2",
            "matchCriteriaId" : "D8FF3313-6C45-44C5-B093-E865AB16BAB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=242&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=242&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to cause a denial of service (crash) via a SELECT command with a large argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "server_8.2_hotfix_2",
            "matchCriteriaId" : "102276D0-EFFC-4D45-B406-B3AF7C22F675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail:8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2802265F-2CFD-4AB4-84BF-EAD5E0CA5366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail:8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443C3EE1-1C98-40F6-93DD-F60BD0C46C2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=241&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=241&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with (1) a long username argument or (2) a long username argument that begins with a special character."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail:8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2802265F-2CFD-4AB4-84BF-EAD5E0CA5366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail:8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443C3EE1-1C98-40F6-93DD-F60BD0C46C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2_hotfix_2",
            "matchCriteriaId" : "D8FF3313-6C45-44C5-B093-E865AB16BAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C28E243-026F-4252-9D80-4D69C50467D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=243&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=243&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail:8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443C3EE1-1C98-40F6-93DD-F60BD0C46C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2_hotfix_2",
            "matchCriteriaId" : "D8FF3313-6C45-44C5-B093-E865AB16BAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C28E243-026F-4252-9D80-4D69C50467D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=244&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=244&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary code via (1) unspecified vectors, (2) type 1 authentication requests, and (3) type 2 authentication requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C0F6C2-8583-4CE7-A95C-59EB4C948F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks_desktops:3.2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "30674610-D472-44F6-AEFF-4D546C876648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks_desktops:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AE10C5-51EA-4E12-939B-88BDA54A8E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks_desktops:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79D1539-0284-4861-852D-D07AD9A538F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks_remote_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48960EE3-A04A-4B40-847D-4EC515CF785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks_server_management:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7A5DD7-BD95-41F7-9138-8EBF2FE31AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks_servers:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17EAFA2-2E03-4B62-8A98-5F706888FA05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111645317713662&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097644.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rem0te.com/public/images/zen.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111645317713662&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097644.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rem0te.com/public/images/zen.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:distinct_web_creations:newsletterez:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE330C3A-588F-4323-BC3D-045A7294BF27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.under9round.com/nez.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.under9round.com/nez.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shtool:shtool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "FBE1C224-293C-4FF0-AE4D-A992FF7BC95A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=93782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111955937622637&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-564.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/shtool-05252005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=93782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111955937622637&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-564.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/shtool-05252005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=158995\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/",
        "lastModified" : "2006-09-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-25T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funkyasp:funkyasp_ad_system:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5053DDB-4863-4993-B70A-24D50E6B107B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15494",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.funkyasp.co.uk/product.asp?prod=1&currency=USD",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.under9round.com/funky-asp.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.funkyasp.co.uk/product.asp?prod=1&currency=USD",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.under9round.com/funky-asp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed bookmark, then executes it in the security context of the currently loaded page when the user later accesses the bookmark, which could allow remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265668",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:keynote:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1B4920-8E9A-465A-990D-3CB54AAFA7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:keynote:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC49635-E066-497C-96B3-F3184FF50258"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://remahl.se/david/vuln/016/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://remahl.se/david/vuln/016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a crafted e-mail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailutils:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848F9FC2-578F-42FF-A333-011BB779F4BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailutils:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D061351-9F01-4F19-A323-60DC9CD2C915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15442",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=249&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13766",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=249&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a partial message request with a large value in the END parameter, which leads to a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailutils:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848F9FC2-578F-42FF-A333-011BB779F4BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailutils:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D061351-9F01-4F19-A323-60DC9CD2C915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15442",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=248&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13763",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=248&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailutils:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848F9FC2-578F-42FF-A333-011BB779F4BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailutils:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D061351-9F01-4F19-A323-60DC9CD2C915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15442",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=247&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13765",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=247&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailutils:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848F9FC2-578F-42FF-A333-011BB779F4BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailutils:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D061351-9F01-4F19-A323-60DC9CD2C915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15442",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=246&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13764",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=246&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary web script or HTML via the node parameter to (1) add_review.htm, (2) suggest_review.htm, (3) suggest_category.htm, (4) add_booklist.htm, or (5) add_url.htm, the isbn parameter to (6) add_review.htm, (7) add_contents.htm, (8) add_classification.htm, the (9) chapters parameter to the add_contents page in index.php (aka add_contents.htm), (10) the user parameter to contact.htm, or (11) the submit[string] parameter to search.htm. NOTE: it is not clear whether BookReview is available to the public. If not, then it should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w.m.r._simpson:bookreview:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47975A3B-B767-492B-85F7-3A3DC73ED196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/bookreview-10-multiple-variable-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014058",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16871",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16872",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16873",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16874",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16875",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16876",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16877",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16878",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13783",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/bookreview-10-multiple-variable-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D983EC-61B0-4FD9-89B5-9878E4CE4405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4C5F05-BC0B-478D-9A6F-7C804777BA41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDB5A09-BE86-4352-9799-A875649EDB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F03FA9C0-24C7-46AC-92EC-7834BC34C79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4742C-A983-4F00-B24F-AB280C0E876D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0628DF-3A4C-4078-B615-22260671EABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962FCB86-15AD-4399-8B7D-EC1DEA919C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180D07AE-C571-4DD6-837C-43E2A946007A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90789533-C741-4B1C-A24B-2C77B9E4DE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1520065B-46D7-48A4-B9D0-5B49F690C5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "494E48E7-EF86-4860-9A53-94F6C313746E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2636B92E-47D5-42EA-9585-A2B84FBE71CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A518E8-21BE-4C5C-B425-410AB1208E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3AB748-E463-445C-ABAB-4FEDDFD1878B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "660E4B8D-AABA-4520-BC4D-CF8E76E07C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFEED5-4941-41BB-93D1-CD5C2A41290E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E79A05-64F3-4397-952C-A5BB950C967D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cr.yp.to/antiforgery/cachetiming-20050414.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13785",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cr.yp.to/antiforgery/cachetiming-20050414.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The OpenSSL Team do not consider this issue to be a practical threat. Conducting an attack such as this has shown to be impractical outside of a controlled lab environment. If the OpenSSL Team decide to produce an update to correct this issue, we will consider including it in a future security update.",
        "lastModified" : "2008-07-08T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vCard viewer in Nokia 9500 allows attackers to cause a denial of service (crash) via a vCard with a long Name field, which causes the crash when the user views it."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:9500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EC4CFC-ADCB-4131-9FD2-59DA48380363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/13784",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/infocus/1836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/infocus/1836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restore a saved configuration, via a direct request to firmwarecfg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dsl-504t_firmware:1.00b01t16.eu.20040217:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10567E58-4116-48D2-A7FB-35ADD2A79B0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dsl-504t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893741B3-B4C4-4BB3-A4FD-764AF8D5DB44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111722515805478&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15422",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13679",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111722515805478&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dsl-504t_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B3048F-760E-42BF-8C33-D845E0EBA8B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dsl-504t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893741B3-B4C4-4BB3-A4FD-764AF8D5DB44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111722515805478&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111722515805478&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1_hotfix_2.0",
            "matchCriteriaId" : "6F52CDFD-FE11-4572-85F8-3D36C1CFAF0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014062",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "setup.php in phpStat 1.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the $check variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpstat:phpstat:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5FD1DD-C7EC-4551-88B0-35C01A7B1A4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111721290726958&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/15516",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014064",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/advisory/PhpStat_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/tools/sbphpstatpoc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111721290726958&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/15516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/advisory/PhpStat_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/tools/sbphpstatpoc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The filecopy function in misc.c in Clam AntiVirus (ClamAV) before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is invoked."
      }, {
        "lang" : "es",
        "value" : "La función filecopy en misc.c en Clam AntiVirus (ClamAV) en versiones anteriores a 0.85, en Mac OS, permite a atacantes remotos ejecutar código arbitrario a través de un virus en un nombre de archivo que contiene metacaractéres shell, que no son manejados adecuadamente cuando permisos HFS impiden que el archivo sea borrado y el mismo se invoca."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.84",
            "matchCriteriaId" : "8B796948-15AD-4A30-8251-67444175A777"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014070",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sentinelchicken.com/advisories/clamav",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sentinelchicken.com/advisories/clamav",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash) via an IPsec IKE packet with a malformed ISAKMP header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:contivity:1000_vpn_switch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4342FEF4-588B-459B-9490-3FD89B229E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:contivity:1500_vpn_switch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D842866D-3609-4E56-9A49-4DEA16E5642F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:contivity:1600_secure_ip_services_gateway:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9231EA1-BA0F-4A4D-955A-651447AFC91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:contivity:2000_vpn_switch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F31FDFE3-82C9-47CA-A5FF-E5A2491794FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:contivity:2500_vpn_switch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5ED1556-CDAE-4149-B2AF-2B252D94E65A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:contivity:2600_secure_ip_services_gateway:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A34A14-A349-43C4-A03C-8320E56AC2A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:contivity:4000_vpn_switch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC7887D-9D8C-46D8-9065-23D41CF07E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:contivity:4500_secure_ip_services_gateway:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76FDA60-BACA-4A2E-8112-F00DC9B89694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:contivity:4600_secure_ip_services_gateway:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B860310F-F1F1-45A5-A324-AAA9735C92F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:vpn_router_1010:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370BE654-2A89-4FA9-BE88-3E4CA19441FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:vpn_router_1050:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD74483C-842C-4E01-A786-C34866B548FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:vpn_router_1100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC585A5-DBBE-4236-801A-F52523A5C5DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:vpn_router_1700:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B922ADAB-F42F-4113-8222-0493FE74CF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:vpn_router_1740:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2FF1CE-97F7-4951-8FD7-59657670BF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:vpn_router_2700:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23377D6E-6C2C-425B-A6DC-E5319B327DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:vpn_router_5000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9050DFE2-99C6-41F0-AD1D-5EDFB9B15D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:vpn_router_600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC34C85-99E9-4DAB-B19E-9179813C0398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nta-monitor.com/news/vpn-flaws/nortel/vpn-router-dos/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/399423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13792",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nta-monitor.com/news/vpn-flaws/nortel/vpn-router-dos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/399423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 SP2 (6.0.2900.2180) crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address.  NOTE: if there is not an exploit scenario in which an attacker can trigger this behavior, then perhaps this issue should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111746303509720&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13798",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111746303509720&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1ADBDEE-1421-42E5-8DE2-404087613B75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/034354.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/034354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote attackers to execute arbitrary SQL commands via the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_solutions_for_educators:online_solutions_for_educators:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F74DE058-F800-4899-A1D1-26BF0764F421"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014072",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13804",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.under9round.com/os4e.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.under9round.com/os4e.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peercast:peercast:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1211",
            "matchCriteriaId" : "3DECD878-1E77-4DCC-9554-021E64393C85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111746603629979&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15536",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00077-05282005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.peercast.org/forum/viewtopic.php?p=11596",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111746603629979&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00077-05282005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.peercast.org/forum/viewtopic.php?p=11596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service (infinite loop leading to memory and CPU consumption) via a long header field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmailer:phpmailer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.72",
            "matchCriteriaId" : "E38183F1-CA23-4BE3-B9C0-B4A5C50F1BB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/May/0337.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014069",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=341210&group_id=26031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/PHPMailer-DOS.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/May/0337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=341210&group_id=26031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/PHPMailer-DOS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 SP2 allows remote attackers to cause a denial of service (infinite loop and application crash) via two embedded files that call each other."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111746441220149&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111746441220149&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in SignIn.asp in India Software Solution shopping cart allows remote attackers to execute arbitrary SQL commands via the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:india_software_solution:shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4BDCB-4909-48B5-8C73-8556BC59ED41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ir-hackers.com/indsc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014074",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://ir-hackers.com/indsc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serverscheck:monitoring_software:5.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4522F997-4F58-4D40-AEFB-CE308AA06FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serverscheck:monitoring_software:5.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC120F42-1A92-4445-8CE5-05D78123171E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rgod.altervista.org/hacking/news/serverscheck.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rgod.altervista.org/hacking/news/serverscheck.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) admin.php, or (2) powerpack_f.php, (3) the sitename parameter to sdv_infos.php, (4) the categories parameter to faq.php, (5) the lettre parameter to the glossaire module, (6) the title parameter to reviews.php, or (7) the image_subject parameter to reply.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net_portal_dynamic_system:net_portal_dynamic_system:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6772F991-5640-4282-9DC2-5EB0A35381A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014073",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.npds.org/download.php?op=geninfo&did=115",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.npds.org/download.php?op=geninfo&did=115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net_portal_dynamic_system:net_portal_dynamic_system:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6772F991-5640-4282-9DC2-5EB0A35381A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014073",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.npds.org/download.php?op=geninfo&did=115",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.npds.org/download.php?op=geninfo&did=115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DbgMsg.sys driver in Compuware SoftICE DriverStudio 3.1 and 3.2 allows remote attackers to cause a denial of service (application crash) via an invalid Debug Message pointer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compuware:softice_driverstudio:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E168B3-73F4-4D13-BF73-80D0EED16344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compuware:softice_driverstudio:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86053B85-785E-482A-B24A-6F52A6638DAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111746654827861&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pb.specialised.info/all/adv/sice-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111746654827861&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pb.specialised.info/all/adv/sice-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-30T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefly Studios Stronghold 2 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large size value for the nickname, which causes a memory allocation failure and generates an exception."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly_studios:stronghold_2:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F31A80F-C98F-4BE8-BBCA-13D34EAE30AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/strong2boom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111747562806999&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/strong2boom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111747562806999&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0356",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:agent_desktop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA6F73C-A3F2-460C-8CE5-25F818E39933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:e-mail_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4288E9F-8010-43F2-AEBE-A048BDA33858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:emergency_responder:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10AFE8CE-EA67-4BC4-93BC-7D5D61D5A7C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:intelligent_contact_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E326AE-12CC-4673-8FE6-7979AD489905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:interactive_voice_response:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35354155-4E01-469B-B947-3947F2490809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ip_contact_center_enterprise:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4EBA42-D50B-4A72-9D7E-C1387E8F3FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ip_contact_center_express:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768CD80D-9FC2-43E9-AB69-51B403C0AC2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meetingplace:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EEA208-7F2E-4E01-8C8C-29009161E6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:personal_assistant:1.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B8308C-7C36-48E1-97BC-282908B9A38D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:personal_assistant:1.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AF8C73-C10F-4873-941B-26C832D854EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:personal_assistant:1.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE1C413-0678-4E9A-AC7F-105538D3C56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:personal_assistant:1.3\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4ADC051-C35B-4C68-B751-B8A2434A6E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:personal_assistant:1.4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "131ABD48-89ED-45B9-865B-20AF3631BA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:personal_assistant:1.4\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC18EEF-1DA5-402A-9C22-BCF287F2D501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:remote_monitoring_suite_option:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD6DC298-5EC8-4303-A50A-8A22ABB8518E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.0:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "22B6CD99-5B21-4961-AD47-B1722E586664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.1:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "3BF391B2-17C6-4633-8CE9-35B637BFDC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.3:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "7889030E-97F7-4CCD-8050-5250B1F58C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.3:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "26B0CB70-CC82-4FF1-882C-0712354DA113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.3.5.1:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "543A3774-28EB-406D-830E-957B5E9E7A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.3.6.1:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "B0B5C19A-58BB-4A7A-886D-3567B37F466D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.4:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "4126D9DE-A75E-4A9E-9DA7-1477D5688872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.5:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "0354C50C-4104-4960-B1EE-F212CD3D6AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.6:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "DE9B81AC-1D16-4FDF-B438-3D3ED2BE9538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.6.2:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "8F515D7A-D663-49F0-8F12-1484000505FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.6.3:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "A668278F-8080-4295-95EB-88341478D16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.6.4:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "A66BED35-F385-4A0C-9416-6F007536133E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.42:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "5EA57609-522C-4431-92AE-4FF11AA67320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D05855-C8C1-4243-8438-5A36A01A8F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.0:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "A60B49A7-B569-4485-A6B3-E14B9FB96950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.0.1:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "FA889730-B2FF-4219-BBCA-A4364BA61EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.0.3:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "8731D5CC-A6F9-48DB-B1D1-FD50CEAC63D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB11A75E-2E4B-4B83-B763-CBBC1D9DFB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.1.1:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "DFFE6A50-B704-42BB-8FFF-27E9F4D3B576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109147BF-3225-48E4-8BE1-2E5B59921032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2:*:windows_server:*:*:*:*:*",
            "matchCriteriaId" : "7CDA01B6-6887-40BB-B541-65F198D03219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "86806D6E-1BDF-4253-AEB7-D9D88D224812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(1.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BD6882-379C-4EA7-8E51-124273C5A56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "680E5A81-6409-4CE7-8496-D7845FD7E851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3868E060-0278-491A-9943-1A2E435C7606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F39D3441-C84A-403A-ACB4-8019579EE4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61ED039B-C3E6-4BC8-A97A-351EC9CEAF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2793200-D95D-4BD3-8DF2-4A847230FBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E587654-B5A0-47A4-BED6-D8DB69AEF566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F07B954-817F-47AC-BCAC-3DA697A6E2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC1B599-05C0-4FB5-A47B-5D858DAB43A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:support_tools:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCEB1D7-38BB-4056-A2A5-8F344048A95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_collaboration_option:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF58F1E-ED37-4334-9194-E6FC07C6AB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:alaxala:ax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811B1CC7-325B-4017-BAA8-2F90BBE50FFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BF1392-C6E2-4946-9B9E-A64BFE7E8057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA117831-013A-4B62-90EA-9F87D0DBACF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08E2D6A-1B4C-4BDA-8FF7-8D61A393460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7E0B10-11E0-44B7-A450-AA5AB058C6C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C25529-9048-46E8-8A59-61CAD59C2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.1\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "70ADFE52-9C89-4C29-AC74-7F510326F810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CEBAD7-7BDD-44DE-A591-C7EFD4E3F67E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9306CD67-C43D-46F7-B76B-1FA0ACC6135E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D9BE35-E2AA-42A4-BECB-1BD33F2D9F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A008ACB8-54DD-4C49-A35D-3FA7D3CBF38F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6659C2E-691B-47B8-9659-73FF4DEE3C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_server:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0317B33-20DC-4E57-8AFC-097FBC6067F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_server:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D382C84D-C8F7-4257-B6C6-D00C595F6B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_server:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF21240-6275-434F-B7C3-8CC029B9ABA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_server:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8934A49D-9ABB-4B49-9B69-615B8CFFAF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_server:2.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E60BDFE-108B-4621-9B02-774AA844407B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856D99BB-1CB3-4A8D-9752-CC854829C65A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13E26E7-8284-4B70-B51C-B3B96995094F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2414F807-1EAE-438D-9497-B6259AC1AA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_server:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB4D983-658F-4B5F-B136-02A9605DAF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D26F84D4-B6AC-4BAD-8D9D-B33842FEF9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:mgx_8230:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF93667-8DEC-4A3F-836F-51169553A5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:mgx_8230:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A5B93D-90F2-4133-B9FA-A0E659DD66CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:mgx_8250:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933C2E60-230F-41B2-B978-03BCD9C017B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:mgx_8250:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920C5EDC-003F-4805-97E1-E78AD9DA6A35"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_access_control_list_manager:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826A77B1-76FA-489E-B630-916DE44067D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_access_control_list_manager:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58781C8F-0E66-467E-AF2D-44BE027CF649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716ABF75-32B2-4E9A-A612-BA06C5C2E17D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3954D0D1-9FDF-47D0-9710-D0FB06955B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63F8D490-22C8-4638-88D4-7D629D74A68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_common_services:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D6712BD-DE8F-40F5-AC74-B9EFE9A50CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_lms:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81483D4-D1F5-4BDA-975B-5C22D81A6F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_vpn_security_management_solution:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95875913-E9F6-47C4-845C-71F363E515C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A49F9C-78F5-4FC6-A8CD-ACA45D689CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webns:7.10_\\(05.07\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40EA78B8-E97E-4EFF-8A59-3977A48E21E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webns:7.20_\\(03.09\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D214E48-0E05-4C82-81E7-8C4FA08DD7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webns:7.20_\\(03.10\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA012F9-EEE5-4085-8EEA-DCF576C09DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webns:7.30_\\(00.08\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD48517-F464-4DDE-9902-1FEAE1A962AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webns:7.30_\\(00.09\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568B63CF-7B0D-45B2-ABC3-C333CF1B66F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nortel:business_communications_manager:200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F49ECAF3-0922-4C6B-A991-93504457668A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nortel:business_communications_manager:400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E34503FD-5462-4D07-B626-A0061EDB6DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nortel:business_communications_manager:1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2401C82A-BC79-435D-B921-FEE8DD3129C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nortel:callpilot:200i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AEEAEC-04E3-4AF0-8ECB-59684CBB4D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nortel:callpilot:201i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396BD40F-EC2B-4F16-89BA-BCD67D318C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nortel:callpilot:702t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7D542E-A47B-4B21-8F31-1B4AE50486FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nortel:callpilot:703t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D6193D-F50D-4B86-9F4C-74C74A026176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nortel:contact_center:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C976A2-0E66-4CDD-B6B7-A93DEDB47754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FC94DE-BBD2-43C6-9435-0242BA5DCC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_services_switch_11050:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B327940A-8884-4B45-8981-D1F19A318DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_services_switch_11150:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D01950-FFD4-4491-9C95-59AE911722F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF28C435-C036-4507-8E3F-44E722F9974A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_services_switch_11501:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD2203A-CE41-4353-A291-AFB117FDDA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_services_switch_11503:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC289BD9-E1CD-4B22-89B0-D8D525B004A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_services_switch_11506:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E298BB-ADAA-4AAB-9851-2255FCC42ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_services_switch_11800:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4A3675-9561-434E-A2C0-AF56CBD30560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:7220_wlan_access_point:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4AED72-AD89-4FBB-89F4-1459617B882A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:7250_wlan_access_point:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5EA867-A9AD-4400-A8F9-CC73C3A311A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:ethernet_routing_switch_1612:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F5436F-68B2-4A10-87CA-390684FCE921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:ethernet_routing_switch_1624:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83688351-789A-495D-BA97-57FA65E443A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:ethernet_routing_switch_1648:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7DA7DE-9310-4BB4-941D-01589E8B4853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:optical_metro_5000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3270F2E-A780-4843-B3D1-ED85DC972AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:optical_metro_5100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF6BDE8-C6B5-42DA-B16C-2258D765CB2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:optical_metro_5200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B29C7C-D06E-4E08-88AA-AEDA987B19F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:succession_communication_server_1000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0CB855-CDD4-42B7-9328-64B10F5A3A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:survivable_remote_gateway:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FED9ED-570F-4050-93E8-2A31E52DCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:universal_signaling_point:5200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8AA04-63A1-46C2-985A-84779FD7971C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:universal_signaling_point:compact_lite:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B3E8A3-0B7E-46D1-9847-6DC1B498FA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ciscoworks_1105_hosting_solution_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CED8EB-2292-4F16-8CD4-C3B56D1DF71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ciscoworks_1105_wireless_lan_solution_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC9380C-E602-4718-A98B-DA5ACD8AB69B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ciscoworks_cd1:1st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419D225D-28FD-4D76-ACBF-45EA35B9973E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ciscoworks_cd1:2nd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF809BC6-93A5-4B1D-BC3C-2A41F32D4A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ciscoworks_cd1:3rd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED9047B-5AA5-49C1-B8D1-690D505082D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ciscoworks_cd1:4th:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45096D29-930F-4FE0-A23F-8C57BF62567A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ciscoworks_cd1:5th:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC6393A1-F3A2-4D73-A845-03C9725B91A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ciscoworks_windows_wug:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FE5EBC-DCD3-4FFA-A120-83DE51E2FA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:conference_connection:1.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D53AA4-4E6D-4586-A84A-634C68C0C967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:conference_connection:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CC94AA-9702-4A7E-82C5-DE06FB7D6631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C496B665-70DA-4B98-A5D1-E2935C0CE840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34797660-41F5-4358-B70F-2A40DE48F182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C9E23D-AB82-4AE1-873E-C5493BB96AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4054D69F-596F-4EB4-BE9A-E2478343F55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA26ABBE-9973-45FA-9E9B-82170B751219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7891202C-62AF-4590-9E5F-3514FDA2B38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8F9B2F-E898-4F87-A245-32A41748587B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183667CA-6DF1-4BFB-AE32-9ABF55B7283A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDDEC3F-52EB-4E1E-84C4-B472600059EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314BA420-4C74-4060-8ACE-D7A7C041CF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAD7613-A5B3-4621-B981-290C7C6B8BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE38C50A-81FE-412E-9717-3672FAE6A6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A3F7B6-2878-40C0-B59C-EBA8D171D2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263F3734-7076-4EA8-B4C0-F37CFC4E979E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0419DD66-FF66-48BC-AD3B-F6AFD0551E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B982342C-1981-4C55-8044-AFE4D87623DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E02BE6-4800-4940-B269-385B66AC5077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB09993-B837-4352-B09D-3656F62638A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0361EA35-FBD7-4E8F-8625-C8100ED7BB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "29EAA113-2404-4ABB-826B-3AA2AA858D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A585A1-FF82-418F-90F8-072458DB7816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F7EB61-55A5-4776-B0E7-3508920A6CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "A442DE97-4485-4D95-B95D-58947585E455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE31DFF8-06AB-489D-A0C5-509C090283B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8A6564-129A-4555-A5ED-6F65C56AE7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "237174A4-E030-4A0B-AD0B-5C463603EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF49BF03-C25E-4737-84D5-892895C86C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7F8F11-1869-40E2-8478-28B4E946D3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2019E0E-426B-43AF-8904-1B811AE171E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "9062BAB5-D437-49BE-A384-39F62434B70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1504C-14FE-4C21-A801-944041F2946F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "6E53C673-9D6D-42C8-A502-033E1FC28D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5FC1A-1253-4390-A4FC-573BB14EA937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4AC452-6042-409D-8673-ACAD108EE3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE1009B-371A-48E2-A456-935A1F0B7D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C844A170-B5A7-4703-AF3B-67366D44EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44308D13-D935-4FF8-AB52-F0E115ED1AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3D41CB12-7894-4D25-80EC-23C56171D973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD9C12-EDAB-473F-9CC5-04F06B413720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "09789843-6A1A-4CDB-97E8-89E82B79DDB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*",
            "matchCriteriaId" : "118211EF-CED7-4EB5-9669-F54C8169D4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*",
            "matchCriteriaId" : "58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "9A405AE2-ECC4-4BB0-80DD-4736394FB217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*",
            "matchCriteriaId" : "E5612FB0-8403-4A7E-B89A-D7BDFAC00078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*",
            "matchCriteriaId" : "FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "AFDA151E-E614-4A24-A34D-B6D5309110CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "09BFA20B-2F31-4246-8F74-63DF1DB884EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3B4BA2-8A61-4F9A-8E46-7FA80E7F5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE93D3D-34B4-47B7-A784-61F4479FF5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*",
            "matchCriteriaId" : "6E21E50A-A368-4487-A791-87366CC5C86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "43E84296-9B5C-4623-A2C4-431D76FC2765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*",
            "matchCriteriaId" : "E18328E2-3CB5-4D36-8EA3-77DD909B46A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "EF73D76B-FBB8-4D10-8393-9FAF53392A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "F177AE1C-58C2-4575-807C-ABFFC5119FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A612F6-E4EB-4E34-8F55-79E16C74758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "5C19B266-8FE7-49ED-8678-2D522257491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "15C4D826-A419-45F5-B91C-1445DB480916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9F2B04-A1F2-4788-A53D-C8274A758DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5309ED-D84F-4F52-9864-5B0FEEEE5022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BC012-ADE4-468F-9A25-261CD8055694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DA30A1-3360-46BC-85B7-008D535F95BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA33E7E2-DE7B-411E-8991-718DA0988C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957B3C0-7F25-469B-BC3F-7B09260837ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC46909F-DDFC-448B-BCDF-1EB343F96630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9496279F-AB43-4B53-81A6-87C651ABC4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA160D4-5CAB-44E7-880A-59DD98FEAD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:alaxala:alaxala_networks:ax5400s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F8D909-66F0-4D52-B909-12A8F0F57E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:alaxala:alaxala_networks:ax7800r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "107670ED-9000-476A-A95E-A5DB1DF5DE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:alaxala:alaxala_networks:ax7800s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513589C-5598-419E-A1CC-1113E8E1ED47"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8B5553-7295-4786-9F81-B4527EAD4F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap350:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF8AA1B-17C3-49E3-BA0F-17FFCE2AAE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:sn_5420_storage_router:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CD39D2-2BD7-475C-99AF-785FC1468268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:gr3000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE18FB6-E292-47B2-8FA2-74EE122C2B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:gr4000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D377F14F-44AE-4D74-8C14-BA73AC77FDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:gs4000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0F430E-3C96-4012-8B4B-9DBC7FC2C696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:yamaha:rt105:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF64DBC-0642-420F-984D-D362BB58543E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:yamaha:rt250i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D56D5F-5E20-4273-B4BE-D603666B69EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:yamaha:rt300i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E91CCC-2C87-4821-BECB-CCAA2C02746B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:yamaha:rt57i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E34B7C2B-399B-4892-B715-8ACA3C2FCD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:yamaha:rtv700:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AF5618-F041-43F9-B225-ADEAE8379C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:yamaha:rtx1000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83831044-089B-4BA9-965C-7A5B2CBBACB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:yamaha:rtx1100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AA01AA-C220-411B-8F96-77FE54EFFAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:yamaha:rtx1500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03C6BB5-8BA2-475C-86FA-69B33BF7B3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:yamaha:rtx2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4B1ED-30F3-477A-8D4E-1342AF8DEB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6576F05C-271D-401F-99BF-54D004B8D9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "718815AE-B1F2-4275-946A-A6FE5D5106C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8702F2BF-7B5B-4692-BEA5-EE86142892B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE896351-297D-432B-97A5-F5732EC8B419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C5D0D3-F5F4-402F-880B-32A07AAA8694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEEA4099-F68F-4542-815F-3716C13EBFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5428_storage_router:2-3.3.1-k9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE654EE-28AF-42D3-A4C9-4BFB7E9D168B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5428_storage_router:2-3.3.2-k9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89EB3837-6F21-4B2E-BA36-FCCFCAA10F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5428_storage_router:2.5.1-k9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A709E73-B933-4F82-B48C-338B391EB779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5428_storage_router:3.2.1-k9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B6E779-3A98-48FE-943F-03F1B461E052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5428_storage_router:3.2.2-k9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A320E9FF-16C5-4924-81E4-30AB859B5535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5428_storage_router:3.3.1-k9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "106E35AF-5D63-4D94-9B51-853F565B81B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sn_5428_storage_router:3.3.2-k9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A981F8-A671-48FD-93D8-27D03ED6DA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C3A906-6DB7-405A-924B-35D9C53E2453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ADD5E15-8174-4C87-A8DF-A266B90D0644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D35C2D-DD83-4337-AEA1-5B7E9D5E2EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFC90CF-9AAA-4D3E-9F91-1B278EA46E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0DB69D7-AEBB-428F-A229-9132D91342CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A96B67C-DD7B-441D-A18B-59F5680D10AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8D947C-2A9F-47AD-B221-C80107DD341E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431E7D83-CC65-4A8B-8A3E-5D9C5D6BE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49E573B-F732-4F96-B7F2-DE7989D403CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98E8B40-12E1-4B27-98F3-AF589E516EF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E71C845-F308-4B36-81DD-906F2C5D8226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAE8872-60E7-453E-8C6F-20D970EFAA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96240FCA-244C-40E5-9509-2F79ECF51BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724E2496-E0D2-47AF-AC30-CC671731A37D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70E46B6-FFE2-47A6-A907-E606E8D16495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8783BBE4-A081-4409-A369-B063C4D73C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951A82A0-3C91-4B50-AE4D-929A4EA75F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38992D08-E1FF-4C89-982E-635C43B5BC2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/15393",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/15417/",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18222",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/18662",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/637934",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13676",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20635",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15417/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/637934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1765",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows local users to cause a denial of service (kernel hang) via crafted arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13904",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/143-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/143-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (system crash) and possibly execute arbitrary code via certain signals combined with crafted input."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C40879-2EA4-459C-8B09-7BD7B08CE746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026ABB4A-ABB0-4EAB-80AA-D0904AADD499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.183:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10EE0F87-3F43-4539-A6C0-6093137988AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3608831-EDD7-4DC9-B22C-20A49C58C3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010D3CD8-6E19-4A3C-AF3A-891A773E8A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC9FA41-C6B7-47D0-B087-424C1EB33C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AB0737-7E86-40E3-B356-F364817F3881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D2E6379-791B-4220-827D-833F23252CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.268:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE89970-5A5C-4F12-9191-7E9609ED0D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.278:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831FC302-4DF5-4C6B-8458-A6DC94B4ABD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.287:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074B74D5-1F16-484A-9E26-6EEB6027B5EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.289:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66598B99-1426-4326-AE5C-27ACCE2BADBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA7C524-30C1-442A-BC36-58CC88400A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.319:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4E7BB2-9513-4367-821D-51F79B3CCBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.335:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DEC005-1F28-4227-9A7B-1244560769F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.342:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E4EB75-746A-4C9C-83F2-46CF3BC6C70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.357:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96927EC7-346F-4BB7-A0B8-FFDB95912A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.389:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B12B74-07D2-410E-99BB-0E9EBF3B51A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.396:*:*:*:*:*:*:*",
            "matchCriteriaId" : "319673EC-3F80-4AA2-9598-B6BA3CA0EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.412:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0C74DD-7735-4C18-975B-B47CAFD96FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.418:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9EEA66-3313-4FB1-9342-304162A92366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.501:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FED369-86BA-4C6A-AB16-F3974F84D56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.5.518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C92A34-E4D8-4BA3-B01E-8743719D00EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.5.549:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3253D43C-1325-4A3E-8442-1D432E98EFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.5.561:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FEB250C-87AB-422D-AE85-C473974FA160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C26411-1364-49CB-8715-4E5F9D07119F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.623:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71EC304A-2729-4B91-9B87-2DCB3B975DD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111712494620031&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pb.specialised.info/all/adv/avast-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111712494620031&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pb.specialised.info/all/adv/avast-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in HP-UX trusted systems B.11.00 through B.11.23 allows remote attackers to gain unauthorized access, possibly involving remshd and/or telnet -t."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111713178014478&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111713178014478&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111713178014478&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111713178014478&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the client cd-key hash in Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a long client cd-key hash value, a different vulnerability than CVE-2005-1556."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atari:terminator_3_war_of_the_machines:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.16",
            "matchCriteriaId" : "4FB1D5BF-CB09-4333-9BA5-CAEE25CCBD5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/t3wmbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111713248227479&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/t3wmbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111713248227479&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote attackers to execute arbitrary code or cause a denial of service.  NOTE: this candidate may be SPLIT in the future when more precise technical details become available."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lsoft:listserv:1.8d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA3EAFF-68EC-4504-A73C-28AF55D5DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lsoft:listserv:1.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34E225E-1FCA-4476-BC55-A9E86B7852E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lsoft:listserv:14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6691A12F-371D-45FA-922D-D026BB2CFFCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111705329308546&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13768",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111705329308546&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WEB-DAV Linux File System (davfs2) 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davfs2:davfs2:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38DEDFFE-BB54-44E6-9E23-6BC74BD20E4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=310757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111705524308096&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=310757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111705524308096&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a large nickname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atari:terminator_3_war_of_the_machines:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8588EA94-204A-42CE-B518-F1173FE97BD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111713248227479&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/15520",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111713248227479&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/15520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the READ_TCP_STRING function in game_message_functions.cpp in the network plugin for C'Nedra 0.4.0 and earlier allows remote attackers to execute arbitrary code via a long text string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cnedra:cnedra:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F044948-59C8-44AC-9883-5D28701F129F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cnedra:cnedra:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE1F972-6D97-492B-9E78-EC7F5D9AA6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cnedra:cnedra:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EF45FF-087B-43AC-87F9-12FD259A662E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cnedra:cnedra:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37263989-4C0F-4D2A-8D75-2B2941779AC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/cnedrabof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111713300212601&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/cnedrabof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111713300212601&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands via the start parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7B5757-8E02-4764-BF26-B51AB98E141F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111721364707520&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/Article2691.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111721364707520&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/Article2691.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7B5757-8E02-4764-BF26-B51AB98E141F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111721364707520&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://news.postnuke.com/Article2691.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111721364707520&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://news.postnuke.com/Article2691.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFA0657-E3C0-4651-9EEA-07C832C6B683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:1.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58359C5-1144-4E49-99F2-A09B7C5F7B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC344628-1C14-45FE-A073-25ADCE6A0AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:2005-04-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D38ACAC-BB12-4746-B59C-C1148AA8FB73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15511",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014048",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/login.asp in Active News Manager allows remote attackers to execute arbitrary SQL commands via the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotnetindex:active_news_manager:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D744D7AC-522A-48E2-AE70-952D603EA71A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.under9round.com/anm.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.under9round.com/anm.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service (crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAA0B95-5875-41CF-90BA-EF07D240FF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724E8638-CF5A-480B-89D7-0E029A0C5965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B664B5-EEF9-4C5F-B23C-E4D54DBF2EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27EEFD5-19B1-4F0C-BD52-257594C37310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB6A16-65D3-43CF-BFB4-E0616476A979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADEF40C-4C56-4893-B757-15966ED5A925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BCB9D-9AEF-40E2-8291-50EC2A083775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88435083-D7A8-4679-BEB1-4B6526454C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145A8B1A-573D-4695-B66A-FF8EA2556DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9572349-9433-415F-B81B-10A1375AF33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15487",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a search[string] parameter with a missing value or an incorrect submit[type] value, which reveals the path in the resulting error message.  NOTE: it is not clear whether BookReview is available to the public.  If not, then it should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w.m.r._simpson:bookreview:beta_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776FDA33-FDCC-4453-8A5D-F61EAAD207B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/05/bookreview-10-multiple-variable-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/1014058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16881",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/05/bookreview-10-multiple-variable-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/1014058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ad/login.asp in ZonGG 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zongg:zongg:v1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9239FC5-3E76-4544-9518-DA6C5A14ED7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014063",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13787",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.under9round.com/zongg.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.under9round.com/zongg.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the curses_msg function in the Ncurses interface (ec_curses.c) for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ettercap:ettercap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.7.3",
            "matchCriteriaId" : "BD8481EB-4660-4A60-927C-3E92CB926E2D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ettercap.sourceforge.net/history.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15535",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15664",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16000",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014084",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-749",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-07.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13820",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0670",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://ettercap.sourceforge.net/history.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freestyle:wiki:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C549EB-4E4B-4DBF-9BDC-482397B5B87F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freestyle:wikilite:.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E89142-83AB-4C10-A8A9-7EC289B0207B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15538",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating \"Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8p7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B570E525-A024-4D41-9600-1134433786DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0349.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0359.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111755694008928&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0359.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111755694008928&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 and earlier allow remote attackers to execute arbitrary web script or HTML via the (1) forums, (2) version, or (3) limit parameter to misc.php, (4) page or (5) datecut parameter to forumdisplay.php, (6) username, (7) email, or (8) email2 parameter to member.php, (9) page or (10) usersearch parameter to memberlist.php, (11) pid or (12) tid parameter to showthread.php, or (13) tid parameter to printthread.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00_rc4",
            "matchCriteriaId" : "768677E9-73F0-4D30-9B23-C7E2AC75FBAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111757191118050&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15552",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mybboard.com/community/showthread.php?tid=2559",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111757191118050&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mybboard.com/community/showthread.php?tid=2559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to calendar.php, (2) idsql parameter to online.php, (3) usersearch parameter to memberlist.php, (4) pid parameter to editpost.php, (5) fid parameter to forumdisplay.php, (6) tid parameter to newreply.php, (7) sid parameter to search.php, (8) tid or (9) pid parameter to showthread.php, (10) tid parameter to usercp2.php, (11) tid parameter to printthread.php, or (12) pid parameter to reputation.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00_rc4",
            "matchCriteriaId" : "768677E9-73F0-4D30-9B23-C7E2AC75FBAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111757191118050&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15552",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mybboard.com/community/showthread.php?tid=2559",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111757191118050&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mybboard.com/community/showthread.php?tid=2559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vincent_hor:calendarix_advanced:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63CB486-A534-41B8-A586-167FC54DCD70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/May/1014083.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16973",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/May/1014083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-05-31T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80744BD9-85A9-4E33-8C35-59C8C112AC62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B894864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.networksecurity.fi/advisories/windows-isa-firewall.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050602-00456.html?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B894864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.networksecurity.fi/advisories/windows-isa-firewall.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050602-00456.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC9B48D-8D14-40D1-A444-2EC2661E40A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014071",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka \"Mismatched Document Object Model Objects Memory Corruption Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86E7189-CE21-4007-A3FA-39A6B51A5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBF9B51-5AF4-4317-9768-21D866AC7990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111746394106172&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111755552306013&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15368",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18064",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.computerterrorism.com/research/ie/ct21-11-2005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/887861",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417326/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-347A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2867",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2909",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111746394106172&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111755552306013&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.computerterrorism.com/research/ie/ct21-11-2005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/887861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417326/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-347A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in Windows Management Instrumentation (WMI) service allows attackers to cause a denial of service (memory consumption and crash) by creating security contexts more quickly than they can be cleared from the RPC cache."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/890196",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/windows-wmi-rpc.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13801",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.microsoft.com/kb/890196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/windows-wmi-rpc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/399207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/399228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/399207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/399228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:remote_desktop_connection:5.1.2600.2180:*:windows_xp:*:*:*:*:*",
            "matchCriteriaId" : "20DA4D39-C134-4DC3-98C2-78E38158BD19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_terminal_services_using_rdp:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2ED35B-BE2F-492E-8219-7C984301711C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15605/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oxid.it/downloads/rdp-gbu.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15605/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oxid.it/downloads/rdp-gbu.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sony Ericsson P900 Beamer allows remote attackers to cause a denial of service (panic) via an obexftp session with a long filename in an OBEX File Transfer or OBEX Object Push."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sony:p900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B08AAE0-4CE6-4CC4-86F0-93794B4CA16A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:p900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C335E7-7C7D-4AF3-A9FB-4D45DB574358"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/13872",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/infocus/1836",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/infocus/1836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111817436619067&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15517",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wordpress.org/development/2005/05/security-update/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111817436619067&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wordpress.org/development/2005/05/security-update/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/16905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/May/0338.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15552",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/May/0338.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futuresoft:tftp_server_2000:1.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C99AFF-2C8C-4764-A31D-15393ABCF543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.org.sg/vuln/tftp2000-1001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13821",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.org.sg/vuln/tftp2000-1001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) \"../\" (dot dot slash) or (2) \"..\\\" (dot dot backslash) sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futuresoft:tftp_server_2000:1.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C99AFF-2C8C-4764-A31D-15393ABCF543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014079",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/tftp2000-1001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13821",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/tftp2000-1001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in PicoWebServer 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newmad_technologies:picowebserver:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC74CF4E-532C-48EA-89BE-B42F219A05BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111746551802380&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13807",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111746551802380&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via (1) an FTP command with a long argument to FTPD (ftpdw.exe) or (2) a large amount of data to LPD (Lpdw.exe)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:connectivity:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BB0FAB-DCC2-4B74-8B13-B1AC38EC5B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:connectivity:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E78D1FD6-9918-41F9-8125-0F12E586B089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:connectivity:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADEF937E-DE5F-4C6B-89E9-BA452911BCD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://connectivity.hummingbird.com/support/nc/exceed/ftpd_advisory.html?cks=y",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://connectivity.hummingbird.com/support/nc/exceed/lpdw_advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15557",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13790",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://connectivity.hummingbird.com/support/nc/exceed/ftpd_advisory.html?cks=y",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://connectivity.hummingbird.com/support/nc/exceed/lpdw_advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the \"Move users in this group to\" screen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC7F0E6-7DA6-41E3-9F73-4FFF699195C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA35A95-B8FD-4ED8-95E0-409E50BF13AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4066556-F0CE-4E8B-B88D-C3BA03D98D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25D5B0-082C-41AF-A3BA-5B35E54BCCAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93242B-85AD-451E-BC0A-D8561C292430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52954D4B-72E9-434C-991A-7B3D6C71183C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B42A0B9-628F-4173-8F94-3EACDE1D57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A127C8-803E-44A5-BB30-09C351CF3ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABB6806-5DC0-4146-89FC-05D079F0CFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77C15A2-9A9D-4C3F-8A62-18C54941B79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C79F9F-FE3C-4CC6-88A9-6EFB27724CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F427913-7FEB-49CA-AD9F-5E5EC77CA9ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "993BCE2D-C03F-4F2F-A973-68CEC6B34EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_alpha_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8C2DB4-06C3-4400-B0F3-2025FD829788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pdr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053B554A-AC3D-496F-9E3D-D357D14B87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B7742A-2BD1-4119-8850-5BCB35E9F7C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4CBB17-B8EB-4A60-B8F5-34A2816373FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0635.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0635.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC7F0E6-7DA6-41E3-9F73-4FFF699195C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA35A95-B8FD-4ED8-95E0-409E50BF13AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4066556-F0CE-4E8B-B88D-C3BA03D98D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25D5B0-082C-41AF-A3BA-5B35E54BCCAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93242B-85AD-451E-BC0A-D8561C292430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52954D4B-72E9-434C-991A-7B3D6C71183C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A127C8-803E-44A5-BB30-09C351CF3ACD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/13802",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newlife_blogger:newlife_blogger:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C23543-416C-4D70-9929-B9D970092F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newlife_blogger:newlife_blogger:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F0E6D8-E3D3-4A31-AA28-E47341CABBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newlife_blogger:newlife_blogger:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48E7FDC4-6DFB-4ECA-800A-E06A9F6AD031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newlife_blogger:newlife_blogger:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46DB761-5408-446A-B3D7-980AF888ACBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newlife_blogger:newlife_blogger:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "498A5DA5-AF74-4F59-9850-66054C6829A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newlife_blogger:newlife_blogger:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83AC84E-B45D-4EE1-9A4F-5C9987BA18CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15523",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13815",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sevengraff.com/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sevengraff.com/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "107C79B1-E7CC-4265-B3C5-CEAF6574584D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F005C-5B02-4847-B537-EE77799DAC64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163B787F-0D86-4BE4-ADEB-52FDF16C123D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E01C335-C4A2-4345-9825-E9035E149B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FACDBFD-A9EE-4DDD-A220-76BC6B8F87AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E81238-B591-44C3-A0FF-CFE862C56889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910DF924-0496-4332-A751-80B67D76CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115DFE65-A9AB-4497-B593-1CD871526A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B6BF89-DBD9-4ADA-B219-A6B6AFEF5CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C1D06A-7CB0-4B26-AFD6-A819FCB0F6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A55A938-7719-4FF4-8EA4-54FA505FDE58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5077854-33A7-4514-9215-CAB3E7BDE0A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA3F05B-7DB4-44ED-B0E3-0CB4F57DBDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC151CF-5D4A-42FA-9530-CFA7C2C50498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3F1C5F-2430-4644-A8FC-33A2C3DCA57C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D293ED3E-E058-4119-9374-85B39FBB4588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7DC704-FBAC-46DE-9E65-73B0EA15066D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E7A326-CC01-43E9-8698-683E7420391F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3333AB-7B3C-42C0-912C-8337F1595912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FD3846-BD21-4E7F-BB9B-59EEB40DAF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92430242-4261-48F2-B5F5-015BB8D7DE93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0658F85-0A98-417B-8353-04C5EAD1E0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20641F0A-8666-476F-82CB-8097ECD4FEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1246955C-1480-4215-8824-2B906736D629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6709A9-0033-4033-9A1D-C03621C9BC90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93245113-44EC-4F6B-9F3A-DEDBD3B79136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6113CD8-6BBD-49A4-8B1C-42856FA03C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E40CDD7-D3CC-407A-99B4-0D7925C6B025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D96576B-4157-4D91-A39F-483F7AE4749A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509161C8-C1A4-4633-996F-5C2CB839A676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikosoft:webmail:o.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D017991B-D0F8-4F33-B64C-1B69129027A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15518",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nikosoft.net/nswm/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nikosoft.net/nswm/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021147FB-D153-440D-95F2-B812FB9DEA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABAEFB19-C049-4C09-89CF-00E128FEC5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FC71F5-C279-40A8-ABC3-5A141D7DF419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837FA51A-A0C2-4BC0-9349-DB220BBB7A42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pandora.sapzil.info/text/notify/20050123.zb41advisory.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5KP0V0AFPA.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13823",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pandora.sapzil.info/text/notify/20050123.zb41advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5KP0V0AFPA.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerscripts.org:powerdownload:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E27E2F6-EEDB-4681-8ABA-55FDA52B1F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerscripts.org:powerdownload:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70628B9A-48D8-441D-BBAF-9185EEE6D7B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111755754126095&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15537",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014078",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/advisory/powerdownload_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111755754126095&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/advisory/powerdownload_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualiteam:x-cart:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A00086-CB3A-43C2-94BE-3E66647174DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111748583101076&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111748583101076&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualiteam:x-cart:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A00086-CB3A-43C2-94BE-3E66647174DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111748583101076&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15555",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014077",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111748583101076&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextweb:nextweb_\\(i\\)site:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FCC8D8-63E4-4028-896B-4AB1E695D408"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111764682925083&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111764682925083&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextweb:nextweb_\\(i\\)site:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FCC8D8-63E4-4028-896B-4AB1E695D408"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111764682925083&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15560",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014085",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111764682925083&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard requests for .jsp files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextweb:nextweb_\\(i\\)site:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FCC8D8-63E4-4028-896B-4AB1E695D408"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111764682925083&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111764682925083&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console access to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fortinet:fortinet_firewall:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217A73D4-D054-4A61-B5FB-A80075414815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111773657526375&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111773657526375&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the \"\\\" (backslash) character, which is used as an escape character and makes the module vulnerable to SQL injection attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailutils:1.0.6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5389C89-1FC3-4EA7-9909-45F51403D358"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=308031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=308031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liberum:liberum_help_desk:0.97.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A530CEA-C94D-430E-9081-900BF0B36C88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv14-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111773586701991&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv14-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111773586701991&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.asp or (2) print.asp or (3) edit parameter to register.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liberum:liberum_help_desk:0.97.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A530CEA-C94D-430E-9081-900BF0B36C88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv14-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111773586701991&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv14-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111773586701991&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the language parameter to parser.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcms:phpcms:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563AA30E-B906-44FC-8A2C-6D8BB12033DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcms:phpcms:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EFA714-48B0-4843-ACE5-9E63A6303E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcms:phpcms:1.2.1_p12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC32A40-EAEC-458E-8A35-C4BCEADFA1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcms:phpcms:1.2.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B820B51-34E2-4833-87D2-FDA6BAF35E04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpcms/phpcms/parser/include/class.layout_phpcms.php?rev=1.12.2.37&view=markup",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111773774916907&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpcms.de/download/index.en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpcms/phpcms/parser/include/class.layout_phpcms.php?rev=1.12.2.37&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111773774916907&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpcms.de/download/index.en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) search_row, (2) sort_row, (3) order or (4) perpage parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exhibit_engine:exhibit_engine:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7386A32-8144-4849-BD10-A26A7BE97779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exhibit_engine:exhibit_engine:1.54_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "414C2C8A-5EE6-4906-A3D5-792F6823729A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111773894525119&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://photography-on-the.net/forum/showthread.php?p=579692",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15583",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13844",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111773894525119&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://photography-on-the.net/forum/showthread.php?p=579692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to execute arbitrary code via a long CREATE command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:e-post_corporation:spa-pro_mail_atsolomon:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8AF0E8-0447-40CF-B68F-D8BD59E2466E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15573",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16990",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/spa-promail4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.org.sg/vuln/spa-promail4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:livingmailing:livingmailing:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60966979-531B-4CFA-AB09-E870D747B2F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014087",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.under9round.com/lmg.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.under9round.com/lmg.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-03T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:24.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1579.  Reason: This candidate is a duplicate of CVE-2005-1579.  Notes: All CVE users should reference CVE-2005-1579 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1858",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-06-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuse:fuse:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EA26ED-6A5B-46FD-B776-56164C2CA2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuse:fuse:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4070A046-AFAF-47E7-8143-950E7113F7D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuse:fuse:2.3_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4959BEE-BB4C-4C69-8B64-10D6DBDBCEDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuse:fuse:2.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D4EA36-BE3B-4FB6-AF1D-5D995737BADE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/311634",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15561/",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16024",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1014107",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=331884",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-744",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/17042",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13857",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/311634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15561/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=331884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the administrative console in IBM WebSphere Application Server 5.x, when the global security option is enabled, allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DC6FE-BBB4-45AA-8A5F-F204E798DF07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111817727120752&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15598/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24009775",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/general/WEBSPHERE-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17041",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111817727120752&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15598/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24009775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/general/WEBSPHERE-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp for WWWeb Concepts Events System 1.0 allows remote attackers to execute arbitrary SQL commands via the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwweb_concepts:events_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7191A03C-D51F-4736-8546-4C9180535FA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014104",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.under9round.com/wecs.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.under9round.com/wecs.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in view_ticket.php in Lpanel 1.59 and earlier allows remote attackers to inject arbitrary web script or HTML and obtain sensitive information via the pid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lpanel:lpanel:1.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023B1268-93B7-4ABC-B0D6-08B0F185BD04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034413.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15589/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13869",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034413.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15589/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:everybuddy:everybuddy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.3",
            "matchCriteriaId" : "5888A53D-35C5-473F-AD6B-0F6CF238835B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94473",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034422.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014110",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13865",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zataz.net/adviso/everybuddy-06062005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034422.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zataz.net/adviso/everybuddy-06062005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1395410C-F729-4095-BC00-C15D61509A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.93u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FA4A81-65AD-4888-9F06-15C8E21D4907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.94u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2286772D-80C5-496F-8052-596AF41E7E98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17115",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information via a phid parameter that is not an integer, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1395410C-F729-4095-BC00-C15D61509A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.93u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FA4A81-65AD-4888-9F06-15C8E21D4907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.94u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2286772D-80C5-496F-8052-596AF41E7E98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17119",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AFC6EE-41C7-4369-8BA1-DDBF8A744ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09F36C1-CBC0-489E-B62D-4590A2E5A4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F0067D-534A-4238-A244-D92A73845432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEC422E-49BC-41D4-9F71-B834D4108EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D854161-28AA-4386-B90A-97F9692CE37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A0FA49-99DC-4691-968F-6AEB76B74370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0C6A2C-992B-45A0-8E0C-1AE983881337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292A77C7-8C7B-4F3A-B7FD-3505A9F37E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77FC97A-3BB2-4AA5-B0D6-C0D1FBEA5FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9393EF-083A-4662-BC7A-89979C2B8546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DE6A4E-6BCE-499E-B017-1E0F8D1F65B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD90730F-BF26-46C5-83F8-039CD661C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E70F32-2F26-4836-8A4F-0A0B06EAD371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE506B8C-245E-4A7E-A24C-FABB1D4531EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934382C1-088A-4AEE-A71A-E9802AC9C1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9028E-1BDE-4BA0-A479-7A30020331D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D02E4C1-2BA7-4BC0-9C11-D0F74181DF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:stable_2003-08-29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5450893-4658-45F8-8512-379CEA43696C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:stable_2003-11-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02DACFF-7D0B-436C-A794-F123EFE97137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:stable_2003-11-17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258C9027-175D-48A8-830C-2D92CCCC6B3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=332231",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13861",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=332231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in start_lobby.php in MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFIG[MWCHAT_Libs] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appindex:mwchat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7",
            "matchCriteriaId" : "7AF4E273-D9B7-4704-82E2-3F36AD3CAA93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.appindex.net",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.defacers.com.mx/advisories/4.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/17087",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jun/1014090.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.appindex.net",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.defacers.com.mx/advisories/4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/17087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jun/1014090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "AC20AB39-705C-4F32-B735-5362D7690AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85A181D1-C261-4C29-BC8C-A7A815A63E2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101690-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101690-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Mortiforo before 0.9.1 allows users to access private forums via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortiforo:mortiforo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0",
            "matchCriteriaId" : "419A00E1-6CEA-4ACB-AC57-7B6A74719710"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=332807",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=332807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-07T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:32.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1855.  Reason: This candidate is a duplicate of CVE-2005-1855.  Notes: All CVE users should reference CVE-2005-1855 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in ObjectWeb Consortium C-JDBC before 1.3.1 allows local users to bypass intended access restrictions and obtain the cache results from another user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objectweb:consortium_c-jdbc:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B591639C-C9A5-49CA-9862-A64EFF148A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objectweb:consortium_c-jdbc:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462BACD-7AE2-4285-90DE-E9BE19F7C4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objectweb:consortium_c-jdbc:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AD5006-DDED-419F-BEC3-CD602D233880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objectweb:consortium_c-jdbc:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE8E622-98C6-475D-9FC0-6601B6BCFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objectweb:consortium_c-jdbc:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8695F64-E649-4F5B-B79D-25CE8C04FC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objectweb:consortium_c-jdbc:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA4F364-68B1-49FB-8919-FC051AB1DF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objectweb:consortium_c-jdbc:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53C8662-B754-495D-BDB4-5468CA7A46C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objectweb:consortium_c-jdbc:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B136A23-1E01-4F0F-9BDF-E55A49C04761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objectweb:consortium_c-jdbc:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7157064-B79C-41FA-B67F-6B3193E0EE03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15627",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014118",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject arbitrary web script or HTML, and hide activities in log files, via a \"<!--\" (HTML comment) in a session."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pragma_systems:pragma_telnetserver:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65ABD034-4218-4CCF-8857-EE0528E300C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014127",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rgod.altervista.org/pragma.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rgod.altervista.org/pragma.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0756",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13891",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11119",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/137-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/137-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LaunchServices in Apple Mac OS X 10.4.x up to 10.4.1 does not properly mark file extensions and MIME types as unsafe if an Apple Uniform Type Identifier (UTI) is not created when the type is added to the database of unsafe types, which could allow attackers to bypass intended restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NFS on Apple Mac OS X 10.4.x up to 10.4.1 does not properly obey the -network or -mask flags for a filesystem and exports it to everyone, which allows remote attackers to bypass intended access restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack on the socket file in an insecure temporary directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111833509424379&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.suresec.org/advisories/adv3.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111833509424379&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.suresec.org/advisories/adv3.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the (1) system cache folder and (2) Dashboard system widgets, which allows local users to conduct unauthorized file operations via \"file race conditions.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows local users to obtain the credentials."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.0.3a:a:*:*:*:*:*:*",
            "matchCriteriaId" : "6159C3FC-F82D-42BC-903F-2720FEF61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.0.3a:b:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E56419-E190-4249-8B9E-02DC20B5F2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4332FF7C-B625-4885-84F1-95A210391A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D0863DA2-AA27-4C91-B73A-649354FB2B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:a:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFAEE62-246B-4687-8B9A-A6C142D72308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:b:*:*:*:*:*:*",
            "matchCriteriaId" : "21946EC8-3327-4AE6-9A0D-09C1EBCC7683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:e-ftfl:*:*:*:*:*:*",
            "matchCriteriaId" : "36CAB36C-7E40-4DE2-BC52-CDF5BE5C1371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6733B36D-1AB1-4F61-A99C-E14343E41BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:a:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D05531-78EF-46C7-A4F8-9CB0B077C207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:b:*:*:*:*:*:*",
            "matchCriteriaId" : "46767ECB-FD9A-478B-B983-85F6281F7F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:c:*:*:*:*:*:*",
            "matchCriteriaId" : "7397E8D5-ECAE-4A89-8340-5576EE6551F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:d:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5BFC56-D652-4252-8E68-30DE40CC5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:e:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9A617E-75D2-45A6-ACF7-2A87A9803A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:f:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCBCB4F-5F8B-45CD-9007-DD0C7F90D59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:g:*:*:*:*:*:*",
            "matchCriteriaId" : "5657411D-2C13-406B-9113-2580062CA486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:h:*:*:*:*:*:*",
            "matchCriteriaId" : "D128B390-A46C-463E-9D97-D8AD0611191A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.0.3a:a:*:*:*:*:*:*",
            "matchCriteriaId" : "6159C3FC-F82D-42BC-903F-2720FEF61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.0.3a:b:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E56419-E190-4249-8B9E-02DC20B5F2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4332FF7C-B625-4885-84F1-95A210391A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D0863DA2-AA27-4C91-B73A-649354FB2B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:a:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFAEE62-246B-4687-8B9A-A6C142D72308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:b:*:*:*:*:*:*",
            "matchCriteriaId" : "21946EC8-3327-4AE6-9A0D-09C1EBCC7683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:e-ftfl:*:*:*:*:*:*",
            "matchCriteriaId" : "36CAB36C-7E40-4DE2-BC52-CDF5BE5C1371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6733B36D-1AB1-4F61-A99C-E14343E41BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:a:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D05531-78EF-46C7-A4F8-9CB0B077C207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:b:*:*:*:*:*:*",
            "matchCriteriaId" : "46767ECB-FD9A-478B-B983-85F6281F7F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:c:*:*:*:*:*:*",
            "matchCriteriaId" : "7397E8D5-ECAE-4A89-8340-5576EE6551F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:d:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5BFC56-D652-4252-8E68-30DE40CC5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:e:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9A617E-75D2-45A6-ACF7-2A87A9803A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:f:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCBCB4F-5F8B-45CD-9007-DD0C7F90D59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:g:*:*:*:*:*:*",
            "matchCriteriaId" : "5657411D-2C13-406B-9113-2580062CA486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:h:*:*:*:*:*:*",
            "matchCriteriaId" : "D128B390-A46C-463E-9D97-D8AD0611191A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.0.3a:a:*:*:*:*:*:*",
            "matchCriteriaId" : "6159C3FC-F82D-42BC-903F-2720FEF61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.0.3a:b:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E56419-E190-4249-8B9E-02DC20B5F2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4332FF7C-B625-4885-84F1-95A210391A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D0863DA2-AA27-4C91-B73A-649354FB2B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:a:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFAEE62-246B-4687-8B9A-A6C142D72308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:b:*:*:*:*:*:*",
            "matchCriteriaId" : "21946EC8-3327-4AE6-9A0D-09C1EBCC7683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:e-ftfl:*:*:*:*:*:*",
            "matchCriteriaId" : "36CAB36C-7E40-4DE2-BC52-CDF5BE5C1371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6733B36D-1AB1-4F61-A99C-E14343E41BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:a:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D05531-78EF-46C7-A4F8-9CB0B077C207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:b:*:*:*:*:*:*",
            "matchCriteriaId" : "46767ECB-FD9A-478B-B983-85F6281F7F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:c:*:*:*:*:*:*",
            "matchCriteriaId" : "7397E8D5-ECAE-4A89-8340-5576EE6551F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:d:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5BFC56-D652-4252-8E68-30DE40CC5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:e:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9A617E-75D2-45A6-ACF7-2A87A9803A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:f:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCBCB4F-5F8B-45CD-9007-DD0C7F90D59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:g:*:*:*:*:*:*",
            "matchCriteriaId" : "5657411D-2C13-406B-9113-2580062CA486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:h:*:*:*:*:*:*",
            "matchCriteriaId" : "D128B390-A46C-463E-9D97-D8AD0611191A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SilverCity before 0.9.5-r1 installs (1) cgi-styler-form.py, (2) cgi-styler.py, and (3) source2html.py with read and write world permissions, which allows local users to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silvercity_project:silvercity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.5_r1",
            "matchCriteriaId" : "06AF858F-8B87-423C-A8A4-F3591D3F7D99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=93558",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://secunia.com/advisories/15632",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014153",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-05.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=93558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://secunia.com/advisories/15632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Loki download manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) password field to default.asp or (2) cat parameter to catinfo.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:loki:loki_download_manager_catgory_version:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBCA976-2983-45F9-B39D-938639E277C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111826992711703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111826992711703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:c.j._steele:tattle:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5360FFA-F1F7-471B-BC8B-EB8BAE4059AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15582",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-06/0057.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-06/0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ProductCart Ecommerce before 2.7 allows remote attackers to inject arbitrary web script or HTML via the error parameter to techErr.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:early_impact:productcart:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0173EF36-E777-4866-AD17-043FB0F5BB83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv16-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014129",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://echo.or.id/adv/adv16-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:13.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate has been revoked by its Candidate Numbering Authority (CNA) because it was initially assigned to a problem that was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0395",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:15.397",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate has been revoked by its Candidate Numbering Authority (CNA) because it was initially assigned to a problem that was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0751",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:19.007",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate has been revoked by its Candidate Numbering Authority (CNA) because it was initially assigned to a problem that was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1763",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5595E484-647C-4F85-94AB-5A4D55CD766B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*",
            "matchCriteriaId" : "C7EAAD04-D7C4-43DE-B488-1AAD014B503E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D2E2EF3C-1379-4CBE-8FF5-DACD47834651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13903",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10182",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vincent_hor:calendarix_advanced:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63CB486-A534-41B8-A586-167FC54DCD70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/May/1014083.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/May/1014083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to (1) cal_week.php, (2) cal_cat.php, or (3) cal_day.php, or (4) id parameter to cal_pophols.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vincent_hor:calendarix_advanced:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63CB486-A534-41B8-A586-167FC54DCD70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/May/1014083.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.calendarix.com/download_advanced.php",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.calendarix.com/download_basic.php",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/16971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/May/1014083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.calendarix.com/download_advanced.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.calendarix.com/download_basic.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/16971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95436CD6-8E9C-4F89-9683-0650F6167027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC910CFD-9F20-473E-BC2D-64A7A3C14404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "849782E0-9F26-411F-82B9-88B5FC4F4C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD87DB3-45C2-4091-A83B-25E427563C70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15562",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.05.31a.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.05.31a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yvesglodt:i-man:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9",
            "matchCriteriaId" : "5D1E666A-38FD-41C2-910A-3C3FF4A25311"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15558/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=331422",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20857",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/15558/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=331422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier allows remote attackers to execute arbitrary PHP code via the form parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:popper:popper:1.41_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB1F847-9079-4D5A-B00A-654403C0A4DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034408.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034425.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111801389729155&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15584",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-06-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034425.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111801389729155&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-06-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an \"input check\" that \"is not implemented properly.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFF99BC-5E1D-4ADA-8BE7-07F7761C972C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA805CAF-A678-43A9-932D-EE35DBCCA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18331C39-0ACE-4651-9D9F-1533AAD7C58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5093F703-13AA-4EEC-8659-C5EB29A54AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-06/0010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111782257601422&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-06/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111782257601422&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary code via (1) an FTP command with a large string followed by the RMD command with a long string or (2) a globbing (\"*\") character followed by a long string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crob:crob_ftp:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37A0A50-4466-424F-9D2D-4B9E5CBA6B67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034426.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-06-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034426.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-06-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary files via a filename containing a .. (dot dot) in a .dz archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "B73B34CC-62EE-4646-A38A-7CA4AD29E6A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAB1BA3-4771-44B6-9B9B-26FDEAEE7A03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75409E0-6C93-4405-8812-2F82C560D78A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE08C442-B4A1-4D1D-82A7-C5E73C81F379"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A6C225-8668-4DCD-A52F-0891F00F2535"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE20FDC0-C67A-4E82-909E-1C9CE148E4DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D6844D2-C51D-46E4-9241-145BC3BBC620"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2890D170-B012-4DE7-93F9-5178D0796616"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EED703B-61C9-452A-AC2E-49C2A6787F3C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D94608-D5D7-4DD5-A457-A9580D08672D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D13B39D-E460-4ECA-A83E-276727E87D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "845AD62C-BBC9-4DF6-9848-D2662F399A73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B747D7F-21B7-461A-B8C0-24F464379FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22AFBFA7-B9A2-4980-B88E-51D7770E4B00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:evan_wagner:dzip:2.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A14C51B-3566-4555-82D2-366CA68E3903"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=93079",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-03.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=93079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrary PHP code via certain inputs that are injected into a template (.tpl) file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.6",
            "matchCriteriaId" : "424436A1-A2C9-4B6B-90B1-4A491EED73C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111773528322711&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15594",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/17030",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111773528322711&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/17030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.addresses temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giptables:giptables_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "6F4A4C8A-381F-47C1-8C33-F36C60A40BFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034423.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/giptables-05222005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034423.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/giptables-05222005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lutel:lutelwall:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.98",
            "matchCriteriaId" : "D8812038-592D-4D5D-96C1-A75A451DC4AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://firewall.lutel.pl/download/0.98/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034424.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/15647",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15665",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-10.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014112",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13863",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zataz.net/adviso/lutelwall-05222005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://firewall.lutel.pl/download/0.98/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034424.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zataz.net/adviso/lutelwall-05222005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code via the YAPIG_PATH parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.93u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FA4A81-65AD-4888-9F06-15C8E21D4907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.94u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2286772D-80C5-496F-8052-596AF41E7E98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1395410C-F729-4095-BC00-C15D61509A07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot dot) in the dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1395410C-F729-4095-BC00-C15D61509A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.93u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FA4A81-65AD-4888-9F06-15C8E21D4907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.94u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2286772D-80C5-496F-8052-596AF41E7E98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13877",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script or HTML via (1) the phid parameter or (2) unknown parameters when posting a new comment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1395410C-F729-4095-BC00-C15D61509A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.93u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FA4A81-65AD-4888-9F06-15C8E21D4907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.94u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2286772D-80C5-496F-8052-596AF41E7E98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13875",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13876",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15600/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050530_yapig.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the Sun Solaris C library (libc and libproject) in Solaris 10 allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101740-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101740-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer underflow in a loop counter variable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.9.3797",
            "matchCriteriaId" : "85974BBB-6030-4982-9CFC-388EBFE2FE3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111816939928640&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111817881214343&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://securitytracker.com/id?1014145",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13880",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111816939928640&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111817881214343&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://securitytracker.com/id?1014145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot_news.php, which triggers an infinite loop, or (2) direct requests to unknown scripts, which reveals the web document root in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.3",
            "matchCriteriaId" : "F0021F07-C78D-4184-AE60-492D9F81E63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/15603",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014114",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0697",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/15603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FlatNuke 2.5.3 allows remote attackers to obtain sensitive information via invalid parameters to certain scripts, which leaks the web document root in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35353BC-BB2E-4702-BC8D-9809617199F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15603",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014114",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing the code into the Referer header of an HTTP request, which causes the code to be injected into referer.php, which can then be accessed by the attacker."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35353BC-BB2E-4702-BC8D-9809617199F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/15603",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014114",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0697",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/15603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the border or back parameters to (1) help.php or (2) footer.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35353BC-BB2E-4702-BC8D-9809617199F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15603",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014114",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in thumb.php in FlatNuke 2.5.3 allows remote attackers to read arbitrary images or obtain the installation path via the image parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35353BC-BB2E-4702-BC8D-9809617199F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15603",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014114",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in FlexCast Audio Video Streaming Server before 2.0 has unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexcast:flexcast_audio_video_streaming_server:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A95AEA0-155D-4B3B-BF4B-C9B0A8C53BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexcast:flexcast_audio_video_streaming_server:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88CC45C-499D-470A-A03D-FF5AB6AFD7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexcast:flexcast_audio_video_streaming_server:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE73C3D4-F3C4-4843-983A-002499C1B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexcast:flexcast_audio_video_streaming_server:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5311ACBA-A548-416F-B678-4EE65F4215A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexcast:flexcast_audio_video_streaming_server:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F793B5-808F-425E-90A9-18C52FBB180E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexcast:flexcast_audio_video_streaming_server:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C015411-5C33-46FD-BB11-DE634176EF97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The passthrough functionality in phpThumb.php in phpThumb() before 1.5.4 allows remote attackers to read files that are not images."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpthumb:phpthumb:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8365E4F2-922A-4C93-B8D0-ACE96AFEC1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpthumb:phpthumb:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348CF4A7-FBDD-4F97-BECA-7D296ED81B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpthumb:phpthumb:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAF8CC7-EA9D-41E9-853E-B03EBA0A6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpthumb:phpthumb:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BFD744-3549-4869-B8E1-F6BC9FAA5826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15534",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=330469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=330469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion Elite Warriors: Vietnam, allows remote attackers to cause a denial of service (infinite loop) via a zero-byte UDP packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rakkarsoft:raknet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.33",
            "matchCriteriaId" : "FD127B48-BF12-4F44-BB9D-3A5AC5894D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/rakzero-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111809312423958&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/rakzero-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111809312423958&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sawmill before 7.1.6 allows remote attackers to bypass authentication and (1) gain administrative privileges or (2) add a license."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "A07AAC45-78A1-48B2-9C47-D8E6A8D6CE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F21B42F-56C2-422C-BFC8-701EDDCBE9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B544D35C-3793-4656-92FC-F8BE72AC98F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A84B18-C5EA-4038-8123-1C9C2511BBCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68176849-3128-4112-BCF0-577253552456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE9E422E-7EB8-407D-9DC4-4CCB83FAC834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7887413C-0F1B-4EBC-8E97-8ECC9EB8336D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.networksecurity.fi/advisories/sawmill-admin.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sawmill.net/version_history7.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.networksecurity.fi/advisories/sawmill-admin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sawmill.net/version_history7.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) the username in the Add User window or (2) the license key in the Licensing page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "A07AAC45-78A1-48B2-9C47-D8E6A8D6CE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F21B42F-56C2-422C-BFC8-701EDDCBE9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B544D35C-3793-4656-92FC-F8BE72AC98F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A84B18-C5EA-4038-8123-1C9C2511BBCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68176849-3128-4112-BCF0-577253552456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE9E422E-7EB8-407D-9DC4-4CCB83FAC834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7887413C-0F1B-4EBC-8E97-8ECC9EB8336D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.networksecurity.fi/advisories/sawmill-admin.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sawmill.net/version_history7.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.networksecurity.fi/advisories/sawmill-admin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sawmill.net/version_history7.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to read other users' mail and perform operations on arbitrary directories via .. sequences in the (1) SELECT, (2) CREATE, (3) DELETE, and (4) RENAME commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-post_corporation:spa-pro_mail_atsolomon:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8AF0E8-0447-40CF-B68F-D8BD59E2466E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15573",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.org.sg/vuln/spa-promail4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.org.sg/vuln/spa-promail4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in JiRo's Upload System (JUS) 1 allows remote attackers to execute arbitrary SQL commands via the password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:jiro:jiro_upload_system:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00C7C85-5E77-4EC5-BE6E-0B779C91CBD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/16969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.under9round.com/jus.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/16969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.under9round.com/jus.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.227:*:windows_file_servers:*:*:*:*:*",
            "matchCriteriaId" : "75093819-5663-4478-A291-60FF71D0258B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.228:*:windows_file_servers:*:*:*:*:*",
            "matchCriteriaId" : "AD53B19B-64C8-4D05-81E0-770EEAE55D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.335:*:windows_file_servers:*:*:*:*:*",
            "matchCriteriaId" : "7D53F90C-00DB-4A12-9AD6-DB6917D0E034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.227:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E101D150-B268-43AA-9876-469DF471DFC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.228:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A10BAE-B162-4276-8B08-8E449D9B282D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.325:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3AAC32-1911-4955-B1B1-CF7B26BEA3F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111817777430401&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111817777430401&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / (slash) or leading \\ (backslash) in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perception:liteweb:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D6E7557-2BF9-4F66-B214-A6C84C9AC19C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a \"</pre><!-\" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting (XSS) vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:software602:602lan_suite:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FA3D1E-F79A-4E39-8EC5-AFF85F11AE51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/602_en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://rgod.altervista.org/602_en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service (news loss)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70FC4AE9-66D0-4A09-AF02-73EFE62772F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230C6937-A9E2-4500-9C2C-6A6E3BBE150D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E900B416-9B01-4613-973D-A904B8C9D2BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E515ECA1-5A4B-4DF4-8912-DF479283CDD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976D590D-3482-42D2-B9CE-553723A533D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C1A830-A27D-4D04-9DDD-E2926E832C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D734DEC-8409-439C-B76B-47032F7796EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E92501E-E432-418E-94B5-BBB38793DAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C119D2-23BA-4C0C-80BA-75BBB1B3C373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DD952E-FB54-435C-808D-08E96A64D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684BAA0C-12A9-46A8-BFDE-1C758E2CA2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C23B76E-D54B-4944-B234-D52605FA2E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F51E17B-30E3-4C0E-87C7-511B25A68C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BEE300-A405-444A-B38B-774AAD6BCB0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D91BECC-F972-4670-9BEC-C889CCC0553D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F7A354-945A-41C1-9D1F-BB1DB2032A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F698F052-7272-433F-863F-434C7DB69E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126D9064-EF0E-4B80-8CDD-BD2700A281D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371BCB59-10FF-43E3-BB1A-181417D2A048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8CC32F-EEC6-4C95-AD70-ED5F3B420912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5518EA6-16E4-4C31-AE99-482A449FE68A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13D056D-2CE4-48AD-BE4E-E6CF619DA627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECED1753-31FE-4AEF-AAD8-D4A1ED15C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DE9416-49F7-426D-8D93-BB89472A1633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D902627D-0A79-4DA4-A5CB-37FF503A7779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD877780-C5E4-4422-BAC1-7DDE16C8A8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84530B7-1BE6-4F97-A948-654AA02C1F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27E4B77-98DC-41CE-B41F-276F482BC81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D003C1-99A0-4559-86FB-F7128566FA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2A8403-4317-4C05-A5A8-25667C25B71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B2FCBD-A22A-449D-B0BD-F9E8C9EC55C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.9.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2DAE94-B05F-4944-B7E5-D1276D8DDA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50E48B1-6C82-4BF6-84CB-D4E7F097F32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafnode:leafnode:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF74467-F937-4AA2-92A7-EC2019600B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://leafnode.sourceforge.net/leafnode-SA-2005-02.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://leafnode.sourceforge.net/leafnode-SA-2005-02.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xmysqladmin 1.0 and earlier allows local users to delete arbitrary files via a symlink attack on a database backup file in /tmp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmysqladmin:xmysqladmin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFCE550-7E52-4B14-8145-F81D29C49194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=93792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111833993822553&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/xmysqladmin-05292005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=93792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111833993822553&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/xmysqladmin-05292005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_community_blog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C85BCF-92B3-4D21-BD75-86D373950E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_community_blog:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D266D44-2F49-4A97-BA46-585ED827D6EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111833601302752&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00078-06072005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111833601302752&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00078-06072005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to an editentry, replyentry, or editcomment action, or (2) the mid parameter to an aboutme action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_community_blog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C85BCF-92B3-4D21-BD75-86D373950E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_community_blog:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D266D44-2F49-4A97-BA46-585ED827D6EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111833601302752&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00078-06072005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111833601302752&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00078-06072005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the (1) albums or (2) delimg actions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invisioncommunity:gallery:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "C0B937E7-778B-4D41-A5CC-B9F25961E600"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111834146710329&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00079-06092005",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111834146710329&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00079-06092005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the comment parameter in an editcomment action or (2) the rating parameter when voting on a photo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA45453-5C5F-4730-9343-01CAF0F84705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB69839-3DBF-4C69-94F9-A482A683C641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111834146710329&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00079-06092005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111834146710329&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00079-06092005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:darryl_burgdorf:webhints:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F552432F-8EDB-4507-BB78-E486DD83A9F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111842893001406&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111842893001406&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in utilit.php for Ovidentia Portal allows remote attackers to execute arbitrary PHP code via the babInstallPath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cantico:ovidentia:fx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C440DF9-FE45-43EC-AB0D-3A474C59E9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014149",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1267",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B50919-7C67-416D-BA2F-50747CDBE08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.4a6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950C6522-3C7F-4E81-8952-246FFE1072C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CC000D-857D-4E12-82E6-7F8168B463EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45BACEA9-8C28-4DB6-96F7-D91B06C8EEF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45083B9F-95CC-4EB7-9591-2146084CBBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3214AA7-1EB2-4EC8-96AA-2A9985A5EB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3985632-2246-499E-9F9B-5A416D3AB4F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD63F004-83A9-4CB3-A26D-E82589ED7FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF65E89-04B7-49F2-ADCE-0BD0A313949E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76F042D-6D75-4BD3-8530-ED9E760B94A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB530211-6557-4E90-B659-0AC633DEDF00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836F7F79-8ADD-4A4F-BE45-0237206DD055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C1376C-68BC-4EBB-9B94-0E65728983A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C793D15A-646A-477F-A91A-945D5148A9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbl:tcpdump:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB08C13-4146-461A-A35E-D450AAB195E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3528DABD-B821-4D23-AE12-614A9CA92C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9E661D58-18DF-4CCF-9892-F873618F4535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D69B83-4EF3-407B-8E8C-DE623F099C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "F1D16230-3699-4AAA-9CAE-5CAF34628885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C720DACC-CF4B-4A00-818C-8303A7D7DED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67735E5-E43E-4164-BDB2-ADC6E0288E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB70F82-52BB-4D0D-9A24-9AF67278466D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15634/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17118",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-854",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-June/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-505.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430292/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13906",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0028/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159208",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15634/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-June/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-505.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430292/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0028/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol (CDP) messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A7AAE4-CA60-46BD-B0BB-71BB39536F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111842833009771&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sn-20050608-8021x.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fishnetsecurity.com/csirt/disclosure/cisco/Cisco+802.1x+Advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jun/1014135.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111842833009771&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sn-20050608-8021x.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fishnetsecurity.com/csirt/disclosure/cisco/Cisco+802.1x+Advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jun/1014135.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The eTrace_validaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etrace_host parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD84FB-8CF3-4FD4-AB18-DCD3FF3A2F5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111868460811287&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13934",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111868460811287&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205BD88C-C6E9-43CA-8697-A3AA538D86E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111852830111316&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=59378&release_id=334036",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111852830111316&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=59378&release_id=334036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell eDirectory 8.7.3 allows remote attackers to cause a denial of service (application crash) via a URL containing an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029ADE6D-6761-4196-847C-A0EFB3A06341"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034536.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097766.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-33-advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034536.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097766.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-33-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.11 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.11_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F44CBEE-07CF-4D4B-BD89-9816624D4451"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111868634003167&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111868634003167&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "File Upload Manager allows remote attackers to upload arbitrary files by modifying the test variable to contain a value of '~~~~~~' (six tildes), which bypasses the file extension checks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:file_upload_manager:file_upload_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED113AF1-7061-4D9B-90D5-F63DCDF356F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111868578006615&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111868578006615&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a modified base64-encoded file parameter and (1) read arbitrary files via the \"view\" action or (2) delete arbitrary files via the del action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adam_mmedici:file_upload_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8502674-5E40-4317-AF88-07F267BCD140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-06/0116.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111868578006615&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-06/0116.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111868578006615&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jammail.pl in jamchen JamMail 1.8 allows remote attackers to execute arbitrary commands via shell metacharacters in the mail parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jammail:jammail:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9713CBFC-605A-4694-AB5F-908D73CA754B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014175",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the installation of Adobe License Management Service, as used in Adobe Photoshop CS, Adobe Creative Suite 1.0, and Adobe Premiere Pro 1.5, allows attackers to gain administrator privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:creative_suite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9C6894-B756-4189-AE82-B234449925DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0820E48-12AD-4112-BC83-D81045D64AA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:premiere:1.5:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "0A0C3110-C713-497B-AC49-4CCE35E7FD49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331688.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331688.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SecurityAgent in Apple Mac OS X 10.4.1 allows attackers with physical access to bypass the locked screensaver and launch background applications by opening a URL from a text input field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dashboard in Apple Mac OS X 10.4.1 allows remote attackers to install widgets via Safari without prompting the user, a different vulnerability than CVE-2005-1933."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13694",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1760",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:sysreport:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25BB04C-A95D-41FF-9895-D25CAC16B9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:sysreport:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652AF84-7082-4D60-B0B2-27872D5E32B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:sysreport:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673E4B0E-2CF0-4168-AF61-120F6B9AF28B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "409E324A-C040-494F-A026-9DCAE01C07F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
            "matchCriteriaId" : "6474B775-C893-491F-A074-802AFB1FEDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "84A50ED3-FD0D-4038-B3E7-CC65D166C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*",
            "matchCriteriaId" : "777F9EC0-2919-45CA-BFF8-78A02537C513"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014181",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-502.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13936",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A623",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-502.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1933",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-06-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dashboard in Apple Mac OS X Tiger 10.4 allows attackers to execute arbitrary commands by overriding the behavior of system widgets via a user widget with the same bundle identifier (CFBundleIdentifier), a different vulnerability than CVE-2005-1474."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/983429",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www1.cs.columbia.edu/~aaron/files/widgets/",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/983429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www1.cs.columbia.edu/~aaron/files/widgets/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as demonstrated using a SPNEGO token with a constructed bit string during HTTP authentication, and a different vulnerability than CVE-2003-0818.  NOTE: the researcher has claimed that MS:MS04-007 fixes this issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "BCC5E316-FB61-408B-BAA2-7FE03D581250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*",
            "matchCriteriaId" : "90CFA69B-7814-4F97-A14D-D76310065CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*",
            "matchCriteriaId" : "AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.phreedom.org/solar/exploits/msasn1-bitstring/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phreedom.org/solar/exploits/msasn1-bitstring/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the web server for the ESS/ Network Controller for Xerox Document Centre 240 through 555 running System Software 27.18.017 and earlier allows attackers to \"gain unauthorized access.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_220:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8590CB4-6437-4198-8D91-3AC1D8E89B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_230:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E394086F-8CFD-403D-A531-0C3FFE934565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_240:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2101594-5D83-4C12-B5D5-9203FE2FD720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_255:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D2D9C0-DC09-48E6-96BB-75C2556F0B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_265:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6DAC793-6BAB-4816-849F-0450E8822161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_332:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C4FC0A-5D67-411F-A759-EEEA7FDECF4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_340:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64ECBC0D-65C3-4536-B5CA-6192DBBE4630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_420:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5D7F1E-54BE-4133-AC2B-106F6E2EC712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_425:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10F5ABC-3189-4FD8-ACB7-DA59375CB50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_426:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31341E77-3A7F-489F-AB60-F2773DD204F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_430:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56B4998-07E7-465B-8C27-1A68A9840A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_432:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A00971-F133-4AEB-B518-28779855A386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_440:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DED98FB-1A2C-45A1-A295-766326F24A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_460:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDFD7441-5745-487A-9BA0-A1E78D6AC0C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_470:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732B68E0-F4FD-41B4-8877-72A296A66547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_480:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB6AB90-FB39-465F-8AF5-7C12C2181DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_490:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312C9D9D-A26E-4FAF-A598-A6D29D6BA672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_535:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945E57F1-7164-4B75-A135-E05062FF0A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_545:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540F4384-01AA-48E2-8677-5BF444D7B0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_555:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A805752-05C3-4CAA-99C7-4C28EF979D67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12783",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_003.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/14659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_003.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in InteractivePHP FusionBB .11 Beta and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username, which is not properly handled by the insertUser function, or (2) the bb_session_id value in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interactivephp:fusionbb:11_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D41C6A-11C3-4562-B0B2-D10C7B4A3879"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gulftech.org/?node=research&article_id=00081-06132005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.interactivephp.com/misc/CHANGELOG.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00081-06132005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.interactivephp.com/misc/CHANGELOG.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:telnet_client:5.1.2600.2180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76385A91-A9A9-49F8-BB10-1214C387C12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED81A044-8A7B-4EEF-A4B3-EA49D76FAAED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://idefense.com/application/poi/display?id=260&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/800829",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-504.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-562.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://idefense.com/application/poi/display?id=260&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/800829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-562.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0563",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL (\"jav&#X41sc&#0010;ript:\") in an IMG tag."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en el componente Microsoft Outlook Web Access (OWA) en Exchange Server 5.5 permite que los atacantes remotos inyecten scripts web o HTML arbitrarios mediante un mensaje de correo electrónico con una codificación de JavaScript: \"jav & # X41sc & # 0010; ript : \") en una etiqueta IMG."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F9C143-4734-4E5D-9281-F51513C5CAAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15697",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=261&type=vulnerabilities",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13952",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-029",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=261&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1205",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://idefense.com/application/poi/display?id=260&type=vulnerabilities",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15690/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014203",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/800829",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13940",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-033",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1132",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A605",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A784",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://idefense.com/application/poi/display?id=260&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15690/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/800829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1206",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the \"Server Message Block Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15694",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/489397",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-165A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-027",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1142",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A259",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A467",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/15694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/489397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-165A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1207",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15696/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-028",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1255",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A721",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/15696/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1208",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a \"ms-its:\" URL in Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "207B8A6E-5158-4636-91D8-38021B91CB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB2E520-56D9-4B3F-99BA-EBC04AC30E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "61E9C554-757E-4912-A3F6-6F1DB17483AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAFE154-7058-40A1-9806-22476A7DF0BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "394F16B8-C29F-445A-AA47-AA82F78CFA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A2852D-64BE-40B1-8811-02EBDC1E044E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0062.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15683",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/851869",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13953",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-165A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-026",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1057",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A381",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A463",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0062.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/851869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-165A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1211",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014201",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/189754",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13941",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-165A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-025",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1115",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1239",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A258",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A770",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A782",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1014201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/189754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-165A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1212",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de búfer en Microsoft Step-by-Step Interactive Training (orun32.exe) permite a los atacantes remotos ejecutar código arbitrario a través de un archivo de enlace de marcadores (extensión.cbo, cbl o.cbm) con un campo de usuario largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8208AFC9-0EFC-4A90-AD5A-FD94F5542885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4168AE-D19E-482E-8F2B-3E798B2D84E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E149E7-B748-44F6-BB55-68D5BF87AF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "207B8A6E-5158-4636-91D8-38021B91CB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB2E520-56D9-4B3F-99BA-EBC04AC30E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "61E9C554-757E-4912-A3F6-6F1DB17483AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAFE154-7058-40A1-9806-22476A7DF0BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "394F16B8-C29F-445A-AA47-AA82F78CFA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A2852D-64BE-40B1-8811-02EBDC1E044E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:second_edition:*:*:*:*:*",
            "matchCriteriaId" : "61A91537-7EB8-4A0D-8D86-ECA710F9650B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://idefense.com/application/poi/display?id=262&type=vulnerabilities&flashstatus=true",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15669/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014194",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13944",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-031",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1224",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://idefense.com/application/poi/display?id=262&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15669/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1213",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "589E5F7F-5429-4050-8C0D-F7F8D18DEB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85FD3557-956D-4A96-8AA5-5FD9DB87FD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D45F2775-A10B-4834-A2EF-7498EEAB155D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014200",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=263&type=vulnerabilities",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/130614",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13951",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-030",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1088",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A167",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A989",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1014200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=263&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/130614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1214",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page."
      }, {
        "lang" : "es",
        "value" : "Microsoft Agent permite a los atacantes remotos falsificar contenido de Internet de confianza y ejecutar código arbitrario disfrazando las indicaciones de seguridad en una página web maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8208AFC9-0EFC-4A90-AD5A-FD94F5542885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4168AE-D19E-482E-8F2B-3E798B2D84E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E149E7-B748-44F6-BB55-68D5BF87AF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "207B8A6E-5158-4636-91D8-38021B91CB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB2E520-56D9-4B3F-99BA-EBC04AC30E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "61E9C554-757E-4912-A3F6-6F1DB17483AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAFE154-7058-40A1-9806-22476A7DF0BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "394F16B8-C29F-445A-AA47-AA82F78CFA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A2852D-64BE-40B1-8811-02EBDC1E044E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:second_edition:*:*:*:*:*",
            "matchCriteriaId" : "61A91537-7EB8-4A0D-8D86-ECA710F9650B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15689",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13948",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-032",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1194",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A682",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A906",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/15689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1215",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80744BD9-85A9-4E33-8C35-59C8C112AC62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15693/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014193",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13956",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-034",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1145",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/15693/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1216",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80744BD9-85A9-4E33-8C35-59C8C112AC62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15693/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014193",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/367077",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13954",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-034",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A468",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/15693/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/367077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1937",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2004-0718."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15601",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101952-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-777",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-51.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "security@debian.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=296850",
        "source" : "security@debian.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100007",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10633",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A637",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A759",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/15601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101952-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-51.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=296850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-14T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using \"%2e\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finjan_software:surfingate:7.0_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0366DE-9BEF-419F-9583-78EC08504BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finjan_software:surfingate:7.0_sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD9A3A5-045B-422D-B666-8768F45A002F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111877410528692&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15711",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111877410528692&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1266",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spamassassin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C070003F-04FC-428B-9569-F4D33932BF30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spamassassin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65BD8410-D228-4851-850F-1045F8CA5C28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spamassassin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E575B18E-C18F-410B-B271-FF4D892BF4C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94722",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/spamassassin-announce/200506.mbox/%3c17072.35054.586017.822288%40proton.pathname.com%3e",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-17.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-736",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:106",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-498.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13978",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vuxml.org/freebsd/cc4ce06b-e01c-11d9-a8bd-000cf18bbe54.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10901",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/spamassassin-announce/200506.mbox/%3c17072.35054.586017.822288%40proton.pathname.com%3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vuxml.org/freebsd/cc4ce06b-e01c-11d9-a8bd-000cf18bbe54.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the \"XML External Entity vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.adobe.com/support/techdocs/331710.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13962",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331710.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  Adobe told us this issue did not affect the Linux version of Adobe Reader.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bitrix Site Manager 4.0.x allows remote attackers to obtain sensitive information via direct request to (1) subscr_form.php or (2) dbquery_error.php, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8FAB07-B0A4-499E-A9F9-5135ED70FAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964A32F7-699D-4096-8AF7-CDB6EBCA8FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A233BC-68DA-4988-A840-B26B40294D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE66137-DED6-4EF3-90BC-29331C9281C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C04D4F3-1E3D-436A-A8CF-F362DC854733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD84101B-84E9-44C5-9E5A-BEE676F12427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A4DF4-871F-4E20-9AA1-2725BC1CDB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D469F51-611B-47F1-A5AC-4CE99E944DFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111885652331100&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17348",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/17376",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111885652331100&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/17376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in start.php in Bitrix Site Manager 4.0.x allows remote attackers to execute arbitrary PHP code via the _SERVER[DOCUMENT_ROOT] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8FAB07-B0A4-499E-A9F9-5135ED70FAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964A32F7-699D-4096-8AF7-CDB6EBCA8FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A233BC-68DA-4988-A840-B26B40294D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE66137-DED6-4EF3-90BC-29331C9281C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C04D4F3-1E3D-436A-A8CF-F362DC854733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD84101B-84E9-44C5-9E5A-BEE676F12427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A4DF4-871F-4E20-9AA1-2725BC1CDB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D469F51-611B-47F1-A5AC-4CE99E944DFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111885605913761&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15726",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bitrixsoft.com/sitemanager/versions.php?module=main",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.bitrixsoft.com/support/forum/read.php?FID=10&TID=1872",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/17341",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111885605913761&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bitrixsoft.com/sitemanager/versions.php?module=main",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.bitrixsoft.com/support/forum/read.php?FID=10&TID=1872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/17341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "show.php in McGallery 1.1 allows remote attackers to connect to arbitrary databases, or gain sensitive information by triggering an error, via a modified host parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E57D8B-BFA8-46D7-BE9D-B85F1A901945"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111885559100231&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15727",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111885559100231&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E57D8B-BFA8-46D7-BE9D-B85F1A901945"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111885505600482&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15727",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111885505600482&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sortby or (2) filelist parameters to the category action (category.php), or (3) pages parameter in the viewall action (viewall.php)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EB588E-FC2B-4E10-86F5-33C2758BEED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111885787217807&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00082-06142005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.phparena.net/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.phparena.net/pafiledb_patch/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111885787217807&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00082-06142005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.phparena.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.phparena.net/pafiledb_patch/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the formname parameter (1) in the login form, (2) in the team login form, or (3) to auth.php, (4) select, (5) id, or (6) query parameter to pafiledb.php, or (7) string parameter to search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BADFC3-51C0-4881-B5DF-81BBA02F0EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4CCDF7-5945-4478-9661-217F823DE9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC5717A-E248-406F-A281-C5B2F5368127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.0_beta_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E807335-6C70-4A19-A692-A7DE325FC213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EB588E-FC2B-4E10-86F5-33C2758BEED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111885787217807&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00082-06142005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.phparena.net/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.phparena.net/pafiledb_patch/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111885787217807&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00082-06142005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.phparena.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.phparena.net/pafiledb_patch/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) in the action parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BADFC3-51C0-4881-B5DF-81BBA02F0EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4CCDF7-5945-4478-9661-217F823DE9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC5717A-E248-406F-A281-C5B2F5368127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.0_beta_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E807335-6C70-4A19-A692-A7DE325FC213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EB588E-FC2B-4E10-86F5-33C2758BEED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111885787217807&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00082-06142005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.phparena.net/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.phparena.net/pafiledb_patch/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111885787217807&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00082-06142005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.phparena.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.phparena.net/pafiledb_patch/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_rating parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E99D52-609D-4631-AC22-70B07229D887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729C14E1-B56D-49E1-81F6-5FA9B4FDC477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1a:a:*:*:*:*:*:*",
            "matchCriteriaId" : "21CD2A4A-6D6D-447A-9305-891B9F084735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EE93EF-D273-4DEC-A85C-76290FEE40A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "993587DE-DA24-4D52-B190-AB236327D687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7E14F4-A0E9-4014-8C3E-E6DCF3393D3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mamboforge.net/frs/download.php/6153/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111885974124936&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15710",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mamboforge.net/frs/download.php/6153/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111885974124936&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code via a long ViRobot_ID cookie (HTTP_COOKIE)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:virobot_linux_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDAD7E7-135D-4EE2-8C5F-641D6647F749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111880273631392&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0614a%5D.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.globalhauri.com/html/download/down_unixpatch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5TP0C1FG1I.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111880273631392&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0614a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.globalhauri.com/html/download/down_unixpatch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5TP0C1FG1I.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1265",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13893",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10466",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/137-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/137-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1269",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1EE775-471F-4D9F-9635-41CB581168D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E56639E-2F96-4110-8846-0EA887D2967B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FDCAE1-0B5D-449F-A83A-5028E7701109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E955A141-DAEB-40EA-BE35-A5EED928E030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94CDB8A-7120-41C6-95AF-5DBAD74F3204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA529226-9252-41EE-8543-692F3119CF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7366C749-E27C-422C-BFE0-DCC4B4D9C8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2E8C61-B01A-482A-9B8D-0072AB6BB7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E40E9A-950B-4D6E-A748-5F76F7B97AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4FF2E49-7561-461A-98BD-4778C6764020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4168D220-61A9-4E9F-A5A8-4832822E35EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253631B3-8A0C-48DC-851A-F5A6AB490BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1266BD64-E19D-4686-9E00-42CC9AF94756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BCA03-A187-432B-B2B3-40DE99A9986C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92762951-6F9E-426D-8157-55C65A561417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AFDEF5-5E42-4BF6-8EC6-FE7FCD4DD4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4B3DA2-9ECB-454D-8775-9571B158007F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A041E262-E36F-44C3-B83B-2E79653B74EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333D0BA1-7676-417D-BB92-AAA1AAED2D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF449EC2-A6F2-405F-BEE7-0516E092E6F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "840C5668-D951-4A62-B555-EB3D91A08B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC715625-C4E7-49AC-9F3E-7306114878D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8834643-F682-4FC1-93DE-BE4754E993AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DC59A0-4BD8-42AC-B2E0-BFC32FCE7396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC19763-0085-4633-A370-FECB86F90C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7A6C84-66CB-45E5-972B-CFF6D82D5767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5414E26C-C4BD-4E88-A9F4-05312F303BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A50DB77D-DF16-4596-826B-C30F2F0CDC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF490A8-67ED-4330-A230-98CB60A16B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8143534B-FADA-496F-9252-7D8F27407464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A65A06-A2D9-4ACD-A19A-5CC0D6636139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:0.82.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3EF25C4-A89D-4FBC-8EBE-89B502369A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BC7CF5-118A-4127-BA07-749179FA5A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BB3FC7-C33B-4FA6-84F9-5894DFAB7B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE70BCCA-A025-4F93-A773-8D4FF482540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93EBDBD2-D687-4680-998A-3C89477EC7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B13807-C799-4589-9546-2680D122C5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F91275-123E-412C-AA15-B2010D656D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2842937-2275-4C1C-85FE-9C1246B2A06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478EA6B8-99D9-4378-8839-AC85F281F630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6F9FB-C9DA-44BB-9AF7-E8D828788873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA41A48-DCDE-4DB9-BE38-FC255A712478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EFC670-8B21-4ABC-B656-989FEF3FE7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7051327C-FB24-45C8-BF62-BD88DA838911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9260E414-FB80-4872-B158-F9FA77733794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gaim.sourceforge.net/security/?id=18",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-734",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:099",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-518.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13931",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A744",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9544",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/139-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://gaim.sourceforge.net/security/?id=18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-518.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/139-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains via a redirect."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.01",
            "matchCriteriaId" : "A7BA2C82-9ECB-4682-A7EA-9DDE08C17B8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15008",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-4/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13970",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/15008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-4/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Opera 8.0 Final Build 1095 allows remote attackers to inject arbitrary web script or HTML via \"javascript:\" URLs when a new window or frame is opened, which allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.01",
            "matchCriteriaId" : "A7BA2C82-9ECB-4682-A7EA-9DDE08C17B8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15411",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-5/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/15411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-5/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file permissions for that ACL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:afp_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC963DD-FFF6-47CB-872C-4F099F5BC499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the legacy client support for AFP Server for Mac OS X 10.4.1 allows attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:afp_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC963DD-FFF6-47CB-872C-4F099F5BC499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1769",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in (1) the URL or (2) an e-mail message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C44025-C79D-4791-8EF6-3E26786E194E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111893827711390&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-756",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:108",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-595.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2005-06-15",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163047",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111893827711390&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-595.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2005-06-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The eping_validaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping_host parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED52F96-48B9-4111-AAEB-4E9190114802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e107plugins.co.uk/news.php",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111835539312985&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111868460811287&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e107plugins.co.uk/news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111835539312985&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111868460811287&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF (\"%0d%0a\") sequences in the (1) products_id or (2) pid parameter to index.php or (3) goto parameter to banner.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8C352-B248-4FA3-8F3B-E3557E47145F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94D34C1-A7BB-4F02-82E7-B708B33901E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2_ms1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95097990-E687-4417-94DF-D6E9A7CC48AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2_ms2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C382022-5D4A-419E-9A6F-14A38094C187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111842744205117&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111936255011735&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00080-06102005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111842744205117&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111936255011735&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00080-06102005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ (slash dot slash) before each .. (dot dot) sequence in the URL, which results in an incorrect directory depth count."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pico_server:pico_server:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205BD88C-C6E9-43CA-8697-A3AA538D86E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111852830111316&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=59378&release_id=334036",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111852830111316&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=59378&release_id=334036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "singapore 0.9.11 allows remote attackers to obtain sensitive information via a direct request to (1) admin.class.php, (2) any .tpl.php file in templates/admin_default/, or (3) any .tpl.php file in templates/default/, which reveal the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBD4DF1-69B9-44FE-BE54-C06E0A0310EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111868634003167&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111868634003167&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields to clients.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:0.97.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23AC1428-278D-413A-981D-D01AAABF9D0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv15-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv15-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configuration.php, which leaks the information in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:0.97.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23AC1428-278D-413A-981D-D01AAABF9D0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv15-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wgmdev.com/jira/browse/CERB-170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv15-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wgmdev.com/jira/browse/CERB-170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL in the LOCAL_PATH parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C9072B-3924-484F-B4D6-BA7AD54900F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE12AB0C-B029-4F47-86CA-B675F9389E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6140BA1F-CF72-4C84-969E-7D34B760AF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B661F2A1-0CD3-40B3-82CB-7DEF8C6482D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB8CDBC-F6F6-4184-B467-A6677715861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB1D793-93A8-4FD7-8CE4-61DE726C3CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19503309-E7BF-4C5E-9A66-D24912C61D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:3.1.8_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698EC49F-1145-4BBA-96D9-8DC158F0392C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:3.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F711E6-CCF1-44C1-96D0-E359E4C81162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:3.2_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8EA76D-34E7-4236-9540-96032CC93935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://list.broadpool.com/pipermail/siteframe-announce/2005-June/000020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15657",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014150",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://list.broadpool.com/pipermail/siteframe-announce/2005-June/000020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ProductCart Ecommerce before 2.7 allow remote attackers to execute arbitrary SQL commands via the (1) idcategory parameter to viewPrd.asp, (2) lid parameter to editCategories.asp, (3) icd parameter to modCustomCardPaymentOpt.asp, or (4) idccr parameter to OptionFieldsEdit.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:early_impact:productcart_ecommerce:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "9E768AC4-D4D6-4414-BD9F-D0418CD067A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv16-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014129",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://echo.or.id/adv/adv16-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec pcAnywhere 10.5x and 11.x before 11.5, with \"Launch with Windows\" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B543CCFB-954B-4CCF-8BB7-E64DAFA0C1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E5DA00-5FDC-42DE-955B-E977E62A2B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0C7336-52DC-4E0D-9F6F-9B401B0A93EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96BE1D8-29D3-41F1-9CE9-66D5D8013C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDF9CE6-93A7-49EC-B6B5-428C7517E902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAB70F5-1B1B-426B-A1F9-6D91D0A160B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0A6A97-1EFF-41C0-AAAA-B357C4C801F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014AA70B-942F-4ADE-9EEF-4F5204438268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.06.10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13933",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.06.10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in InteractivePHP FusionBB .11 Beta and earlier allows remote attackers to include arbitrary local files via \"..\" sequences in the language parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interactivephp:fusionbb:11_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D41C6A-11C3-4562-B0B2-D10C7B4A3879"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gulftech.org/?node=research&article_id=00081-06132005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.interactivephp.com/misc/CHANGELOG.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00081-06132005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.interactivephp.com/misc/CHANGELOG.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows applications to assign permissions to themselves and gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:5.0:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "AB323619-76BA-4DCF-9613-4C963C235D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:5.0_update1:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "90A293D3-9A69-4B33-82CE-22A7515819E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112870351003598&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870351003598&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/61",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870351003598&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870351003598&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07, as used in multiple products and platforms including (1) HP-UX and (2) APC PowerChute, allows applications to assign permissions to themselves and gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "E2D500E0-A80D-4C9E-94F0-6B59AFEB186A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_01:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "BA17272A-FCA5-420D-8724-35F15190C1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_02:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "6D6E25CB-6C06-43D0-949E-BB3FEE886CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_03:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "B1DD35E9-9FED-49D3-8343-B9EF2C8A9C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_04:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "23F6CB66-75D5-472C-A6CD-8598376A065A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_05:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "641FA125-3979-4F12-9764-ADF06E243248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_06:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "9F5D9D33-F7D9-4A82-BA32-800A265B16CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2_07:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "BB7658E7-5BDE-4C2A-93FF-CC78C562BF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:5.0:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "AB323619-76BA-4DCF-9613-4C963C235D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:5.0_update1:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "90A293D3-9A69-4B33-82CE-22A7515819E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112861772130119&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112861772130119&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112992075412844&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112992075412844&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17272",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/56",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101799-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_32_java2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2150",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112861772130119&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112861772130119&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112992075412844&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112992075412844&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101799-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_32_java2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter to index.php, or the (2) site_id, (3) nom, (4) email, or (5) commentaire parameters in commentaires.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:annuaire:1two:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "98EC36FA-F6BE-4C81-AA37-6ED9A747EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:annuaire:1two:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CE97A3-885C-43CF-9F78-6BB2380E208B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hackisknowledge.org/Advisories/Annuaire%201Two%20v1.0/Annuaire%201Two%20v1.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hackisknowledge.org/Advisories/Annuaire%201Two%20v1.0/Annuaire%201Two%20v1.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ultimate PHP Board (UPB) 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid (zero) id parameter to (1) viewtopic.php, (2) profile.php, or (3) newpost.php, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6_gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493FB9DA-346A-4984-B00D-639DE0ED2E6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111893777504821&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15732",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111893777504821&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information on registered users via a direct request to db/users.dat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111893777504821&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15732",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111893777504821&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:enterasys:vertical_horizon-2402s:2.05.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A586095-7F5F-4F21-9C0A-D48B0AA1E8B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:enterasys:vertical_horizon-2402s:2.05.08.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783F3FDE-73B0-4F83-B6C9-0E60D4CCF2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:enterasys:vertical_horizon-2402s:2.05.09.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "450784C8-8AB5-485D-864E-611FDCD709F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:enterasys:vertical_horizon-2402s:2.05.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A586095-7F5F-4F21-9C0A-D48B0AA1E8B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:enterasys:vertical_horizon-2402s:2.05.08.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783F3FDE-73B0-4F83-B6C9-0E60D4CCF2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:enterasys:vertical_horizon-2402s:2.05.09.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "450784C8-8AB5-485D-864E-611FDCD709F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111893777504821&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13975",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111893777504821&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter to article.php, (2) uname parameter to user.php, (3) siteid parameter to viewforum.php, (4) username parameter to newtopic.php, the (5) secid or (6) artid parameter to sections.php, (7) siteid parameter to index.php, or (8) sid parameter to friend.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socialmpn:socialmpn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08549E25-3E3A-4CDE-A3C9-31C86A428046"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014214",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08003947-A4F1-44AC-84C6-9F8D097EB759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15723",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101768-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101768-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cool_cafe_chat:cool_cafe_chat:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F2A3BB6-7988-4D7E-85EB-95D6D6F2B085"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014221",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "modifyUser.asp in Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cool_cafe_chat:cool_cafe_chat:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F2A3BB6-7988-4D7E-85EB-95D6D6F2B085"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajax-spell:ajax-spell:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8133E0A5-D412-4BD2-A33A-DEF5D37D22BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajax-spell:ajax-spell:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1E2A80-4D7E-4ADB-A593-8298C8AC06BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajax-spell:ajax-spell:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95572287-F0E8-45A6-B1EB-E930AEFF054C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajax-spell:ajax-spell:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DC4A79-2550-412E-8123-CC84972EC113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajax-spell:ajax-spell:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23A1C66-94D1-48CE-B21A-EF1EE44C238F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajax-spell:ajax-spell:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AC678F-68AB-4EB3-A303-7E41456D2047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajax-spell:ajax-spell:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94A4921C-1B12-4A52-BA7C-D54AE14B4070"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15737",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=335556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.broken-notebook.com/spell_checker/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13986",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=335556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.broken-notebook.com/spell_checker/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HTML via the (1) show_course parameter to browse.php, (2) subject parameter to contact.php, (3) cid parameter to content.php, (4) l parameter to inbox/send_message.php, the (5) search, (6) words, (7) include, (8) find_in, (9) display_as, or (10) search parameter to search.php, the (11) submit, (12) query, or (13) field parameter to tile.php, the (14) us parameter to forum/subscribe_forum.php, or the (15) roles[], (16) status, (17) submit, or (18) reset_filter parameters to directory.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160F70B7-4686-47EF-8510-1BDBC89FB280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5_rc_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6816BB3F-3D13-486B-BBAE-EBF6BB0AE5BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/06/atutor-multiple-variable-cross-site.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13972",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/06/atutor-multiple-variable-cross-site.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ref parameter to login.php, (2) id or (3) page parameter to viewtopic.php, id parameter to (4) profile.php, (5) newpost.php, (6) email.php, (7) icq.php, or (8) aol.php, (9) t_id parameter to newpost.php, (10) ref parameter to getpass.php, or (11) sText parameter to search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111893777504821&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15732",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111893777504821&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a \"%.\" (percent dot), which reveals the installation path or (2) with a % (percent) before a filename, which reveals the contents of the file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jboss:jboss:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14AE1D88-4D53-4635-AC43-51820C00F85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jboss:jboss:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31D78C7-D325-47D6-B355-FA63F953A012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jboss:jboss:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BE627C-07FA-4442-A225-286FA03BC202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jboss:jboss:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16472A3-0497-47E1-B9CE-A04B0C272231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jboss:jboss:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B79BCF-F7F4-4D0B-AC18-ECECB97588A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jboss:jboss:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B13CCE-4B1A-45C8-B8E7-3A3CFAB328F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jboss:jboss:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E25C736-C574-4BA1-9CB1-060FA2FF09C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0424.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111911095424496&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15746",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440641/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00597967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00597967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0424.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111911095424496&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440641/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00597967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00597967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a trailing %00 (null)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:webserver:1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9408BC-32C2-4F56-B8AB-B5C5B658565F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:webserver:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99CF38D0-9CE7-4166-9E50-528D159A7FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:webserver:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11008F6-D5A9-46D4-BBB4-1813977BB072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:webserver:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B8A3D1-AB3F-418E-91AF-5DBBD7750438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:webserver:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DA8476-D330-4462-99F4-7C5DCC1B2513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:webserver:1.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE17FA92-81D8-4557-B1E7-26998CD3ED54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111927717726371&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15740",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17375",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://yaws.hyber.org/yaws-1.55_to_1.56.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111927717726371&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://yaws.hyber.org/yaws-1.55_to_1.56.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting (XSS) vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:iplanet_messaging_server:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB46EE9-8B54-4C14-8850-C7D5B6C62BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_messaging_server:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45B83C-6879-463D-B04F-ADB841BC2F94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101770-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101770-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002291.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002294.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.gnupg.org/pipermail/gpa-dev/2005-May/002284.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002294.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.gnupg.org/pipermail/gpa-dev/2005-May/002284.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vipul Razor Agents (razor-agents) before 2.70 allows remote attackers to cause a denial of service via (1) certain \"unusual HTML messages\" or (2) \"certain malformed headers\" such as Content-Type."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vipul:razor-agents:2.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B5D33A-E613-4EFE-A3DC-7570E131B0DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vipul:razor-agents:2.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1D1313-750F-4915-9D0F-4EE6381D9AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vipul:razor-agents:2.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7904AEA-DA5E-40E3-94A8-38E3F23D4DFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=95492",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-17.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=7520323&forum_id=4259",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_35_razor_agents.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13984",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=95492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200506-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=7520323&forum_id=4259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_35_razor_agents.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amarok:web_frontend:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A3D06C-3714-477B-B63E-155D60E5F284"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15736",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=335719",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=335719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A47E800-FD01-4243-9C99-73A5E8E36664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B212CBB3-19FB-4272-B47A-C5B42E1C7BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC6DC68-A191-491E-9AD6-C8826514A9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612A604C-8ECA-4A3D-8585-04072E03DEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F3AF9A-4EE4-433D-A120-A8F28B284E08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A739B30-66E4-4BAC-BDED-04EC5CDE5FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B99B27EF-0F67-4C91-8321-9D7E58450E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D5DDAC-5FA4-4610-90A8-ADCF23E68446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E18825-FE21-4B76-87F6-994F0DE17EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7759E75B-C7C8-4270-A1FE-BD6DB4470F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84EDFD-F543-4BD2-BE38-F99E669DFB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2E72E-7E5E-4492-AA8A-1D62ACE0E2AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B534C774-B798-4020-A19F-C79F7E196780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xampp:apache_distribution:1.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED27B4D0-D9EA-45DB-A94E-2A481CD35BE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15735",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=335710",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13983",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=335710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D53EB23-4971-408E-A43F-009698C403A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F763B05-25F3-42B6-A90E-2454910B6AB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4609B0F-3F5C-464E-92B1-ED6AF3C4FB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4174:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D899BF-F90C-43AD-8C17-CF59EE116BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1DD40C-E044-45D7-919E-6DC0749FEF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAD90A9-B5AA-4D6A-9207-2A302BD2774C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F669C0-D20D-49B1-A486-6DE6FF8A186F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555367EF-249E-4310-8A06-E59947D33576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B53EE99-ACFE-42FD-BA9A-379913E4D329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1CD60F-847D-41D1-96C2-993E894F3EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376EA812-8D27-4321-96CC-36848FE8856D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1067.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571BAEAC-E97D-4127-8C44-00206714587A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1067.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D17C351-CC27-4F3C-8024-0D7461534797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1127.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA711692-B9F2-4898-998D-7916C6572EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1151.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B4C81C-2706-461F-9516-A4CB055FE865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1152:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183AE69A-BFCA-4AA4-AB08-18189AF7EE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1152.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2301AB87-1080-4C9E-81EC-91040AF882A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B312041E-57BE-48EF-B1FD-8F8B85D5AC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B969FA8-F5F8-4C34-A99F-1630EAD4EA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD59ED0-F1FD-42BD-9078-3A603FC4B899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15FFFB18-9F1D-4630-BD13-0F34A1D6E5D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E569BF-72BD-49DE-8946-E575C677F06B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014273",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276604.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/277429.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=272&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/492105",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/17624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14022",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-180A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276604.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/277429.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=272&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/492105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/17624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-180A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CD4ECA-7609-446F-A3FB-3E6ACA42ABC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5631A575-5CA5-4421-B75A-073DE829E247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801E19E5-2CE7-41B3-9727-C4F3222BE23B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A90354-05CE-44CB-B658-3B80795001BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A51BD2-A54A-4D3D-B0DA-57055110BF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FEEF99-F54D-4542-AF3A-E94D976420A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DAF74C-8188-4F29-ACDA-ACEE3B02CB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAC175D-2893-45B6-9B4E-AD35571FF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1430A5-5C85-45FF-9E9F-2FEF9EABC603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94221B90-8F50-426D-87C7-3A1ABABAF354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70CF2A2-AE61-4A48-B6A7-108358D55A5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034618.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15752",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.edgewall.com/repos/trac/tags/trac-0.8.4/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory-012005.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.edgewall.com/repos/trac/tags/trac-0.8.4/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory-012005.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in \"various plugins\" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitrary commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nanoblogger:nanoblogger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.1",
            "matchCriteriaId" : "728EF18E-1989-42BD-AA5E-97310C6CF9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nanoblogger:nanoblogger:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE3BA4DE-2EDA-4B9A-8FB8-4C7796355958"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nanoblogger.sourceforge.net/downloads/nanoblogger-3.2.3.tar.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15754",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17392",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://nanoblogger.sourceforge.net/downloads/nanoblogger-3.2.3.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1992",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents \"security protection\" using handlers, which allows remote attackers to execute arbitrary commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A4185F-1CE1-48D1-B967-01A96527417B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/5237",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315064",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/684913",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-543.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14016",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www2.ruby-lang.org/en/20050701.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10819",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/5237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/684913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-543.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.ruby-lang.org/en/20050701.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1993",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7FE987-2B49-4FD5-A5A0-35129D4E60C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6060C8CB-1592-479E-86AD-AC180F855BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DAA88C-BADD-405A-9E66-5B0839595A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D5E3B7-5377-4CA8-BA0D-056870CB717E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C11931-B594-43EC-9698-7152B1DF8CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976B5923-1BCC-4DE6-A904-930DD833B937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5452DF1-0270-452D-90EB-45E9A084B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD12E6-F92E-4371-ADA7-BCD41E4C9014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FDF4FB-06FA-4A10-A3CF-F52169BC8072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B29018-B495-482A-8FF7-66821A178F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38718561-70C7-4E0D-9313-87A5E82ED338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D057064A-9B34-4224-97BA-4D5840A92BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C297DC-69B1-4BE6-A5EF-D320BD0CA968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4C1FFB-F6AA-4DED-9C54-DCB274F59A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338A92AC-92D2-40BF-9FAC-884AF6F74D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DB5610-03CE-425E-8855-70D5787029FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DFC86C-7743-4F27-BC10-170F04C23D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5170421-BA0C-4365-9CD6-BD232EA08680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5909AAA4-4AF9-4D23-87C5-5D7787909B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2170CFD0-2594-45FB-B68F-0A75114F00A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C07744-CAE8-44C6-965E-2A09BAE1F36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17E0E59-C928-49AB-BAA7-4AE638B376D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294FC65B-4225-475A-B49A-758823CEDECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6156B085-AA17-458C-AED1-D658275E43B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C898BE7-506D-49DA-8619-F86C7A9FE902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6419309-385F-4525-AD4B-C73B1A3ED935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F7E821-2908-47F1-9665-E9D68ECC242F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7D2832-B654-406E-AA34-B3BD1D6F0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5688D95-89EF-4D2E-9728-2316CAC3CBE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15744",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-735",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/17396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-535.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/402741",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425974/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13993",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.sudo.ws/sudo/alerts/path_race.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161116",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21080",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11341",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-535.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/402741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425974/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sudo.ws/sudo/alerts/path_race.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) ci, (2) d, or (3) m parameter to index.asp, or the (4) bi parameter to blog_comment.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ublog:reload:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C53306A-E04B-4B5F-92AC-1C74878A5BCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv18-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111928552304897&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv18-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111928552304897&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uapplication:ublog_reload:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B11651-AB52-4766-951A-B7C3D9186FCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv18-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111928552304897&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv18-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111928552304897&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the id parameter in a Question action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafaq:1.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318E281C-98DB-4A81-B969-3A493B1FD83D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111928841328681&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00083-06202005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111928841328681&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00083-06202005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) id parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafaq:1.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318E281C-98DB-4A81-B969-3A493B1FD83D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111928841328681&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00083-06202005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111928841328681&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00083-06202005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup of the database including usernames and passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafaq:1.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318E281C-98DB-4A81-B969-3A493B1FD83D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111928841328681&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00083-06202005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111928841328681&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00083-06202005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"upload a language pack\" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafaq:1.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318E281C-98DB-4A81-B969-3A493B1FD83D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111928841328681&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00083-06202005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111928841328681&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00083-06202005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B33AE8-75A8-4454-A1A3-33F4034015FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4394768-37BE-4FC5-A65A-28C0295A33B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC52A018-43E8-4D86-A84C-81064B6ACD74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC66D8D-01B8-4312-A311-ACAB43699071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E892FB52-DB84-422F-ABB6-29AB95726138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC5C591-69F3-411F-A53A-72D17687CA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92D81000-1A7C-4465-9EE2-E651AED09F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4.2_stable_48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B555B5-E66F-4E37-A5BC-E04CBDFA4F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09258895-32E6-49AC-8C96-D2838A0C8E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4F9F98-08A2-430B-BC96-B30DCA165F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D546C9-674B-4683-9EC5-18156CE04B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E915DEA-1BA9-429D-97D5-CA3D37C969B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/13996",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3000_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BE2649-D823-486B-8F6C-4B8128EC2795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A512328-2FD0-4B1D-9327-A13A0BCE9C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3020_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D50FE2-A4E6-4EF4-A91C-88FB0AF6CCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6548F964-B8EE-4B39-87CF-99743D41C42C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08810E6-33B6-45FF-91C7-EED10DC023EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD1A1AC-980F-428E-8BAF-0FC821014868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923949D1-06EC-462F-A3BC-FCAB448042A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901B1838-7169-41E5-80EF-29BB680BF937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAEAA5F-0A98-48B7-8012-9B9909243135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB38834B-E4AB-43F4-888B-14B088C95594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F8059B-3968-4D63-B1B3-74E545C918D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701CDA0D-F932-4251-B484-8F20F0AE9003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E674AA43-905E-40E0-A70F-77D05C62C18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F7F019-A0A4-49CD-BB28-24BF7725AC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175CD875-3402-4B06-A3FA-7DFFCBB44056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9017BB-5848-4361-ABB9-C69FB3AB90FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "207034E8-35F7-4E78-A3FC-C86D20EB8D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C544E523-15E5-4CE5-8113-53454F5D9973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09F6EBD-C3FC-4680-BE31-A766D863237D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8C3FDA-D321-4202-A8EA-6C1464558A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B68705AB-A133-401F-9F41-64594E071816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9092680-E154-4EAB-A2D5-B692073F894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC9764-5BF5-449F-9200-5569C13F8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12F2AAC-DB5B-4C28-86C5-F59490362E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071F52AD-D59B-4673-BCBE-112B94D3EB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80709CB0-D386-4C4F-B3EE-7A0501FD7248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFAF42-B894-4D62-A9CF-3349A43191AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE5BB7F-D8B4-441B-9F45-56F622EEAA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B87A7EC-DC23-4075-8C4A-2317FF34BDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AC18E3-D12B-489D-9D95-6C9210235FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB969E-8BE9-46E0-B8AA-5057E320F1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36291ADE-3D5A-4E49-8BA7-B71CAAA226B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D953DA9F-B54E-4941-85BE-48933C98DB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E298AD-26AC-4E1D-83D8-5C2016CC6559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DAF71-5763-44D8-AD1E-5ADE8BC15120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35B6FA9-E504-4CE3-B171-815291A812CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA54782-93A8-47BE-863D-89CA3678BF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F66A10-246D-447B-941F-F1175684F0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82435757-D892-4298-9176-5EC1FEC93037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3005_concentrator_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17196F00-9D7A-4AF6-AE1E-EA2E450A8ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nta-monitor.com/news/vpn-flaws/cisco/VPN-Concentrator/index.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13992",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nta-monitor.com/news/vpn-flaws/cisco/VPN-Concentrator/index.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers to read arbitrary files and directories via the folder parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue-collar_productions:i-gallery:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA950E69-EBF8-43F3-A6CC-C0709CB4DCE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111936111630489&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111936111630489&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in folderview.asp for BlueCollar iGallery 3.3 allows remote attackers to inject arbitrary web script or HTML via the folder parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue-collar_productions:i-gallery:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA950E69-EBF8-43F3-A6CC-C0709CB4DCE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111936111630489&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111936111630489&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the \"My info\" page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortibus:fortibus_cms:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DDCA742-4708-4A04-9DFA-E6B0D69D5406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.3f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7845DD1D-3CF4-485C-8CDD-049F54A123FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C85D59-E219-4118-B278-BA0FBA83894C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523C2A5D-E218-4F94-954A-6137B1441920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF388286-EFA3-42E4-9A31-76A0EF4BB44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C4B544-6D42-45AA-9F1D-938EBF759457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C37130-9D35-4A92-8922-A4F95D134CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25441A88-4E14-4A4F-99CA-CF38D42D8CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B3FE44-B082-41CC-908C-8A6F9B9F78E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB4AF4A4-EF69-41DA-988E-455D870ED13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "888CFA1F-F74C-4806-984E-BB93D5E29E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B059AE6A-7C24-423E-B66F-06D9C0486C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA4262A-F7DD-45C0-ADE3-CAEF2ECF3D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telnetd:telnetd:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B22002A2-A1E9-468A-8569-1331515A2659"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15718",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-24.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_40_heimdal.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pdc.kth.se/heimdal/advisory/2005-06-20/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_40_heimdal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pdc.kth.se/heimdal/advisory/2005-06-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-21T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62D76BA1-A72B-450F-A515-3CC72107982C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111938068428037&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14015",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111938068428037&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-21T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Fortibus CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via (1) the username or password to logon.asp, (2) WeeklyNotesDisplay.asp, or (3) the Search page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:fortibus:fortibus_cms:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DDCA742-4708-4A04-9DFA-E6B0D69D5406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15762",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the (1) User Name field (sUserName parameter) or (2) Password (sPassword parameter)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup:professional_2005_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD89F35-42C2-4281-8F33-3E9EBB401A16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/secunia_research/2005-13/advisory/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.corsaire.com/advisories/c050323-001.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=268&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/forums/shwmessage.aspx?ForumID=20&MessageID=7699",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-13/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.corsaire.com/advisories/c050323-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=268&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/forums/shwmessage.aspx?ForumID=20&MessageID=7699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the config[library_path] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.6d",
            "matchCriteriaId" : "5FAA989F-CB32-4398-8A19-0494CF421BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F66D31-8CEF-46F5-98EB-3EABA326E003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88AB7EF7-FD9D-4854-8B18-9BB214E9C03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97372003-62C9-4981-8E8E-22C1D19333F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421F4C7D-A2C4-47CC-B663-4E12CD130D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A04BE7-5893-45F1-9F9A-B869E3963EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59471E38-C230-43D5-9533-5B2CB327DB39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D3E0EF-80B7-49E0-9DAF-3752E08AD64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D46F997-5FE7-477A-A161-4E682579124A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B5B1BE-1B7D-4338-A189-C5D401AF1857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD527D7-C79F-42D5-9CB7-B5CA9B242BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D099FE2B-13CA-447E-B5E7-75A1D407A971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BBF3F3-18C0-49C5-99B0-80FCD133532B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1896A7C-6938-494D-90A5-E10BC91EB37D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CD9A10-32F6-45A4-8793-87E0C2E78675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EF1390-E1B5-45B0-8732-A7004351E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3D7996-E56A-4B72-864E-EC6037028351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000AE712-7298-4CA1-930B-4DF372671EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD258DF-CB70-484C-9A6F-F9ABDB012C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FD0F4A-4811-4B4A-AF03-8FBC63A99CE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cacti.net/release_notes_0_8_6e.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=265&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cacti.net/release_notes_0_8_6e.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=265&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.6d",
            "matchCriteriaId" : "5FAA989F-CB32-4398-8A19-0494CF421BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F66D31-8CEF-46F5-98EB-3EABA326E003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88AB7EF7-FD9D-4854-8B18-9BB214E9C03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97372003-62C9-4981-8E8E-22C1D19333F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421F4C7D-A2C4-47CC-B663-4E12CD130D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A04BE7-5893-45F1-9F9A-B869E3963EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59471E38-C230-43D5-9533-5B2CB327DB39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D3E0EF-80B7-49E0-9DAF-3752E08AD64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D46F997-5FE7-477A-A161-4E682579124A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B5B1BE-1B7D-4338-A189-C5D401AF1857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD527D7-C79F-42D5-9CB7-B5CA9B242BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D099FE2B-13CA-447E-B5E7-75A1D407A971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BBF3F3-18C0-49C5-99B0-80FCD133532B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1896A7C-6938-494D-90A5-E10BC91EB37D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CD9A10-32F6-45A4-8793-87E0C2E78675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EF1390-E1B5-45B0-8732-A7004351E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3D7996-E56A-4B72-864E-EC6037028351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000AE712-7298-4CA1-930B-4DF372671EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD258DF-CB70-484C-9A6F-F9ABDB012C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FD0F4A-4811-4B4A-AF03-8FBC63A99CE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cacti.net/release_notes_0_8_6e.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=267&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cacti.net/release_notes_0_8_6e.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=267&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.6d",
            "matchCriteriaId" : "5FAA989F-CB32-4398-8A19-0494CF421BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F66D31-8CEF-46F5-98EB-3EABA326E003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88AB7EF7-FD9D-4854-8B18-9BB214E9C03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97372003-62C9-4981-8E8E-22C1D19333F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421F4C7D-A2C4-47CC-B663-4E12CD130D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A04BE7-5893-45F1-9F9A-B869E3963EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59471E38-C230-43D5-9533-5B2CB327DB39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D3E0EF-80B7-49E0-9DAF-3752E08AD64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D46F997-5FE7-477A-A161-4E682579124A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B5B1BE-1B7D-4338-A189-C5D401AF1857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD527D7-C79F-42D5-9CB7-B5CA9B242BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.6.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D099FE2B-13CA-447E-B5E7-75A1D407A971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BBF3F3-18C0-49C5-99B0-80FCD133532B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1896A7C-6938-494D-90A5-E10BC91EB37D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CD9A10-32F6-45A4-8793-87E0C2E78675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EF1390-E1B5-45B0-8732-A7004351E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3D7996-E56A-4B72-864E-EC6037028351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000AE712-7298-4CA1-930B-4DF372671EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD258DF-CB70-484C-9A6F-F9ABDB012C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FD0F4A-4811-4B4A-AF03-8FBC63A99CE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cacti.net/release_notes_0_8_6e.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=266&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cacti.net/release_notes_0_8_6e.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=266&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to default.asp, (2) iData parameter to detail.asp, (3) iMem parameter to members.asp, (4) iCat parameter to cat.asp, (5) offset parameter to members_listing_approval.asp, or (6) iChannel parameter to channels_edit.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duportal_pro:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ADAC10-EE62-4217-8A16-75A60214BBF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv19-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111945219205114&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv19-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111945219205114&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iSub parameter to sub.asp, (3) iSub parameter to detail.asp, (4) iPro parameter to review.asp, iCat parameter to (5) catEdit.asp, (6) catDelete.asp, (7) productEdit.asp, or (8) productDelete.asp, or (9) iType parameter to type.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duamazon_pro:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88339F89-2844-474B-8671-E7229D04F0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duamazon_pro:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC82CB07-2F3F-4B01-9BED-ABF42748592B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv19-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111945219205114&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv19-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111945219205114&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iPro parameter to detail.asp, (3) iSub parameter to sub.asp, (4) iCat parameter to catEdit.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dupaypal_pro:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19A6A59-0CA1-4A86-8D0F-36C53A036C95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv19-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111945219205114&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv19-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111945219205114&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) iMsg parameter to messages.asp, iFor parameter to (2) post.asp or (3) forums.asp, or (4) id parameter to userEdit.asp.  NOTE: vectors 1 and 3 were later reported to affect version 3.0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duforum:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDF05BF-1997-4D2C-9DA4-B13EA7E7495E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv19-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111945219205114&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453330/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv19-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111945219205114&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453330/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-22T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) iState parameter to default.asp or (2) iPro parameter to edit.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duclassmate:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFBEB88-3B49-4853-85EA-E902460A6500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv19-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111945219205114&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv19-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111945219205114&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAD90A9-B5AA-4D6A-9207-2A302BD2774C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555367EF-249E-4310-8A06-E59947D33576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B969FA8-F5F8-4C34-A99F-1630EAD4EA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15FFFB18-9F1D-4630-BD13-0F34A1D6E5D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014273",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276605.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/277429.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=269&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/584505",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-180A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276605.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/277429.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=269&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/584505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-180A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) \"Error Status\" value, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:windows_server:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndIncluding" : "10.0",
            "matchCriteriaId" : "4617C98D-7BD0-4FC7-B8DE-897ABD0F6619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:netware:*:*",
            "versionStartIncluding" : "9.0.4019",
            "versionEndIncluding" : "9.1.307",
            "matchCriteriaId" : "575E4939-6B49-4153-B2F6-65D98E6912E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014273",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276533.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/277485.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=270&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=271&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276533.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/277485.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=270&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=271&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-28T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:24.463",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1766.  Reason: This candidate is a duplicate of CVE-2005-1766.  Notes: This duplicate occurred due to insufficient coordination across three separate parties.  All CVE users should reference CVE-2005-1766 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shtool:shtool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "FBE1C224-293C-4FF0-AE4D-A992FF7BC95A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=93782",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111955937622637&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-08.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=93782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111955937622637&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1766",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.5",
            "matchCriteriaId" : "6D9AC918-CE98-4172-B2D6-E0791AA78638"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16981",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://service.real.com/help/faq/security/050623_player/EN/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-826",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=250&type=vulnerabilities&flashstatus=true",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_37_real_player.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-517.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-523.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9509",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://service.real.com/help/faq/security/050623_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=250&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_37_real_player.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-517.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-523.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.seul.org/or/announce/Jun-2005/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=96320",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15764/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-18.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.seul.org/or/announce/Jun-2005/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=96320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15764/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) 9.0 4367 through 10.0 rev. 5484 allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "357967B9-D397-459B-A71A-FEBE0BCB8B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAD90A9-B5AA-4D6A-9207-2A302BD2774C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555367EF-249E-4310-8A06-E59947D33576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A5E1B0-A0CA-4F40-92A0-2F214C6D8032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B969FA8-F5F8-4C34-A99F-1630EAD4EA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94533F3-8954-4772-92A6-7E3EE29D3162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15FFFB18-9F1D-4630-BD13-0F34A1D6E5D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111954711532252&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seer.support.veritas.com/docs/276606.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-232.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111954711532252&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seer.support.veritas.com/docs/276606.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-232.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 (6.0.12.1040 through 1069), RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "19BC5A59-BCBD-4859-8329-B4974D43DB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6051B4-1B15-44C0-B2CD-5504E68C60F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F65BDA-393F-4274-B193-B578255DB013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111955853611840&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://service.real.com/help/faq/security/050623_player/EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111955853611840&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://service.real.com/help/faq/security/050623_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-28T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Just another flat file (JAF) CMS before 3.0 Final allows remote attackers to obtain sensitive information via (1) an * (asterisk) in the id parameter, (2) a blank id parameter, or (3) an * (asterisk) in the disp parameter to index.php, which reveals the path in an error message.  NOTE: a followup suggests that this may be a directory traversal or file inclusion vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:1.0:final:*:*:*:*:*:*",
            "matchCriteriaId" : "7233D90E-9C8F-43C6-A6C3-651C85111EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09897FF-DEBF-4F45-9799-85E522A20453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "921B3B7A-2DD2-4752-8F59-A59D0F1422E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:2.0:final:*:*:*:*:*:*",
            "matchCriteriaId" : "195DFF55-936D-434C-B5BD-64C6781A6128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1CD654-B4E4-4202-8779-153920BD67E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E29BFC2-4E95-4FB7-B03E-08A48E75374F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A34C40C-E46A-4A11-A867-588085D90669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:3.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "0FDEF8C5-7AD0-460B-9DE0-86776EA856F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:3.0:rc_fixed:*:*:*:*:*:*",
            "matchCriteriaId" : "E5BA6123-6D48-4A81-B7C6-F06914F231A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADC17A3-8115-4DAB-82E2-3860E2ED780E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv20-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111954840611126&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111990004028512&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv20-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111954840611126&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111990004028512&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d-bus:d-bus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.22",
            "matchCriteriaId" : "2E12FC2F-BB32-456F-9231-C2CE75E03701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.auscert.org.au/render.html?it=5156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:105",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-102.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/144-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.auscert.org.au/render.html?it=5156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-102.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/144-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040_1069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0BE7CF-D281-46F7-90B5-B469BE10E9A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://service.real.com/help/faq/security/050623_player/EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/050623_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via \"default settings of earlier Internet Explorer browsers\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "19BC5A59-BCBD-4859-8329-B4974D43DB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6051B4-1B15-44C0-B2CD-5504E68C60F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040_1069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0BE7CF-D281-46F7-90B5-B469BE10E9A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://service.real.com/help/faq/security/050623_player/EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/050623_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=337279",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-23.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_38_clamav.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=337279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200506-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_38_clamav.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to inject arbitrary web script or HTML via the (1) Searchpage parameter to dosearch.php, (2) Number, (3) what, or (4) page parameter to newreply.php, (5) Number, (6) Board, or (7) what parameter to showprofile.php, (8) fpart or (9) page parameter to showflat.php, or (10) like parameter to showmembers.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65952A65-78AC-4239-9D15-BA850AF64598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFF7A22-25CB-4D5E-BA1B-E10E407DA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094040BF-4C59-4266-9683-76C59D332F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02151FE-89D6-4FB5-82E2-50A2F1046341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E1B205-864C-4FAD-8891-12FBAC0E090F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047CFF77-7616-41A2-9879-EA0E33B4922C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B321E2E-4AD3-4236-918A-F87804990FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2232ED2E-0323-4DBB-8540-98BD52750025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895472F7-D0F8-4C6A-95C6-15963652ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FAA03-DD05-472D-9F67-3089262F5E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAAB6C4-770C-4BC3-9D72-FDA7FD223CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D35A71-2F85-4F33-9480-81EE3EB0CEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E52E29B-9461-4D62-8CCA-6F12DEB63EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F82ADBA-67A1-47E8-8D09-21138BDE84AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0DFCB9-3033-4509-BEDC-2B032524C4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124A5853-5C97-412B-B55B-7430B23565DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0ED5EF0-FF8B-4C4B-8157-FBCBF1B34C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D3CCE6-909B-46F4-AD8F-603E433C01D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803A29EC-E63B-4F66-93E1-60698EE76011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3159B6DF-CE17-490F-AA01-03E5D2EAC7B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111963737202040&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00084-06232005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963737202040&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00084-06232005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65952A65-78AC-4239-9D15-BA850AF64598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFF7A22-25CB-4D5E-BA1B-E10E407DA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094040BF-4C59-4266-9683-76C59D332F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02151FE-89D6-4FB5-82E2-50A2F1046341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E1B205-864C-4FAD-8891-12FBAC0E090F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047CFF77-7616-41A2-9879-EA0E33B4922C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B321E2E-4AD3-4236-918A-F87804990FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2232ED2E-0323-4DBB-8540-98BD52750025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895472F7-D0F8-4C6A-95C6-15963652ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FAA03-DD05-472D-9F67-3089262F5E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAAB6C4-770C-4BC3-9D72-FDA7FD223CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D35A71-2F85-4F33-9480-81EE3EB0CEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E52E29B-9461-4D62-8CCA-6F12DEB63EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F82ADBA-67A1-47E8-8D09-21138BDE84AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0DFCB9-3033-4509-BEDC-2B032524C4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124A5853-5C97-412B-B55B-7430B23565DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0ED5EF0-FF8B-4C4B-8157-FBCBF1B34C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D3CCE6-909B-46F4-AD8F-603E433C01D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803A29EC-E63B-4F66-93E1-60698EE76011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3159B6DF-CE17-490F-AA01-03E5D2EAC7B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111963737202040&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00084-06232005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963737202040&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00084-06232005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to modify settings as another user via a link or IMG tag."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.1.1",
            "matchCriteriaId" : "B3A4DDC9-01E4-462A-A95F-774B4E31B37C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111963737202040&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00084-06232005",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963737202040&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00084-06232005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF (\"%0d%0a\") sequences in the Cat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65952A65-78AC-4239-9D15-BA850AF64598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFF7A22-25CB-4D5E-BA1B-E10E407DA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094040BF-4C59-4266-9683-76C59D332F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02151FE-89D6-4FB5-82E2-50A2F1046341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E1B205-864C-4FAD-8891-12FBAC0E090F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047CFF77-7616-41A2-9879-EA0E33B4922C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B321E2E-4AD3-4236-918A-F87804990FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2232ED2E-0323-4DBB-8540-98BD52750025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895472F7-D0F8-4C6A-95C6-15963652ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FAA03-DD05-472D-9F67-3089262F5E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAAB6C4-770C-4BC3-9D72-FDA7FD223CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D35A71-2F85-4F33-9480-81EE3EB0CEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E52E29B-9461-4D62-8CCA-6F12DEB63EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F82ADBA-67A1-47E8-8D09-21138BDE84AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0DFCB9-3033-4509-BEDC-2B032524C4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124A5853-5C97-412B-B55B-7430B23565DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0ED5EF0-FF8B-4C4B-8157-FBCBF1B34C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D3CCE6-909B-46F4-AD8F-603E433C01D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803A29EC-E63B-4F66-93E1-60698EE76011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3159B6DF-CE17-490F-AA01-03E5D2EAC7B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111963737202040&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00084-06232005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963737202040&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00084-06232005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Infopop UBB.Threads before 6.5.2 Beta allows remote attackers to include arbitrary files via the language parameter in a cookie followed by a null (%00) byte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65952A65-78AC-4239-9D15-BA850AF64598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFF7A22-25CB-4D5E-BA1B-E10E407DA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094040BF-4C59-4266-9683-76C59D332F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02151FE-89D6-4FB5-82E2-50A2F1046341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E1B205-864C-4FAD-8891-12FBAC0E090F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047CFF77-7616-41A2-9879-EA0E33B4922C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B321E2E-4AD3-4236-918A-F87804990FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2232ED2E-0323-4DBB-8540-98BD52750025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895472F7-D0F8-4C6A-95C6-15963652ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FAA03-DD05-472D-9F67-3089262F5E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAAB6C4-770C-4BC3-9D72-FDA7FD223CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D35A71-2F85-4F33-9480-81EE3EB0CEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E52E29B-9461-4D62-8CCA-6F12DEB63EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F82ADBA-67A1-47E8-8D09-21138BDE84AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0DFCB9-3033-4509-BEDC-2B032524C4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124A5853-5C97-412B-B55B-7430B23565DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0ED5EF0-FF8B-4C4B-8157-FBCBF1B34C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D3CCE6-909B-46F4-AD8F-603E433C01D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803A29EC-E63B-4F66-93E1-60698EE76011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3159B6DF-CE17-490F-AA01-03E5D2EAC7B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111963737202040&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00084-06232005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963737202040&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00084-06232005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5) buyer.asp, or Keyword field in search.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:active_web_softwares:activebuyandsell:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA14846-B6F6-4BDB-9E6B-23DCD73D46C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv21-theday-2005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963341429906&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/23110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv21-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963341429906&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/23110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to sendpassword.asp or (2) Keyword field in search.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:active_web_softwares:activebuyandsell:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA14846-B6F6-4BDB-9E6B-23DCD73D46C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv21-theday-2005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963341429906&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv21-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963341429906&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to forgot_password.asp, or the (2) FirstName, (3) LastName, (4) Username, (5) Password, (6) Address1, (7) Address2, (8) City, (9) ZipCode, (10) Email parameter to register.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp-nuke:asp-nuke:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E151FA-533A-4834-A3DA-953E3A5C3BF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111989223906484&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111989223906484&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF (\"%0d%0a\") sequences in the LangCode parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp-nuke:asp-nuke:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E151FA-533A-4834-A3DA-953E3A5C3BF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111989223906484&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111989223906484&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp-nuke:asp-nuke:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E151FA-533A-4834-A3DA-953E3A5C3BF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111989223906484&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111999188612055&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111989223906484&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111999188612055&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp-nuke:asp-nuke:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1426A3-F08C-4E80-B8D5-D9A7B371DDDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/ASPNuke-0601-sql.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111989828622112&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/ASPNuke-0601-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111989828622112&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A1136-074A-460D-9794-DDD530626800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A9602B-8E5A-4BF4-81F5-D1152D09FCAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD0B100-D822-4EBF-8EC9-ADAB8141116B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196D77DF-E6D4-46D0-BC2C-8804A587CA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B743E5A3-6B15-4877-9424-A1F1A4214B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A60742-7815-4658-A6F7-147AA48C24B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1A24F2-9C6B-4DF0-AB04-55D051812DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120271B8-08A9-4C21-A108-0DA61095A006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E6ECDA-DF65-47FF-A42F-FD5C1D864FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA859AF-4E4E-4077-8E98-523E617A1DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9791650-C367-43B6-A0F4-5BB56CE10778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8340DDA8-77DD-4AEB-B267-F86F64A851B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DCBBEE-1DF0-40FE-B755-1FC35CF16788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581626E7-47B5-4819-B34F-B6DFD07A12F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBE9A4A-8AB9-4A97-A106-970FEB08952C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B754AD41-90A0-4382-B599-E41289C690A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "BD99394C-5408-4A01-8D4E-417FFFFDE9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB59A24-87DE-4CAD-A2BA-AFCC0B2A55B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*",
            "matchCriteriaId" : "97D641EF-0B69-45A1-B85E-3C9C93AB9D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "8972211B-6A5B-4095-9CBB-CEF4C23C9C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "8F81A2AD-90A0-4B97-86A3-92690A0FCA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F74BA-2B71-435E-92B8-9DEADB3311A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A46DF2-8EEB-40C8-B1CA-01BC064BD25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581E5904-1A2B-49FF-BE3F-D42019AD816B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CC4C83-4FB9-4344-AFCB-C260659F81DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF763B4-58E3-4868-8C92-47DE3E4E5F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4FCB77-7FAC-4A4B-851C-2F352B44D3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEB3923-8F4B-4523-84F9-17D1CFA37F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58CD19B4-4BFD-4DE8-B21F-6B6CDE6793C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B82BBB7-CD72-4A33-97D4-B1E51A595323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1D6A40-5DD1-481C-AF85-85705FCE3680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7125C4-64AF-4A3B-BBD6-1A56660A2D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83AE5BA5-09FF-4AF8-B4E8-4D372A208E2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0197.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_38_clamav.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0197.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_38_clamav.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIV_NET_RAWACCESS privileges via (1) a large number of -g arguments or (2) a malformed -s argument with a trailing . (dot)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111963068714114&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963809801731&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111964580023012&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17708",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102060-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14049",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2564",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963068714114&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111963809801731&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111964580023012&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102060-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LD_AUDIT environment variable in setuid or setgid programs, which allows local users to gain privileges by (1) modifying LD_AUDIT to reference malicious code and possibly (2) using a long value for LD_AUDIT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034730.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034731.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034738.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15841",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101794-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opensolaris.org/jive/thread.jspa?messageID=3497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14074",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0908",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034730.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034731.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034738.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101794-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opensolaris.org/jive/thread.jspa?messageID=3497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2.0 through 8.2.2 allows local users with SELECT privileges to conduct unauthorized activities and insert, update or delete table contents."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05154E69-63D7-4F51-89F5-1199A3E6E074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B729909-4377-4472-94C4-432CD89BCF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC320999-569A-48AA-92B7-CDE8394BBC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97F5666-4502-437D-AA81-8C0488CD73B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C77B11-C53E-49E7-9C49-2C574390B609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF6FFCD-E744-4D45-8BDD-32ADC94AD655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA1607C-E97A-49BA-B7EC-548784C86D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB2E227E-5E14-4164-B342-9193C7F020F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CB2F40-05E8-49B0-8A62-9DD45821E560"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY73104&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY73104&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possibly involving the (1) news_body, (2) article_description, or (3) article_body parameters to submit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F2384D-1E17-4DA8-A797-7E4729C2720F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dark-assassins.com/forum/viewtopic.php?t=145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15830",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dark-assassins.com/forum/viewtopic.php?t=145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/db_backups directory in PHP-Fusion 6.0 or the fusion_admin/db_backups directory in 5.0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1040A11C-5F39-4045-9E7B-A9FFC0D119ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A01ACAF-0CC5-472F-B0C8-8420E4E104E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dark-assassins.com/forum/viewtopic.php?t=142",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15830",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dark-assassins.com/forum/viewtopic.php?t=142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the \"@\" character in a proxy password, which could allow attackers with physical access to obtain portions of the password when it is displayed to the screen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_repository_manager:1.0.1288.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90AE6B-B24F-4ED5-B250-99D0FBDC614F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_repository_manager:1.0.2241.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC809779-02E2-4B6D-9BD7-1EBDF01A9FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_repository_manager:1.0.2289.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC572579-7F8D-461D-9B65-64CCF9A38866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_repository_manager:1.0.2345.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB54F762-0EC6-40AE-BE99-FB9A2D77D869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_repository_manager:1.0.3085.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE7ADA0-53BF-4B3E-8795-9E51184750DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_repository_manager:1.0.3086.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42BFA60-E55F-43C8-86DE-B31F250BF0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_repository_manager:2.0.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFC2FA5-8FD0-45EE-A208-ADEEC2A99987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_repository_manager:2.0.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE0C4700-DE31-41B8-87A3-62049FBC7D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_repository_manager:2.1.1.710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0952EB7-949C-4046-95C1-F08AC4834435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_repository_manager:2.1.1.720:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746962E9-9C88-41A0-92CC-1C4B72DB2140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15790",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014267",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/8734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/8734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/8734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/8734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary web script or HTML via the error parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94170D21-1196-4BA2-AEB9-C28A4F08B05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3364FE23-345B-428B-BF18-A0AE4D23B03B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDE2038-F5C8-49A9-86D6-E94DA2A93016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E9E17B-92A3-434F-B238-8B403BE4F539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1220294A-27FC-4D1C-BFA8-2B7189E04469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD6BB80-8513-4294-8A81-FE8B11FA8BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DDFC8A-C341-4137-AF44-F93E814E218B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDE7F42-4372-440E-9E8A-D4B123EB9045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E517F5-FA8C-4099-9D2C-6818A3082881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC9B48D-8D14-40D1-A444-2EC2661E40A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111997456519685&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419597/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14080",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111997456519685&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419597/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BisonFTP Server V4R1 allows remote authenticated users to cause a denial of service via an invalid command with a long argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sofotex:bisonftp:v4r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0815A0AE-F210-4C22-A5CF-E80D56B0FA49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/14079",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-29T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for NetWare, allows remote attackers to gain privileges by copying the handle for the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "357967B9-D397-459B-A71A-FEBE0BCB8B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D53EB23-4971-408E-A43F-009698C403A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F763B05-25F3-42B6-A90E-2454910B6AB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4609B0F-3F5C-464E-92B1-ED6AF3C4FB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4174:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D899BF-F90C-43AD-8C17-CF59EE116BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1DD40C-E044-45D7-919E-6DC0749FEF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A5E1B0-A0CA-4F40-92A0-2F214C6D8032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1CD60F-847D-41D1-96C2-993E894F3EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376EA812-8D27-4321-96CC-36848FE8856D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1067.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571BAEAC-E97D-4127-8C44-00206714587A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1067.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D17C351-CC27-4F3C-8024-0D7461534797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1127.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA711692-B9F2-4898-998D-7916C6572EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1151.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B4C81C-2706-461F-9516-A4CB055FE865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1152:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183AE69A-BFCA-4AA4-AB08-18189AF7EE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1152.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2301AB87-1080-4C9E-81EC-91040AF882A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B312041E-57BE-48EF-B1FD-8F8B85D5AC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94533F3-8954-4772-92A6-7E3EE29D3162"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276608.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/277429.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276608.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/277429.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-30T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:27.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1250.  Reason: This candidate is a duplicate of CVE-2005-1250.  Notes: this duplicate occurred as a result of multiple independent discoveries and insufficient coordination by the vendor and CNA.  All CVE users should reference CVE-2005-1250 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-06-30T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:32.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1250.  Reason: This candidate is a duplicate of CVE-2005-1250.  Notes: this duplicate occurred as a result of multiple independent discoveries and insufficient coordination by the vendor and CNA.  All CVE users should reference CVE-2005-1250 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2069",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-06-30T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:padl:nss_ldap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "558C8B99-55C2-42AE-9959-07A6944DA926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:padl:pam_ldap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C67252-5F59-48D2-9569-E616BFAAA607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6CF2B3-671F-425B-8F2A-20E909249C84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0060.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=96767",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.padl.com/show_bug.cgi?id=210",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugzilla.padl.com/show_bug.cgi?id=211",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17233",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17845",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21520",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-13.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openldap.org/its/index.cgi/Incoming?id=3791",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17692",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-751.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-767.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14126",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-152-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:121",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161990",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21245",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9445",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.padl.com/show_bug.cgi?id=210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugzilla.padl.com/show_bug.cgi?id=211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openldap.org/its/index.cgi/Incoming?id=3791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-751.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-767.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-152-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0360",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as \"safe for scripting\" for Internet Explorer, which allows remote attackers to create or append to arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:log_sink_class_activex_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6CD316-CFE8-4376-80FC-04A272695032"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/165022",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/165022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0393",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crip:crip:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0186084D-7735-47BF-82BB-DABE61E2AB81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-733",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the UnixAppOpenFilePerform function in Adobe Reader 5.0.9 and 5.0.10 for Unix allows remote attackers to execute arbitrary code via a PDF document with a long /Filespec tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5F7424-1E19-4078-8908-CD86A0185042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2402B40-6B72-48B5-A376-DA8D16CA43FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.adobe.com/support/techdocs/329083.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=279&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_42_acroread.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-575.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/329083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=279&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_42_acroread.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1917",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kpopper 1.0 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the .popper-new temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kpopper:kpopper:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C7F7E7-8497-4870-994E-91F5FB5FBBDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.zataz.net/adviso/kpopper-06152005.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zataz.net/adviso/kpopper-06152005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1921",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:xml_rpc:*:*:*:*:*:pear:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "DF9FF982-2BF4-49ED-82F8-C8F8327D2EF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gggeek:phpxmlrpc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "83956BC5-8694-4C4B-92C4-D3C960980F66"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.4",
            "matchCriteriaId" : "00201099-3C07-44F0-880B-CE2AE77EE171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.2",
            "matchCriteriaId" : "3C248ACE-86AF-40FF-8B8F-FE1879E54FF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.5",
            "matchCriteriaId" : "363E6E27-87B4-4271-B374-B176DE9E5D56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112008638320145&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112015336720867&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605112027335&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://pear.php.net/package/XML_RPC/download/1.3.1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/15810",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15855",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15861",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15872",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15883",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15884",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15895",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15903",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15904",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15916",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15917",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15922",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15947",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15957",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16001",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16339",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16693",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17674",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18003",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-01.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-06.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-07.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015336",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=87163",
        "source" : "secalert@redhat.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=338803",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ampache.org/announce/3_3_1_2.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-745",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-747",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.drupal.org/security/drupal-sa-2005-003/advisory.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00087-07012005",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory-022005.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:109",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_41_php_pear.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_49_php.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-564.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419064/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419064/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14088",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2827",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11294",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A350",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112008638320145&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112015336720867&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605112027335&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://pear.php.net/package/XML_RPC/download/1.3.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/15810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=87163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=338803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ampache.org/announce/3_3_1_2.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.drupal.org/security/drupal-sa-2005-003/advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00087-07012005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory-022005.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_41_php_pear.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_49_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-564.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419064/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419064/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1ADBDEE-1421-42E5-8DE2-404087613B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=336462",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=276&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=336462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=276&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1ADBDEE-1421-42E5-8DE2-404087613B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=275&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=275&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GoodTech SMTP Server 5.14 allows remote attackers to cause a denial of service (application crash) via a RCPT TO command with an invalid argument, as demonstrated using an \"A\" character."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goodtech_systems:goodtech_smtp_server:5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6F8773-EECF-4866-9EAC-E8EAB7F0E2E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111817606013776&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15623",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111817606013776&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and (1) modify DNS settings for arbitrary domains via the domain parameter to diagnose.php, (2) close, open, or respond to arbitrary support tickets via the close, open, or pid parameter to view_ticket.php, (3) obtain sensitive information on arbitrary invoices via the inv parameter to viewreceipt.php, or (4) modify domain information for arbitrary domains via the editdomain parameter to domains.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lpanel:lpanel:1.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023B1268-93B7-4ABC-B0D6-08B0F185BD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lpanel:lpanel:1.593:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3C1988-84E8-4931-9E42-20667CA997C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lpanel:lpanel:1.594:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74E52EE-9A94-4F52-B5FC-397B7682C01A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lpanel:lpanel:1.596:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B779FE-C7CE-4F05-A937-B9AFCE5C3419"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034414.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034415.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034416.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034417.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034418.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034419.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15589/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.lpanel.net/changelog.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13869",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034414.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034415.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034416.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034417.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034418.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034419.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15589/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.lpanel.net/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2019",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent lookups, allowing remote attackers to bypass intended access restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:13.ipfw.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:13.ipfw.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2068",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A585A1-FF82-418F-90F8-072458DB7816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE31DFF8-06AB-489D-A0C5-509C090283B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF49BF03-C25E-4737-84D5-892895C86C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2019E0E-426B-43AF-8904-1B811AE171E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5FC1A-1253-4390-A4FC-573BB14EA937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44308D13-D935-4FF8-AB52-F0E115ED1AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582B9BF3-5BF1-44A3-A580-62F2D44FDD34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD73CDB-94C5-4DBF-8B4C-DD3E4E399445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C60C04-EF59-4F5C-96E5-A6E693EA9A06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111946399501080&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.portcullis-security.com/advisory/advisory-05-013.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111946399501080&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.portcullis-security.com/advisory/advisory-05-013.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "im_trbbs.cgi in imTRSET 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the df parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi-club:imtrset:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D079B3D-AFD3-4A27-A2B0-95E4071448DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112006605026261&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cgi-club.com/imTRBBS/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112006605026261&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cgi-club.com/imTRBBS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of service (application crash) via a LIST command with format string specifiers as the second argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:truenorth_software:ia_emailserver:corporate_5.2.2_build_1051:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1603F61B-0320-4205-BB57-46F4774504F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:truenorth_software:ia_emailserver:corporate_5.2.3_build_1056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC920FD-76F8-4C22-ABEB-AC00A5F2A31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:truenorth_software:ia_emailserver:corporate_5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC0FDE6-D4BA-48CF-957A-82B65FA24DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:truenorth_software:ia_emailserver:corporate_5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E45766F-95BB-4F5D-ACF3-8E476A91E37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:truenorth_software:ia_emailserver:corporate_5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692C7379-5E94-4952-B2F7-BFCF6D9DC0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:truenorth_software:ia_emailserver:corporate_5.3.4_build_2018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9684FFAD-1992-4F1F-983A-33F20E775D85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111988945819448&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Jun/1014301.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111988945819448&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Jun/1014301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SearchResults.aspx in Community Forum allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telligent_systems:community_server_forums:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FC71C4-3ECF-48B4-B7A0-903F8ABC6ED0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111998009409469&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111998009409469&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Inframail Advantage Server Edition 6.0 through 6.7 allows remote attackers to cause a denial of service (process crash) via a long (1) SMTP FROM field or possibly (2) FTP NLST command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infradig_systems:inframail_advantage:server_6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0735899C-8C19-4D6B-BFD7-5E8C671E5374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infradig_systems:inframail_advantage:server_6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACF4D27-6EB7-49DA-B8F3-E6CA53E8712A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111998161006731&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111998161006731&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111999905917019&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=302011",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111999905917019&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=302011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, as demonstrated using the JVIEW Profiler (Javaprxy.dll).  NOTE: the researcher says that the vendor could not reproduce this problem."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.1:*:mac_os:*:*:*:*:*",
            "matchCriteriaId" : "4CF91C2F-EE6D-4C9E-8F39-1F632399EC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.2.3:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "EB51F2D6-3CCA-4695-8A92-39999749B3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CFF390-FF33-45CA-BC96-C6766491C616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*",
            "matchCriteriaId" : "8E93C22E-812E-4CDA-9850-2386CE1E817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBF9B51-5AF4-4317-9768-21D866AC7990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112006764714946&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15891",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.auscert.org.au/render.html?it=5225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/939605",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/903144.mspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-193A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112006764714946&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.auscert.org.au/render.html?it=5225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/939605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/903144.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-193A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2088",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.35",
            "versionEndExcluding" : "2.0.55",
            "matchCriteriaId" : "7B627099-D2E2-4E43-84B7-0C921FAD4156"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=apache-httpd-announce&m=112931556417329&w=3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14530",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17319",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17487",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19072",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19073",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19317",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/23074",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securityreason.com/securityalert/604",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014323",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.600000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102197-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK13959&apar=only",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK16139&apar=only",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/httpd/CHANGES_1.3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/httpd/CHANGES_2.0",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-803",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-805",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:130",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_46_apache.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-582.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14106",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-160-2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2140",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1018",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4680",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00612828",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00612828",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11452",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1237",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1526",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1629",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A840",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://secure-support.novell.com/KanisaPlatform/Publishing/741/3222109_f.SAL_Public.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=apache-httpd-announce&m=112931556417329&w=3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/14530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/23074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securityreason.com/securityalert/604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.600000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102197-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK13959&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK16139&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/httpd/CHANGES_1.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/httpd/CHANGES_2.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_46_apache.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-582.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-160-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Permissions Required" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00612828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00612828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://secure-support.novell.com/KanisaPlatform/Publishing/741/3222109_f.SAL_Public.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Apache",
        "comment" : "Fixed in Apache HTTP Server 2.0.55:\nhttp://httpd.apache.org/security/vulnerabilities_20.html",
        "lastModified" : "2008-07-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes IIS to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "413C07EA-139F-4B7D-A58B-835BD2591FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_services:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4DF95D-B4B1-4FB6-9D27-A6D359EEACFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42899",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB2F3D8-25A1-408E-80D0-59D52A901284"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2008/000003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26660",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27037",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28365",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/29242",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30899",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30908",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33668",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014365",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-6.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0327.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0360.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/485938/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500396/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500412/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13873",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3087",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3386",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0065",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1979/references",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0233",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2008/000003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/29242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0327.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0360.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/485938/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500396/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500412/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1979/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes WebSphere to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DC6FE-BBB4-45AA-8A5F-F204E798DF07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA Systems WebLogic 8.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes WebLogic to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle 9i Application Server (Oracle9iAS) 9.0.2 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Application Server to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFAE1E8A-644B-42FD-B149-89AD420BD7A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes SunONE to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4493C646-DF4B-45C7-86F7-A71AC9B1CA97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting (AAA) RADIUS authentication, if the fallback method is set to none, via a long username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "420C23F6-1E44-418F-B6CA-DECA22218B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0570296A-6F1C-40E1-93F8-C23BF4330E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7918C59-1678-4F24-A7C2-68824D1B59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56365432-1E57-4D35-B764-DDDA878B96ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390755B3-30B7-4086-8FB2-A41614F747D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB57AAA9-4715-468F-A734-A12209A6069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D480A-80A3-4113-A1A6-194A8DD47F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A310F30-F94D-4A70-94BD-6B94D7B5F5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56032FBD-FEE7-4B38-B35E-CD277B931DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2BCA9F-5D56-4EF4-8675-7B76129B994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09698AAF-F4D1-41EE-A960-38FAB645B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B75FC35-2B4D-4CEE-BE71-D497DF787123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050629-aaa.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jun/1014330.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050629-aaa.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jun/1014330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP code via a public comment or posting."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5093F703-13AA-4EEC-8659-C5EB29A54AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68656D9-3EA0-4749-AF1B-2F9B485A02ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112015287827452&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15872",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.drupal.org/security/drupal-sa-2005-002/advisory.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112015287827452&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.drupal.org/security/drupal-sa-2005-002/advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p or (2) comment parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7BEFBD-4326-44A5-A160-9406D94AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85A88D7-07A1-4A8C-88B5-057AD9C675E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112006967221438&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15831",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00085-06282005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112006967221438&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00085-06282005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7BEFBD-4326-44A5-A160-9406D94AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85A88D7-07A1-4A8C-88B5-057AD9C675E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112006967221438&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15831",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00085-06282005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112006967221438&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00085-06282005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7BEFBD-4326-44A5-A160-9406D94AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85A88D7-07A1-4A8C-88B5-057AD9C675E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112006967221438&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15831",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00085-06282005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112006967221438&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00085-06282005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via (1) a direct request to menu-header.php or a \"1\" value in the feed parameter to (2) wp-atom.php, (3) wp-rss.php, or (4) wp-rss2.php, which reveal the path in an error message.  NOTE: vector [1] was later reported to also affect WordPress 2.0.1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7BEFBD-4326-44A5-A160-9406D94AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85A88D7-07A1-4A8C-88B5-057AD9C675E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://NeoSecurityTeam.net/advisories/Advisory-17.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112006967221438&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15831",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00085-06282005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426304/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://NeoSecurityTeam.net/advisories/Advisory-17.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112006967221438&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00085-06282005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426304/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.cgi in Community Link Pro Web Editor allows remote attackers to execute arbitrary commands via the file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:community_link_pro_web_editor:community_link_pro_web_editor:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAA664B-14E8-4E3B-A5C2-3504E63E1231"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112006558125309&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.badroot.org/advisories/SA0x05",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112006558125309&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.badroot.org/advisories/SA0x05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter to edit.php or (2) cid parameter to comment_edit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D649637-9772-4B71-B219-DD505CDB3549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E91D0D-42F6-4FAC-BD04-AA4D77C6DAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881DDA3C-4D95-471F-95BA-6C4629B3CB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E235D928-E2D9-46D3-B95F-C4AF556D3C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0B5583-8489-4AF9-AD04-4A56AC244A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C32DECD-1E28-4CC1-812B-E8D54B5703EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD25BC1-E435-4691-B42A-0D98D80F0F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F58A3E7-4C21-48FD-AA26-7CCE85BAE887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26950415-06AF-4910-A881-121EA0B43058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89CFFAD2-F511-431C-BF24-08CA810B4645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675A7068-CE9E-412A-8159-2A3820D6272E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC857372-A76D-4F3D-9FEE-6086A0AB002C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2D117B-2800-462A-BA58-E71AED33EEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08729570-512B-4B7E-A055-B8E312F41E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476872A3-838B-40B7-B180-2FE018EA9BE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112006318512991&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00086-06292005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xoops.org/modules/news/article.php?storyid=2383",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112006318512991&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00086-06292005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xoops.org/modules/news/article.php?storyid=2383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D649637-9772-4B71-B219-DD505CDB3549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E91D0D-42F6-4FAC-BD04-AA4D77C6DAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881DDA3C-4D95-471F-95BA-6C4629B3CB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E235D928-E2D9-46D3-B95F-C4AF556D3C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0B5583-8489-4AF9-AD04-4A56AC244A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C32DECD-1E28-4CC1-812B-E8D54B5703EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD25BC1-E435-4691-B42A-0D98D80F0F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F58A3E7-4C21-48FD-AA26-7CCE85BAE887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26950415-06AF-4910-A881-121EA0B43058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89CFFAD2-F511-431C-BF24-08CA810B4645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675A7068-CE9E-412A-8159-2A3820D6272E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC857372-A76D-4F3D-9FEE-6086A0AB002C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2D117B-2800-462A-BA58-E71AED33EEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08729570-512B-4B7E-A055-B8E312F41E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476872A3-838B-40B7-B180-2FE018EA9BE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112006318512991&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00086-06292005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xoops.org/modules/news/article.php?storyid=2383",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112006318512991&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00086-06292005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xoops.org/modules/news/article.php?storyid=2383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, and K-Meleon 0.9, and possibly other products that use the Gecko engine, allow remote attackers to cause a denial of service (application crash) via JavaScript that repeatedly calls an empty function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C05BFA-D947-47B7-8EA2-5C0F171F0A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112008299210033&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kurczaba.com/html/security/0506241.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5OP0U00G1G.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112008299210033&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kurczaba.com/html/security/0506241.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5OP0U00G1G.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82AD966E-236B-4F41-93A9-75B90535E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7194A0-A9B3-490F-A575-1F7AEADEE636"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/sof2ignore-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112008428126593&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15868",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/sof2ignore-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112008428126593&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:34.117",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1921.  Reason: This candidate is a duplicate of CVE-2005-1921.  Notes: All CVE users should reference CVE-2005-1921 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:34.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1915.  Reason: This candidate is a duplicate of CVE-2005-1915.  Notes: All CVE users should reference CVE-2005-1915 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service (kernel crash) by using the set-parameters ioctl on an audio device to change the block size and set the pause state to \"unpaused\" in the same ioctl, which causes a divide-by-zero error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-002.txt.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-002.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) T1 or (2) T2 parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etoshop:dynamic_biz_website_builder_quickweb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2EA131-8A28-4248-8C10-7CB0FCB395B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15818",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:raritan:dominion_sx4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D7E942-0970-4BF1-AA34-A1432621F249"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:raritan:dominion_sx4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9428BA7E-1ADC-4FC6-9FF3-AD49DBEEF6A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:raritan:dominion_sx8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D855B42D-26C4-43E9-A438-C11A3E85500D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:raritan:dominion_sx8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE8ABCF-12DC-4124-8326-A097947FEE01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:raritan:dominion_sx16_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C73AE4-DF17-4EB0-B962-D3C7CED2F105"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:raritan:dominion_sx16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B86E9EA-C9BE-4205-9CE7-6E650E6C2546"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:raritan:dominion_sx32_firmware:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6085690F-E5CB-491E-941F-99ABAC22D815"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:raritan:dominion_sx32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C39BBF-42F3-45B0-B519-5E897682FEBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:raritan:dominion_sxa-48_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFF290F-B555-4B74-BAA4-ACCB4D08DED7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:raritan:dominion_sxa-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1879AB-E397-42EA-8570-7555B0AE1BB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0251.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15853",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14084",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jun/0251.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in NateOn Messenger 3.0 allows remote attackers to list arbitrary directories via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nateon:nateon_messenger:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3385FC0B-0635-4634-98A2-85C878629748"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15819",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the onMouseOver event of an \"A\" tag in a review message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comdev:comdev_ecommerce:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70782A22-4793-401F-BB08-2C57F08F6972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comdev:comdev_ecommerce:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B8F818-2A9D-435A-9488-A3A208498A89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=64",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in user_check.php for Pavsta Auto Site allows remote attackers to execute arbitrary PHP code via the sitepath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pavsta:pavsta_auto_site:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648AADFD-E632-4C95-B10F-BE4C98803716"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15873",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014321",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in default.asp for FSboard 2.0 allows remote attackers to read arbitrary files via \"..\" sequences in the filename parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fsboard:fsboard:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD533710-956D-4833-83F3-2D5AED1E0807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/14111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TCP Chat 1.0 allows remote attackers to cause a denial of service (crash) via a long string to the chat service, possibly triggering a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jollybox.de:tcp_chat:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67152233-41DA-457C-91ED-CE7EF1CE8C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://addict3d.org/index.php?page=viewarticle&type=security&ID=4377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=65",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014371",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://addict3d.org/index.php?page=viewarticle&type=security&ID=4377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Golden FTP Server 2.60 allows remote authenticated attackers to list arbitrary directories via a \"\\..\"  (backslash dot dot) in an LS (LIST) command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4C2A80-85D5-4C17-95D4-9D69CC28379D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15840",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Front Page allows attackers to cause a denial of service (crash) via a crafted style tag in a web page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0951E183-2BFE-4B19-9F06-107B5E22DBC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014352",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freewebs.com/xxosfilexx/HungFPage.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freewebs.com/xxosfilexx/HungFPage.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prevx:prevx_pro_2005:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E09D918-A2D1-4237-A37F-BCC2C7248EF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15885",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014346",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel driver in Prevx Pro 2005 1.0 does not verify the source of certain messages, which allows local users to bypass protection by sending certain messages to the driver, as demonstrated by sending an \"allow\" message to bypass a warning message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prevx:prevx_pro_2005:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E09D918-A2D1-4237-A37F-BCC2C7248EF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15885",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF0262B-1451-40CA-9DD1-F2DEA793BD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15894",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ssh.com/company/newsroom/article/653/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ssh.com/company/newsroom/article/653/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1916",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg_project:ekg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2005-06-05",
            "matchCriteriaId" : "FD8092DC-E037-46C4-AA65-3DA1EA81EC57"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112060146011122&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Technical Description" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-760",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.zataz.net/adviso/ekg-06062005.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112060146011122&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Technical Description" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.zataz.net/adviso/ekg-06062005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2096",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zlib:zlib:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8D0212-4805-4C50-A8C7-7A2AF3424929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zlib:zlib:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C493104-5D6B-417F-BD77-32A4868A3398"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zlib:zlib:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C77C974-9A8A-4F22-A680-5095552589BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17054",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17225",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17236",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18406",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18507",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19550",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19597",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24788",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/32706",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-05.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3298",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-740",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-797",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/680620",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:112",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:196",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:070",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-569.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421411/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421411/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464745/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482503/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482505/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482571/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482601/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482949/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482950/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14162",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-151-3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0978",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0144",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1267",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24064",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/148-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/680620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-569.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421411/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421411/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482503/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482505/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482571/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482601/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482949/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482950/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-151-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/148-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2147",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachment viewer scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DAF74C-8188-4F29-ACDA-ACEE3B02CB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1430A5-5C85-45FF-9E9F-2FEF9EABC603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70CF2A2-AE61-4A48-B6A7-108358D55A5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15752",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-739",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory-012005.php",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13990",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory-012005.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2148",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in a POST request or cookie, then specifying the attack string in the URL, which causes the get_request_var function to return the wrong value in the $_REQUEST variable, which is cleansed while the original malicious $_GET value remains unmodified, as demonstrated in (1) graph_image.php and (2) graph.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BBF3F3-18C0-49C5-99B0-80FCD133532B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1896A7C-6938-494D-90A5-E10BC91EB37D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CD9A10-32F6-45A4-8793-87E0C2E78675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EF1390-E1B5-45B0-8732-A7004351E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3D7996-E56A-4B72-864E-EC6037028351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000AE712-7298-4CA1-930B-4DF372671EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD258DF-CB70-484C-9A6F-F9ABDB012C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF12ADC-83AA-45FE-9678-F49D05234D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FD0F4A-4811-4B4A-AF03-8FBC63A99CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166938A7-2DE3-456D-BE47-6041895E2204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5ABA2-9BCB-420A-A9E3-8B590F3DD4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB59E467-8AA1-4D95-B81A-2EFF6F19C34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F29217-19A4-453D-8290-D35049E45160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B424B2E4-5F57-411D-8A69-91E8975A7D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CAB1F6F-06D2-40C7-9D9C-0ABAADDEAC72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15490",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1014361",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?forum_id=10360&max_rows=25&style=flat&viewmonth=200507&viewday=1",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patch",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-764",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory-032005.php",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory-042005.php",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404047/30/30/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404054",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14128",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14129",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0951",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21266",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21270",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/15490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?forum_id=10360&max_rows=25&style=flat&viewmonth=200507&viewday=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory-032005.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory-042005.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404047/30/30/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2149",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BBF3F3-18C0-49C5-99B0-80FCD133532B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1896A7C-6938-494D-90A5-E10BC91EB37D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CD9A10-32F6-45A4-8793-87E0C2E78675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EF1390-E1B5-45B0-8732-A7004351E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3D7996-E56A-4B72-864E-EC6037028351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000AE712-7298-4CA1-930B-4DF372671EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD258DF-CB70-484C-9A6F-F9ABDB012C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF12ADC-83AA-45FE-9678-F49D05234D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FD0F4A-4811-4B4A-AF03-8FBC63A99CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166938A7-2DE3-456D-BE47-6041895E2204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5ABA2-9BCB-420A-A9E3-8B590F3DD4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB59E467-8AA1-4D95-B81A-2EFF6F19C34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F29217-19A4-453D-8290-D35049E45160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B424B2E4-5F57-411D-8A69-91E8975A7D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CAB1F6F-06D2-40C7-9D9C-0ABAADDEAC72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014361",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?forum_id=10360&max_rows=25&style=flat&viewmonth=200507&viewday=1",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patch",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-764",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory-052005.php",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404040",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14130",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0951",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1014361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?forum_id=10360&max_rows=25&style=flat&viewmonth=200507&viewday=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory-052005.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow attackers to cause memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB82816F-11B7-40C3-AF80-C3091372C46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66C6966-7500-432C-A766-35FAA9E42FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B082F880-5684-4FB5-B469-A5B65847D577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.48.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A23AE92-D4C0-4F7C-85DC-BC3A9B7D53A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.48.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFFC62C-4969-405E-8F2C-E3D31DDED5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.49.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FEF102-4961-4AA0-969F-4108E4556CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.50.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E387763-BAA3-4353-8065-DBB99CFC94B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15901",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.courier-mta.org/?changelog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.courier-mta.org/?changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an article."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147BFA8A-ADBF-4673-AA7B-EF595EB61A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E851FB8-7812-47B1-BADD-D2899651C37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB30D22-4DEF-4DF0-AB46-EE7FA992A634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2935349-9CFD-4BF4-8DBE-7713DECF7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2685AAF-C3E4-4C1B-A8BA-CA472B0261B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7364F137-0778-4B63-8422-D1EC162EA506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDD4DA5-7D47-4D99-9F0C-1D0C8358C137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B4CA68-D7F0-442F-AB2B-FD092FDE90F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622E7DFE-186D-4047-B355-0A0A8225BE57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA12BA3-AAED-42D3-965C-85C1D0078044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F1D50F-93C6-4897-A369-7C367B1D544B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A8A7C5-5035-44CF-B688-438AF024CD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A6B63-4AE5-4A4C-A801-E664F155ABB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD54CA0-BEA1-4C43-9DB1-F5F4321CC275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FF2F3B-C4A0-4A67-B27D-90F091E75454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00D6C8B-2533-4BC4-93AD-87FFCBDF521A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794C8A9D-36BC-4C33-8873-9476804F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFB261F-59CE-4C0C-91C2-C094CFB97888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E811EA8-D4B4-4631-9EA8-E4EB9E845DD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.3.11sr1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory-062005.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.3.11sr1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory-062005.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket_sts:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CBCE49-FA09-47BD-9584-486B32D58EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket_sts:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D83869-36F9-4AD0-8B90-AF2ACF281735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket_sts:1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528C4718-78C4-4C49-8759-1BB17E2A331F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jul/0009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014373",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14127",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jul/0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket_sts:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CBCE49-FA09-47BD-9584-486B32D58EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket_sts:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D83869-36F9-4AD0-8B90-AF2ACF281735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket_sts:1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528C4718-78C4-4C49-8759-1BB17E2A331F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jul/0009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014373",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14127",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jul/0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyphpcalendar:easyphpcalendar:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA6A127-FDAE-480B-8BA4-6EB705A415D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15893",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnews:phpnews:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B158F9B-3EB3-4714-8806-39EAA8ACE28F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=66322&release_id=339317",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14133",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=66322&release_id=339317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in survey.inc.php for nabopoll 1.2 allows remote attackers to execute arbitrary PHP code via the path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nabocorp:nabopoll:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFD1F33-7218-4711-B1AE-EF3776156931"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15910",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014355",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regression error in the embedded HSQLDB in JBoss jBPM 2.0 allows remote attackers to execute arbitrary comands, a re-introduction of a vulnerability that was originally identified by CVE-2003-0845."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jboss:jbpm:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1BBB7B-0F26-48AA-B7F5-B85F7285CDC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112051548512338&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.illegalaccess.org/java/jboss.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112051548512338&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.illegalaccess.org/java/jboss.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mshftp.dll in PlanetDNS PlanetFileServer 2.0.1.3 allows remote attackers to cause a denial of service (application crash) via a long request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:planetdns:planetfileserver:2.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C5DA60-B77C-4613-B6BE-85A0CBC0468E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112051398718830&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14138",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112051398718830&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B286D0-4168-41FF-AC1F-4E65C3AD7DC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112060187204457&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112060187204457&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpBB 2.0.16 allows remote attackers to inject arbitrary web script or HTML via nested [url] tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112059951605939&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitylab.ru/55612.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112059951605939&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitylab.ru/55612.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execute arbitrary PHP code via the lang parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:levcgi.com:myguestbook:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE5DA3B-0677-47CD-985C-4375A0876902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112059876828730&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/advisory/myguestbook_advisory.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112059876828730&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/advisory/myguestbook_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in AutoIndex PHP Script 1.5.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autoindex:php_script:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52340CF4-9995-485E-99D4-9BDB9301274E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112059745606348&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15928",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.badroot.org/advisories/SA0x07",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112059745606348&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.badroot.org/advisories/SA0x07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:covide_groupware-crm:covide:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3DEC756-5439-4343-BC60-319664FBE406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112060007704577&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=339047",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112060007704577&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=339047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "read.cgi in GlobalNoteScript allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalnotescript:globalnotescript:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F2E9474-AE62-4D60-BE5A-F2005332618F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014375",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://zone-h.org/advisories/read/id=7765",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://zone-h.org/advisories/read/id=7765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD949D7F-FE4E-4BD7-860F-5F723F87D565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.4rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024104A2-2A2E-4756-A8CA-154F339340CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.4rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E534AA-ACC2-44D2-82F6-AD5984D524FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397D415B-B62A-4D21-9706-336E7A344C22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dark-assassins.com/forum/viewtopic.php?t=90",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15902",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://dark-assassins.com/forum/viewtopic.php?t=90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the cid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD949D7F-FE4E-4BD7-860F-5F723F87D565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.4rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024104A2-2A2E-4756-A8CA-154F339340CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.4rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E534AA-ACC2-44D2-82F6-AD5984D524FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397D415B-B62A-4D21-9706-336E7A344C22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dark-assassins.com/forum/viewtopic.php?t=90",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15902",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://dark-assassins.com/forum/viewtopic.php?t=90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD949D7F-FE4E-4BD7-860F-5F723F87D565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.4rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024104A2-2A2E-4756-A8CA-154F339340CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.4rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E534AA-ACC2-44D2-82F6-AD5984D524FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frozenplague.net:plague_news_system:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397D415B-B62A-4D21-9706-336E7A344C22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dark-assassins.com/forum/viewtopic.php?t=90",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15902",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://dark-assassins.com/forum/viewtopic.php?t=90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/15902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-06T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via \".../...//\" sequences in the file parameter, which are reduced to \"../\" when PHPSource Printer uses a regular expression to remove \"../\" sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaf_oseo:quick_and_dirty_phpsource_printer:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317FDEAE-095D-4563-821A-DB17879140F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://guff.szub.net/2005/07/04/quick-and-dirty-security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15900",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014376",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://guff.szub.net/2005/07/04/quick-and-dirty-security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5F7424-1E19-4078-8908-CD86A0185042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2402B40-6B72-48B5-A376-DA8D16CA43FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14457",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-6/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/329121.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-575.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-6/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/329121.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1912",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-07T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:31.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1841.  Reason: This candidate is a duplicate of CVE-2005-1841.  Notes: this duplicate occurred as a result of separate assignments by multiple CNAs, one to the researcher and one to the vendor.  All CVE users should reference CVE-2005-1841 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to change flags on arbitrary bugs and obtain a bug summary via process_bug.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCDA64F-C49A-4F5B-B285-4079D8E3A499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED3457-CC21-4DB3-931F-677F723E1B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8711D3-55CF-4131-BBAC-6BE07068219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D7EA7C-B401-4F5A-AC08-2199DD117403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2DDC7C-CD2B-4597-A5E0-266A884958FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC72143-27C3-498F-AFAB-98AE043C0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725BD7BE-1769-4032-ADA8-9ED15528C770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293159",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the database before it is marked private, which introduces a race condition and allows attackers to access information about the bug via buglist.cgi before MySQL replication is complete."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCDA64F-C49A-4F5B-B285-4079D8E3A499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED3457-CC21-4DB3-931F-677F723E1B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8711D3-55CF-4131-BBAC-6BE07068219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D7EA7C-B401-4F5A-AC08-2199DD117403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2DDC7C-CD2B-4597-A5E0-266A884958FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC72143-27C3-498F-AFAB-98AE043C0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725BD7BE-1769-4032-ADA8-9ED15528C770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293159",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99CADAC9-376A-430B-B228-84F0FA401154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-07/0075.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-07/0075.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-09T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417FAC89-DD03-47E5-9743-FFD5E1AEC702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.0.3a:a:*:*:*:*:*:*",
            "matchCriteriaId" : "6159C3FC-F82D-42BC-903F-2720FEF61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.0.3a:b:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E56419-E190-4249-8B9E-02DC20B5F2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4332FF7C-B625-4885-84F1-95A210391A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D0863DA2-AA27-4C91-B73A-649354FB2B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:a:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFAEE62-246B-4687-8B9A-A6C142D72308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:b:*:*:*:*:*:*",
            "matchCriteriaId" : "21946EC8-3327-4AE6-9A0D-09C1EBCC7683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:c:*:*:*:*:*:*",
            "matchCriteriaId" : "0B922B34-BBCA-4791-92EF-43ADDA7E2473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:c1:*:*:*:*:*:*",
            "matchCriteriaId" : "21A064F2-7DFD-47FE-8537-1DC60B8E1087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:e-ftfl:*:*:*:*:*:*",
            "matchCriteriaId" : "36CAB36C-7E40-4DE2-BC52-CDF5BE5C1371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6733B36D-1AB1-4F61-A99C-E14343E41BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:a:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D05531-78EF-46C7-A4F8-9CB0B077C207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:b:*:*:*:*:*:*",
            "matchCriteriaId" : "46767ECB-FD9A-478B-B983-85F6281F7F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:c:*:*:*:*:*:*",
            "matchCriteriaId" : "7397E8D5-ECAE-4A89-8340-5576EE6551F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:d:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5BFC56-D652-4252-8E68-30DE40CC5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:e:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9A617E-75D2-45A6-ACF7-2A87A9803A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:f:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCBCB4F-5F8B-45CD-9007-DD0C7F90D59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:g:*:*:*:*:*:*",
            "matchCriteriaId" : "5657411D-2C13-406B-9113-2580062CA486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.10:h:*:*:*:*:*:*",
            "matchCriteriaId" : "D128B390-A46C-463E-9D97-D8AD0611191A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15962",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972340.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972433.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972438.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14171",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972340.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972433.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972438.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1768",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs function has counted the pointers, but before the count is copied from user space to kernel space, which leads to a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112110120216116&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15980",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014442",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_44_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14205",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.suresec.org/advisories/adv4.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112110120216116&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_44_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.suresec.org/advisories/adv4.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1848",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors that cause an out-of-bounds memory read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phystech:dhcpcd:1.3.17_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2614E10A-0269-4229-B434-087CE50D511A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-750",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-603.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-603.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl or (2) read eventlogs via eventlog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53CDA8E-50A8-4509-B070-CCA5604FFB21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112076409813099&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hsc.fr/ressources/presentations/null_sessions/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112076409813099&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hsc.fr/ressources/presentations/null_sessions/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LCF component (lcfd) in IBM Tivoli Management Framework Endpoint allows remote attackers to cause a denial of service (process exit and connection loss) by connecting to LCF and ending the connection without sending any data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_management_framework:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD5D078-8EA7-4933-B1BC-7AF533F317DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/entdocview.wss?uid=swg21210334",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.corsaire.com/advisories/c041127-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14194",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/entdocview.wss?uid=swg21210334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.corsaire.com/advisories/c041127-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B4FDFF-9E09-4AB9-9196-6A01903473B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E8FC05-D498-4D5D-B5A3-3F16749B7491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD964F4-9196-4641-A854-09DA86BCC890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A07BEF-C759-459E-A144-D37C1A55A9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.4_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D95BAC-CCF3-4E8B-BF31-E277B03C0FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97B7D0D-68CC-463D-A14B-3651D8DD4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCF39FC-D220-4F4A-8CBF-B993C65671FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5512FA-8B74-4585-ADEF-F710C0DF83A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AAC2EA-8AA7-4303-BD64-74CFC7938D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C872A9B0-0B3C-47B2-82F5-344BEBA221CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE816EA-2CDF-440A-9B7A-D772F38A3A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089CEC52-73AC-41B0-BB7F-F24C42DD16E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2BAAA8-313D-41F2-A98D-3557331E35B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88260A4F-4707-4B79-939A-F1EB2CD4D57B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16999",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17007",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17217",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17282",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17343",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18635",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23058",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25373",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25432",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25787",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=7659656&forum_id=12455",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102725-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-225.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.net-snmp.org/about/ChangeLog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_12_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_13_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-373.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-395.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-720.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/21256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0034/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-190-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1883",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=7659656&forum_id=12455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102725-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-225.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.net-snmp.org/about/ChangeLog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_12_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_13_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-373.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-395.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-720.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0034/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-190-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter.  NOTE: it is unclear which product or vendor this program is associated with, if any."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:probe.cgi:probe.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32258D5C-FB34-4684-B6B5-2FF79CCA11AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112059815028059&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014393",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.badroot.org/advisories/SA0x06",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112059815028059&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.badroot.org/advisories/SA0x06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via the path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaws:jaws:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1998A005-BAC5-4B41-82DD-D7246DFEC089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaws:jaws:0.5.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AB48B4-7A0A-4EE6-9698-75FF066562CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaws:jaws:0.5.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A590DE05-F8B8-4B26-A22F-8CDCF5BA4D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaws:jaws:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3616DA55-CA90-4FB4-90A1-E311C740E259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaws:jaws:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D376422A-ABEA-476A-9F33-95C6FABBA71A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112067013827970&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory-072005.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112067013827970&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory-072005.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnats:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E41302A2-137C-4F61-967D-7EBBBD692AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnats:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3159019A-EB06-42E3-9C5A-0D3EA0E92886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112066901231154&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pi3.int.pl/adv/gnats.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112066901231154&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pi3.int.pl/adv/gnats.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the \"Messages waiting\" message."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7940_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28EB68E-2F6D-4282-9498-2C2B9B5C8FB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7940:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5699B0-45CB-45DA-A52A-FA703DED2558"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7960_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE89E42C-CDC2-4504-9209-959412358487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8A58AD-C791-4803-91FA-7E197612A3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112067698624686&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://pentest.tele-consulting.com/advisories/05_07_06_voip-phones.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jul/1014406.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21260",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112067698624686&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://pentest.tele-consulting.com/advisories/05_07_06_voip-phones.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jul/1014406.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the \"Messages waiting\" message."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:grandstream:bt-100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2409FF3D-5F88-4FB0-A676-1F301EFF434B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:grandstream:bt-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0006D167-59B4-40FC-BC70-965C910C417C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112067698624686&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://pentest.tele-consulting.com/advisories/05_07_06_voip-phones.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jul/1014407.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21260",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112067698624686&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://pentest.tele-consulting.com/advisories/05_07_06_voip-phones.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jul/1014407.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message from being returned and allows remote attackers to bypass authentication and gain unauthorized access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpxmail:phpxmail:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EC6236-839D-4424-9ED2-32A0F5DDA506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpxmail:phpxmail:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB30FF89-A7AC-49EA-9CEF-96B988AEB7F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112067694016410&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15951",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112067694016410&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to execute arbitrary commands via a .lnk file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94A7070-B14B-40DC-83C0-F8AB2A78E408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FA0942-2DE1-4ED6-AA9C-A772CDFC8B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C483D79-0CC6-4925-8631-25A8EBE979E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EFF24C-2255-433B-A540-D5A528D7B55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93D329FA-D36A-4E77-A7F4-1F635C79EB4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F563F94-CFCD-4249-880F-32499BA84C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC6C402-CDC5-428D-B44A-85F81E129E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D238029-E612-4FEB-B30D-A963CB0ECD0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112069267700034&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112069267700034&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94A7070-B14B-40DC-83C0-F8AB2A78E408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FA0942-2DE1-4ED6-AA9C-A772CDFC8B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C483D79-0CC6-4925-8631-25A8EBE979E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EFF24C-2255-433B-A540-D5A528D7B55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93D329FA-D36A-4E77-A7F4-1F635C79EB4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F563F94-CFCD-4249-880F-32499BA84C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC6C402-CDC5-428D-B44A-85F81E129E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:eroom:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D238029-E612-4FEB-B30D-A963CB0ECD0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112069267700034&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112069267700034&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System allow remote authenticated users to inject arbitrary web script or HTML via the (1) thirdMenuName or (2) resourceName parameter to SystemEvent.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:mcafee:intrushield_security_management_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12AD8168-6076-49CA-A468-602B060B5553"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112066594312876&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112076813804503&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112066594312876&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112076813804503&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "McAfee IntruShield Security Management System allows remote authenticated users to access the \"Generate Reports\" feature and modify alerts by setting the Access option to true, as demonstrated using the (1) fullAccess or (2) fullAccessRight parameter in reports-column-center.jsp, or (3) fullAccess parameter to SystemEvent.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:mcafee:intrushield_security_management_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12AD8168-6076-49CA-A468-602B060B5553"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112066594312876&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112076813804503&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112066594312876&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112076813804503&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess the Manager account and possibly gain privileges via a brute force attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:mcafee:intrushield_security_management_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12AD8168-6076-49CA-A468-602B060B5553"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112066594312876&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112076813804503&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112066594312876&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112076813804503&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lantronix SecureLinx console server running firmware 2.0 and 3.0 stores /etc/ssh under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as SSH private keys."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lantronix:securelinx:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45244D4-61CC-47D8-A4D6-E9066F016957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lantronix:securelinx:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A210866-EFCD-4A95-AE4B-6CB3BD0AC349"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112075990621765&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112075990621765&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to comersus_optAffiliateRegistrationExec.asp or (2) idProduct parameter to comersus_optReviewReadExec.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5A106F-D1FE-476E-BB72-37FD4FB457B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112077057001064&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112077057001064&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to comersus_backoffice_listAssignedPricesToCustomer.asp or (2) message parameter to comersus_backoffice_message.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5A106F-D1FE-476E-BB72-37FD4FB457B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/backoffice_mult_exp.pl",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112077057001064&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/backoffice_mult_exp.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112077057001064&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote attackers to obtain passwords via a brute force attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5484A9DD-01B6-42AC-AF93-F2B4CA33DB4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112075901100640&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112075901100640&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the array from being properly escaped."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B349F-F76D-49D2-95DA-C8670E32530A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB336F6C-E81A-43C2-A252-36A192D9CADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00082231-3168-4FCC-807B-8AD3DBBFCE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FF770-BEB4-4320-AA45-399A5CC6540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97DA335-4815-4608-84D5-67F4E539D8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112084384928950&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory-082005.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112084384928950&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory-082005.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries, as demonstrated using the f parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_board:id_board:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9D3054-9404-4D2E-BA32-996140F9787D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=112098888903080&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014438",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112098888903080&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spid:spid:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DEE286-3FC2-4C48-8C1D-61E17F395B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spid:spid:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36EF78EE-C11D-46BD-8D1E-8AE69CBF7C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spid:spid:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "122E8656-B8CB-46DF-B191-FFF75027EE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spid:spid:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716EFCAC-8927-464B-AFE9-D198229CFB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spid:spid:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A139522E-7907-4246-A0A7-2843475E4429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spid:spid:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9387CE5-10CE-489C-ADB8-CEF042280B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spid:spid:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5119AF7A-1CEB-4207-AB10-6D2CF481799C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spid:spid:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC17B42-44DA-49FA-A27C-97FA12173D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spid:spid:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F8B37B-0667-4137-BB99-F89FB91C6985"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16022",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014437",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://spid.adnx.net/index_en.html#log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://spid.adnx.net/index_en.html#log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the config[ppa_root_path] variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skrypty:ppa_gallery:0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037ED773-0A6D-4D6E-B183-CBE00D2A270E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014436",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to bypass authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2128:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "EA305D4F-4307-4043-A749-B6BA0B8A8492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2128:0.001.04.504:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "83C173B0-F30E-4AE6-9B1F-2D7C146EC620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2636:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "89D31C14-FC15-456F-A5A3-3DD081C87CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2636:0.001.04.504:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "CD92B28A-F518-4056-90C8-6FEDE91E75F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_3545:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "4FE28C1C-E8D2-4161-B441-26A70E6C9A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_3545:0.001.04.504:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "FA63412F-EB3C-4D33-AFA2-01FCED65EF9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15970",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014429",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_006.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_006.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to cause a denial of service or access files via crafted HTTP requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2128:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "EA305D4F-4307-4043-A749-B6BA0B8A8492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2128:0.001.04.504:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "83C173B0-F30E-4AE6-9B1F-2D7C146EC620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2636:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "89D31C14-FC15-456F-A5A3-3DD081C87CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2636:0.001.04.504:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "CD92B28A-F518-4056-90C8-6FEDE91E75F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_3545:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "4FE28C1C-E8D2-4161-B441-26A70E6C9A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_3545:0.001.04.504:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "FA63412F-EB3C-4D33-AFA2-01FCED65EF9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15970",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014429",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_006.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_006.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2128:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "EA305D4F-4307-4043-A749-B6BA0B8A8492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2128:0.001.04.504:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "83C173B0-F30E-4AE6-9B1F-2D7C146EC620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2636:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "89D31C14-FC15-456F-A5A3-3DD081C87CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_2636:0.001.04.504:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "CD92B28A-F518-4056-90C8-6FEDE91E75F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_3545:0.001.04.044:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "4FE28C1C-E8D2-4161-B441-26A70E6C9A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_3545:0.001.04.504:*:pro_color:*:*:*:*:*",
            "matchCriteriaId" : "FA63412F-EB3C-4D33-AFA2-01FCED65EF9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15970",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014429",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_006.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_006.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwishlist:phpwishlist:0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF13FD-50DF-426D-8D49-B6493754DACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwishlist:phpwishlist:0.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BA372B-6DF3-4175-A091-9BBF3A5C8BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwishlist:phpwishlist:0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD37896B-A92D-457A-B6FC-9E0E72D44D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwishlist:phpwishlist:0.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93851B3-5BD4-4A68-8300-66A49C1FE2C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwishlist:phpwishlist:0.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB1FF8E-7E9B-42A7-B780-0D8AAC709B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwishlist:phpwishlist:0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "954D6B20-A5E0-427E-90E6-F84BB95B0463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014432",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://unix.freshmeat.net/projects/phpwishlist/?branch_id=53897&release_id=200925",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://unix.freshmeat.net/projects/phpwishlist/?branch_id=53897&release_id=200925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Computer Associates (CA) eTrust SiteMinder 5.5, when the \"CSSChecking\" parameter is set to \"NO,\" allows remote attackers to inject arbitrary web script or HTML via the (1) PASSWORD or (2) BUFFER parameters to smpwservicescgi.exe, (3) the TARGET parameter to login.fcc, and possibly other vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_siteminder:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42D8013-3E08-48A3-AA8A-6482FAB7B478"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112084050624959&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112110963416714&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014433",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112084050624959&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112110963416714&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pngren:pngren:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF558C8-A1A8-4D81-A3A2-330F57E966F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jul/0097.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15981",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014426",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14182",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jul/0097.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to viewSupportTickets.asp, or the id parameter to (3) updateCreditCards.asp or (4) deleteCreditCards.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elemental_software:cartwiz:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983269A3-3EE9-44AB-9846-AF222CA728D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/viewadvisories.ah?view=42",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014418",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://digitalparadox.org/viewadvisories.ah?view=42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in store/login.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elemental_software:cartwiz:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983269A3-3EE9-44AB-9846-AF222CA728D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://digitalparadox.org/viewadvisories.ah?view=42",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014418",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://digitalparadox.org/viewadvisories.ah?view=42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privashare:privashare:1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93069EFD-0E0C-4F5D-A5F1-8A1906C160B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=66",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Capturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext in capturixss_cfg.ini, which is readable by local users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:capturix:scanshare:1.06:build_50:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEA346E-C1F4-4CCC-AB84-FB2CEF73AECB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15995",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014409",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a long URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tonec_inc.:internet_download_manager:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7F4291-7588-4792-A0B3-202F0C0585C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014404",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ihsteam.com/download/ihsexpl/dlm.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://securitytracker.com/id?1014404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ihsteam.com/download/ihsexpl/dlm.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sukria:backup_manager:0.5.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02556FC7-D48B-4693-BAF4-74E79A7AA5BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15989",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sukria.net/packages/backup-manager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sukria.net/packages/backup-manager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read the repository."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sukria:backup_manager:0.5.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02556FC7-D48B-4693-BAF4-74E79A7AA5BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15989",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sukria.net/packages/backup-manager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sukria.net/packages/backup-manager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mms_ripper:mms_ripper:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204B3888-2CB5-4637-AC4B-3CD7DF3F6F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mms_ripper:mms_ripper:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60A6EB4-DB39-4615-8E90-BADD484F12B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mms_ripper:mms_ripper:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECBFE83-62C6-4054-BBE2-DF2BF4143101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mms_ripper:mms_ripper:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B623290B-FA4A-470B-BF6E-C01D221CDEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mms_ripper:mms_ripper:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFAF2DC1-A44F-4270-B912-E4164B7F8599"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nbenoit.tuxfamily.org/projects/mmsrip/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15987",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nbenoit.tuxfamily.org/projects/mmsrip/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-11T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt-setup:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53DE95F-B600-4AEC-A398-7BADB7F7E064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305142",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0564",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBFF713-0884-43BF-9AB8-777664FD64AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D90B1E1-23CD-4595-AD78-DA1758E9896D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=281&type=vulnerabilities",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/218621",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-193A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-035",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1190",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1331",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=281&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/218621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-193A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1219",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:image_color_management:*:gold:windows:*:*:*:*:*",
            "matchCriteriaId" : "4626D632-C6C5-4F3D-853C-090B137017BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16004/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/720742",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14214",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-193A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1125",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1280",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A330",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A440",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/16004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/720742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-193A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1859",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to execute arbitrary shells as root on other hosts in the cluster or array."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "033079D4-3D40-4C10-A1F4-F4551A73EAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8ABD90-AD2B-4FA0-A355-9D7CD6D3C486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94897983-0425-4F6C-B962-F15A187371C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050701-01-P.asc",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://securitytracker.com/id?1014454",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050701-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174665BA-F231-45F6-922C-933B8A613009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B175F5A-7CB6-44E6-9E98-FB40F6D14FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45833DC-F104-42BB-8688-4DE66AFF72F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A75AFB-2706-42FF-8534-B910997987AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728E2852-5658-4DCC-AF1E-718B292F06C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B28DC19-7E6A-4CC7-86A9-10EA9FD79FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD296DF-21C6-43E4-AC4D-8F57220ECDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AD23BE-5400-43D8-A667-7AE60B0500B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFE2FA-CAE0-42C3-AA84-4F8D59045A78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15950",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=340290",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14181",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=340290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in gals.php in PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to execute arbitrary code via the news_file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photogal:photogal_photo_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "DDC48229-F9A5-4F19-B6BE-981709D607BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014397",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to obtain sensitive information such as program variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craig_dansie:dansie_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD680BFB-BDB8-4BE1-80F1-EC1EFA1F82C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014396",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, via a direct request to AccountActions.asp and modifying the CreditLimit parameter in an UpdateCreditLimit action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52010E43-81DA-4E60-8CE9-7E60DC017DA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014443",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dragonfly Commerce allows remote attackers to change a product price by modifying the x_DragonflyCartProductPrice hidden field to (1) dc_Categorieslist.asp, (2) dc_Categoriesview.asp, (3) dc_productslist.asp, and (4) dc_productslist_Clearance.asp.  NOTE: the vendor has disputed this issue, saying that \"Dragonfly Commerce does not allow for editing prices nor does it allow for viewing information about clients stored in the database except by the store owner and authorized staff as appointed in the store administration.\"  However, SecurityTracker claims that they have been able to confirm the problem"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incredible_interactive:dragonfly_commerce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0142B46-7266-429E-ABB9-376090266119"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112121930328341&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014451",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/viewadvisories.ah?view=46",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112121930328341&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/viewadvisories.ah?view=46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote attackers to modify SQL statements and possibly execute arbitrary SQL commands via the (1) key parameter to dc_Categoriesview.asp, (2) dc_productslist_Clearance.asp, (3) PID parameter to ratings.asp, (4) dc_Productsview.asp, (5) start, (6) key_mp, (7) searchtype, or (8) psearch parameters to dc_forum_Postslist.asp.  NOTE: the vendor has disputed this issue, saying that the error messages arise from invalid category and product numbers.  Assuming that this is the case, the issue still satisfies the CVE definition of \"exposure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incredible_interactive:dragonfly_commerce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0142B46-7266-429E-ABB9-376090266119"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112121930328341&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalparadox.org/viewadvisories.ah?view=46",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112121930328341&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalparadox.org/viewadvisories.ah?view=46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFAF9C8-DB67-446E-B63C-530CB0C170B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F30383-D23F-4CA5-BC02-7716398BC042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADEF40C-4C56-4893-B757-15966ED5A925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32956E6-A13B-4663-BBC9-FEB08A1DCC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AABE2F0-FEC1-4BDE-B1C0-92FF2CEA48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652F54CA-1CCA-4BC9-8728-A0F6FABF8817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BCB9D-9AEF-40E2-8291-50EC2A083775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88435083-D7A8-4679-BEB1-4B6526454C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145A8B1A-573D-4695-B66A-FF8EA2556DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9572349-9433-415F-B81B-10A1375AF33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014427",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service (crash) during authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFAF9C8-DB67-446E-B63C-530CB0C170B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F30383-D23F-4CA5-BC02-7716398BC042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADEF40C-4C56-4893-B757-15966ED5A925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32956E6-A13B-4663-BBC9-FEB08A1DCC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AABE2F0-FEC1-4BDE-B1C0-92FF2CEA48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652F54CA-1CCA-4BC9-8728-A0F6FABF8817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BCB9D-9AEF-40E2-8291-50EC2A083775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88435083-D7A8-4679-BEB1-4B6526454C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145A8B1A-573D-4695-B66A-FF8EA2556DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9572349-9433-415F-B81B-10A1375AF33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E00689-F421-4B3B-96D7-14DC66DB42B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1FBE144-CB33-4726-B8E6-52CA42BE7C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A6721E-E25B-4502-892A-46054D920C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A4FCCB-D0CC-4B53-AAF0-F338950B05F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB172967-4C1A-4E5E-9B10-606CD185E495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E2BEE2-6FBE-43B4-90AA-590D7CAEDA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.704:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A071CC-3210-4D98-A5D3-82FBCB29C657"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014427",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/standardhistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/standardhistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP message to an RPC/Encoded method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167E1DC9-5E77-4B25-9F59-207ABE2BDCC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16005",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14217",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.spidynamics.com/spilabs/advisories/aspRCP.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.spidynamics.com/spilabs/advisories/aspRCP.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the \".pif\" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so this may be an issue in the protocol or MSN servers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:msn_messenger_service:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FDD3E9-B2FB-40C3-938B-0280C2F3E1E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014444",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/viewadvisories.ah?view=45",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.messenger-blog.com/?p=146",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://securitytracker.com/id?1014444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalparadox.org/viewadvisories.ah?view=45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.messenger-blog.com/?p=146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a \"watched\" conversation thread, which could allow remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85FD3557-956D-4A96-8AA5-5FD9DB87FD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D45F2775-A10B-4834-A2EF-7498EEAB155D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7E8B2E-373E-4F6A-86A0-2456F19ACE37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/default.aspx/kb/900930",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14225",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.microsoft.com/default.aspx/kb/900930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\\MAILSRV\\Admin key, which allows local users to gain administrator privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softiacom:wmailserver:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD2D6D1-FEDF-47A9-A399-A129247783AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112120030308592&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014450",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14212",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112120030308592&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bdc_enterprises:web_wiz_forums:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBAE540-48B5-4315-9B9E-747DCAA2B18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bdc_enterprises:web_wiz_forums:7.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0328A7-9075-4D43-B194-6428D00BE5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bdc_enterprises:web_wiz_forums:8.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CA3731-FE94-4B82-B13D-DF80591CDF15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/14207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directories with insufficient access control, which allows remote attackers to obtain sensitive information such as account names and password hashes, as demonstrated using data/newusers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blog_torrent:blog_torrent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.92",
            "matchCriteriaId" : "4939AA5A-D6D8-4DAA-91F8-D12C7CEAE37B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112110868021563&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014449",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112110868021563&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Electronic Mail Operator (elmo) 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elmo:elmo:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C107434D-984D-4BDA-BF9D-19EF8E2C0E56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elmo:elmo:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF05CA60-64EF-4BC3-A96E-354CD12970A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elmo:elmo:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6CFDFD-7052-4645-A402-FA1BBEBC21B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elmo:elmo:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8957A587-CE07-4F34-8363-3F4F730D4F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elmo:elmo:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA138E3-443B-4B05-BC3E-B869258B3843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elmo:elmo:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9CAEE2-9F6F-4C94-B645-BE7B6E8195C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elmo:elmo:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A226F4ED-03EC-423E-A0DC-4C6059ED5B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elmo:elmo:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1782A4D7-BF94-4F0D-A255-FDDF180C4732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elmo:elmo:1.3.2_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9223530-60ED-42E9-BA7C-AFC4A851783B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15977",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/elmo-06272005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/elmo-06272005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:high_availability_linux_project:heartbeat:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41611406-0032-4654-934C-98FE706FB3F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16039",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long command line argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15636",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/8816",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13909",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/8816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in multiple \"p\" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to (1) penable or other hard-linked files including (2) pdisable, (3) pstart, (4) phold, (5) pdelay, or (6) pshare."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E38D56-80BA-460C-A296-ED7F506E4364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD01F19-4B30-4147-AC48-7F5C64EE80CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15636",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-focus.com/advisories/8684",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13915",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-focus.com/advisories/8684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E38D56-80BA-460C-A296-ED7F506E4364"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD01F19-4B30-4147-AC48-7F5C64EE80CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15636",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-focus.com/advisories/8684",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13914",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-focus.com/advisories/8684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E38D56-80BA-460C-A296-ED7F506E4364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD01F19-4B30-4147-AC48-7F5C64EE80CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15636",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0004.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-focus.com/advisories/8819",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13912",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-focus.com/advisories/8819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13911",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via long command line arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.caughq.org/advisories/CAU-2005-0007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by using all ephemeral ports."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014421",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\\0) characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oftpd:oftpd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854C38E9-D8B1-44E7-BEF7-96E3E921BE36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014413",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpvm:xpvm:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76353001-B366-4DBA-8539-9293A966C2AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16040",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/xpvm-06272005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/xpvm-06272005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does not quickly time out Realtime Information Server Data Collection (RISDC) sockets, which results in a \"resource leak\" that allows remote attackers to cause a denial of service (memory and connection consumption) in RisDC.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CEBAD7-7BDD-44DE-A591-C7EFD4E3F67E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9306CD67-C43D-46F7-B76B-1FA0ACC6135E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A008ACB8-54DD-4C49-A35D-3FA7D3CBF38F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373E71AE-C735-4476-A574-56C35BAD8DB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to cause a denial of service (memory consumption and restart) via crafted packets to (1) the CTI Manager (ctimgr.exe) or (2) the CallManager (ccm.exe)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CEBAD7-7BDD-44DE-A591-C7EFD4E3F67E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9306CD67-C43D-46F7-B76B-1FA0ACC6135E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A008ACB8-54DD-4C49-A35D-3FA7D3CBF38F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373E71AE-C735-4476-A574-56C35BAD8DB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number of Admin Service Tool (AST) logins that fail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CEBAD7-7BDD-44DE-A591-C7EFD4E3F67E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9306CD67-C43D-46F7-B76B-1FA0ACC6135E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A008ACB8-54DD-4C49-A35D-3FA7D3CBF38F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373E71AE-C735-4476-A574-56C35BAD8DB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code or corrupt memory via crafted packets that trigger a memory allocation failure and lead to a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CEBAD7-7BDD-44DE-A591-C7EFD4E3F67E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9306CD67-C43D-46F7-B76B-1FA0ACC6135E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A008ACB8-54DD-4C49-A35D-3FA7D3CBF38F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373E71AE-C735-4476-A574-56C35BAD8DB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in F5 BIG-IP 9.0.2 through 9.1 allows attackers to \"subvert the authentication of SSL transactions,\" via unknown attack vectors, possibly involving NATIVE ciphers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70E46B6-FFE2-47A6-A907-E606E8D16495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8783BBE4-A081-4409-A369-B063C4D73C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951A82A0-3C91-4B50-AE4D-929A4EA75F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38992D08-E1FF-4C89-982E-635C43B5BC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:tmos:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0E5C68-817D-4C60-9FF8-EFD823AF0155"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16008",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014452",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://tech.f5.com/home/bigip-next/solutions/security/sol4944.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://tech.f5.com/home/bigip-next/solutions/security/sol4944.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code via the (1) doc_path parameter to getpage.php or (2) set_menu parameter to lib/static/header.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:iphotoalbum:iphotoalbum:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01572321-9A9D-44BC-80F9-7A466DBC14B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014448",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-March/001474.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/23189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-March/001474.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/23189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044E2E34-470C-45C9-8136-22493077D842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FB2555-7146-4A75-9D24-250BBC09244A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "949F0BC0-A79E-4B1D-894D-650CF68109F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "616AE17F-F5B4-4D64-B287-0AAB189C802A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74246580-F351-4EAE-9406-2386CFF1819D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077FFAAB-BACD-43F4-B146-DBFFD58CE619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C715839-F020-4F42-94F0-9FA34F294578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3113CF64-DFDD-413F-BB85-5A8B251608D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99CFB2E0-B99B-4154-8A6E-B6A8483ACEBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F8CC3-5428-4F72-B4DC-299A50EE9C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28252347-44DD-4302-8170-21DDB0A3B3A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "740F27D0-4E66-4E2C-A2AB-54F5211F796F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA227895-91FF-4689-A03A-D712EAB5E369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42DBF05-906B-47E6-BC75-50EBA38B72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E99CD1-FDCA-4091-8224-AC84293E4B0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://moodle.org/doc/?frame=release.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16028",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://moodle.org/doc/?frame=release.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2095",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files."
      }, {
        "lang" : "es",
        "value" : "options_identities.php en SquirrelMail 1.4.4 y anteriores usa la función \"extract\" para procesar la variable \"$_POST\", lo que permite que atacantes remotos modifiquen o lean las preferencias de otros usuarios, lleven a cabo ataques XSS o escriban ficheros de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBF40C5-6272-427C-97A1-3CE3B1D47B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55A98B3-34ED-4A90-BB78-50CB56B1B51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5143ED-D4C5-4830-9C96-0B54D03679CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B765AEC-09E9-456C-8B57-09927E55D119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAFC3B0-DCE3-4190-B279-E095C666FA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9291A565-0BD6-4B5E-B45F-9DE65AB8159D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C44025-C79D-4791-8EF6-3E26786E194E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-756",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00090-07142005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-595.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405200",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2005-07-13",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163047",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21359",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10500",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00090-07142005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-595.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2005-07-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the download folder."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de franqueo de directorioes en DownloadProtect anterior a la 1.0.3 permite que atacantes remotos lean ficheros por encima de la carpeta de descarga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sven-ove_bjerkan:downloadprotect:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9516A945-2A82-4D73-8DB2-18FACB3A6D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sven-ove_bjerkan:downloadprotect:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F69C3A-A01B-4531-9DC4-3540CE32A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sven-ove_bjerkan:downloadprotect:1.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793C278B-ED29-46BF-BFD7-02413805052C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16003",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion vulnerability."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades desconocidas en Jinzora 2.0.1 tienen un impacto desconocido (posiblmente  involucran una vulnerabilidad de inclusión de ficheros PHP)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68602878-B464-408A-98AE-DC41FBE5A758"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freshmeat.net/projects/jinzora/?branch_id=43140&release_id=200390",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15952",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://freshmeat.net/projects/jinzora/?branch_id=43140&release_id=200390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en  Bluetooth FTP client (BTFTP) en Nokia Affix 2.1.2 and 3.2.0 permite que atacantes remotos ejecuten código arbitrario mediante un nombre de fichero largo en un recurso compartido OBEX."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AA1BEB-B2F9-4FF0-B606-677C15C3F5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF228751-7CC7-46CC-A2B5-CFE47F6D5A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13689EDD-8324-4377-92BF-88F50810D90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53918FB-12AD-42CA-823B-C2830BE99EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0626DDC-4FD6-484D-83CB-92B61CDD053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53EDC5B-8B67-4F93-90C8-17721F02A1CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509BB72F-0689-46B9-85F1-9B7C4AD7F847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4075DD71-E0F8-40FF-88FF-11289200743F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F504D8-C1BB-47AA-AF41-3AC8ABB17E8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15F9E16-A1B4-4B5B-975E-E9969C41B5E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://affix.sourceforge.net/affix_212_sec.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0712a%5D.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14230",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://affix.sourceforge.net/affix_212_sec.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0712a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP remoto en secure.php en PHPSecurePages (phpSP) 0.28beta  y anteriores  permite que atacantes remotos ejecuten código arbitrario mediante el parámetro \"cfgProgDir\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.11_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "039E1A02-C2D5-44EE-BF21-5534DE5BF965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.12_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317871E0-8C5F-4F23-A42E-A7CCC4CC4228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.13_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725E97D6-D50A-4301-A9CA-84BEE2E01997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.14_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5514AF7-1F42-43A7-A2C3-21A4B48F316A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.15_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "227194A8-E005-41A4-A31F-275B401141C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.16_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF7AC7E-1DCD-40D1-818E-BBD8701988E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.17_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80661A8D-D2A7-4CE5-A1C0-6B07E9C47751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.18_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DDBE8FF-3A12-4EAE-BC01-F79BE6E1941E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.19_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40AC697-4EC4-4286-A53C-6B9BD1676B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.20_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391C1EB3-4EE8-4FEC-9F72-AADF62EFB6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.21_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5563861B-AFFE-4729-9AA1-86673C66D0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.22_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E7DC8AC-BE3C-4ED0-AB37-3FC58130FCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.23_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13436D19-DC78-426D-835E-C83476BC7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.24_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5EBCFD-4E69-40EB-AAA8-39BB988E9958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.25_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041782D5-5A12-4083-9456-5ECBC3A95379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.26_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0C85F4-D673-4542-AD14-DD3C5D48DA0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.27_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0138A5-F833-4A59-A83A-439A96E39D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_reality:phpsecurepages:0.28_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F48D48-641D-4E7E-96D7-98912F17A19A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014410",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID."
      }, {
        "lang" : "es",
        "value" : "PhpAuction 2.5 permite que atacantes remotos se salten la autentificación y obtengan privilegios como otro usuario fijando la cookie PHPACUTION_RM_ID a la ID del usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gianluca_baldo:phpauction:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB001EB-3B78-4134-AFD0-D73E0DE5D941"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014423",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may not be part of the PhpAuction product, so it is not included in this description."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en PhpAuction 2.5 permite que atacantes remotos modifiquen sentencias SQL mediante el parámetro \"category\" en \"adsearch.php\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gianluca_baldo:phpauction:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB001EB-3B78-4134-AFD0-D73E0DE5D941"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014423",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web script or HTML via the lan parameter to (1) index.php or (2) admin/index.php, or (3) the auction_id parameter to profile.php.  NOTE: there is evidence that viewnews.php and login.php may not be part of the PhpAuction product, so they are not included in this description."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados en PhpAuction 2.5 permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro \"lan\" a \"index.php\", \"admin/index.php\" o el parámetro \"acution_id\"  en \"profile.php\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gianluca_baldo:phpauction:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB001EB-3B78-4134-AFD0-D73E0DE5D941"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15967",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014423",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via \"..\"  sequences in the lan parameter to (1) index.php or (2) admin/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de franqueo de directorios en PhpAuction 2.5 permite que atacantes remotos lean ficheros arbitrarios o incluyan ficheros PHP locales mediante secuencias \"..\" en el parámetro \"lan\" a 1) index.php o 2) admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gianluca_baldo:phpauction:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB001EB-3B78-4134-AFD0-D73E0DE5D941"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014423",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via \"%2e%2e%2f\" (encoded dot dot) sequences in the formLanguage parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de franqueo de directorioes en phpPgAdmin 3.1 hasta la 3.5.3 permite que atacantes remotos accedan a ficheros arbitrarios mediante secuencias \"%2e%2e%2f\" en el parámetro \"formLanguage\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgadmin:phppgadmin:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23D4530-0B63-459C-B7F2-84F5866CCA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgadmin:phppgadmin:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A293B3-3E81-4B7E-8D24-EC1B57C2CD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgadmin:phppgadmin:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1893B7A4-D303-4DA7-B3C5-264413A5D473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgadmin:phppgadmin:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974D3D46-7DEB-45E5-B615-D95C2355F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgadmin:phppgadmin:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A913E0DA-8076-4850-B218-F65C8A86F370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgadmin:phppgadmin:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45DAC8C2-1469-41EA-B155-A9F24A46DD56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/dailydave/2005-q3/0010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014414",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=342261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14142",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/88188a8c-eff6-11d9-8310-0001020eed82.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/dailydave/2005-q3/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=342261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/88188a8c-eff6-11d9-8310-0001020eed82.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author_id parameter."
      }, {
        "lang" : "es",
        "value" : "La función \"saveProfile\" en PhpSlash 0.8.0 permite que atacantes remotos modifiquen perfiles arbitrarios y ganen privilegios modificando el parámetro \"author_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B370B91-6B3C-4423-ABE5-840999099D0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112076117708139&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15936",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014415",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112076117708139&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via the photoroot parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP remoto en photolist.inc.php en Squito Gallery 1.33 permite que atacantes remotos ejecuten código arbitrario mediante el parámetro \"photoroot\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squitosoft:squito_gallery:1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729F3037-C376-4AED-A066-F4B591001A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16009",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014447",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usanet_creations:domain_name_auction:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D77AED-73EF-4375-B1C0-E80502B86563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usanet_creations:makebid_auction_deluxe:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A720DA2C-10D8-467A-B375-665CFFC4198F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usanet_creations:makebid_auction_deluxe:3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9AE346F-60CA-4B6F-A627-423FBF555460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usanet_creations:makebid_auction_standard:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B040E0-C50A-419F-9DB4-E1D9467EEAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usanet_creations:makebid_reverse_auction:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B80B42-B16A-4DDF-B871-B687B1F26CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usanet_creations:standard_classified_ads:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BAEB16-830A-4E2C-B4E3-F27F3BFA66C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usanet_creations:usanet_shopping_mall:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8002F5A8-7CAC-4BEA-AFE4-0E4A2E786068"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014411",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2260",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.mozilla.org/show_bug.cgi?id=289940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-45.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-multiple-issues.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100013",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10132",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1226",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.mozilla.org/show_bug.cgi?id=289940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-45.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-multiple-issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2261",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-46.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-multiple-issues.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=292589",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=292591",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100012",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10947",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1348",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A808",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-46.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-multiple-issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=292589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=292591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2262",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the \"Set As Wallpaper\" (in Firefox) or \"Set as Background\" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka \"Firewalling.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mikx.de/firewalling/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-47.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-multiple-issues.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5ZP0E0UGAK.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mikx.de/firewalling/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-multiple-issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5ZP0E0UGAK.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2263",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-48.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100016",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11629",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1281",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1311",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-48.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2264",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-49.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=294074",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100009",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9887",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-49.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=294074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2265",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-50.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-multiple-issues.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=295854",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10397",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A781",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-50.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-multiple-issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=295854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2266",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords from web sites whose child frames do not verify that they are in the same domain as their parents."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15549",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15551",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15553",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-52.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21332",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100107",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10712",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A773",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-52.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2267",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014469",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-53.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=298255",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100006",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11334",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1172",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-53.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=298255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2268",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the \"Dialog Origin Spoofing Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15489",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-54.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10517",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1268",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1313",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-54.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2269",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties (\"XHTML node spoofing\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-55.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-multiple-issues.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=298892",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1258",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9777",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-55.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-multiple-issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=298892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2270",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014470",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/652366",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-56.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=294795",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=294799",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=295011",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=296397",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100003",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A550",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A817",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-252.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/652366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-56.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=294795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=294799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=295011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=296397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the \"Dialog Origin Spoofing Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_clauss:icab:2.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "106C2554-4B9F-4BA3-A3EE-DBFCF86D2EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15477",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/15477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the \"Dialog Origin Spoofing Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-12/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-12/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 7.x and 8 before 8.01 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the \"Dialog Origin Spoofing Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.00",
            "versionEndExcluding" : "8.01",
            "matchCriteriaId" : "E409E0CC-BAB2-475F-88F3-8D5E93F61B19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15488",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-8/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/15488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-13T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the \"Dialog Origin Spoofing Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15491",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15492",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-9/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/902333.mspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-9/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/902333.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2277",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command."
      }, {
        "lang" : "es",
        "value" : "Bluetooth FTP client (BTFTP) en Nokia Affix 2.1.2 y 3.2.0 permite que atacantes remotos ejecuten comandos arbitrarios mediante metacaracteres de shell en el argumento \"filename\" de un comando PUT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53EDC5B-8B67-4F93-90C8-17721F02A1CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15F9E16-A1B4-4B5B-975E-E9969C41B5E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://affix.sourceforge.net/affix_212_sec.patch",
        "source" : "security@debian.org"
      }, {
        "url" : "http://affix.sourceforge.net/affix_320_sec.patch",
        "source" : "security@debian.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112119962704397&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-762",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0712b%5D.txt",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14232",
        "source" : "security@debian.org"
      }, {
        "url" : "http://affix.sourceforge.net/affix_212_sec.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://affix.sourceforge.net/affix_320_sec.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112119962704397&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0712b%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory."
      }, {
        "lang" : "es",
        "value" : "MIT Kerberos 5 (krb5) 1.3 hasta la 1.4.1 Key Distribution Center (KDC) permite que atacantes remotos causen una denegación de servicio (caída de la aplicación) mediante ciertas conexiones válidas de TCP que provocan la liberación de memoria no reservada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F01A83F-3BD1-4DED-979A-B4B6B23039FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEB5A36-8F72-417A-AC92-149612EC7BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8704B5-F37B-4C61-A924-3774A29BFEB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F953CEBA-BAC0-48DF-A3D0-1FABCC9963E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED81A044-8A7B-4EEF-A4B3-EA49D76FAAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AA5727-BD83-45CF-B308-BA5F8A577B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E088E64-6FBD-4148-8F78-506364B7BB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0EECF-7787-442B-9888-D22F7D36C3DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF344AED-BE00-4A9B-A9DE-C6FB0BEE4617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112122123211974&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101809-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/2005-002-patch_1.4.1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY85474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/259798",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-567.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.turbolinux.com/security/2005/TLSA-2005-78.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/224-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112122123211974&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101809-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/2005-002-patch_1.4.1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY85474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/259798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.turbolinux.com/security/2005/TLSA-2005-78.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/224-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain valid TCP or UDP request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en MIT Kerberos 5 (krb5) 1.3 hasta la 1.4.1 Key Distribution Center (KDC) permite que atacantes remotos causen una denegación de servicio (caída de la aplicación) y posiblmente ejecuten código arbitrario mediante cierta petición válida TCP o UDP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F01A83F-3BD1-4DED-979A-B4B6B23039FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEB5A36-8F72-417A-AC92-149612EC7BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8704B5-F37B-4C61-A924-3774A29BFEB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F953CEBA-BAC0-48DF-A3D0-1FABCC9963E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED81A044-8A7B-4EEF-A4B3-EA49D76FAAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AA5727-BD83-45CF-B308-BA5F8A577B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E088E64-6FBD-4148-8F78-506364B7BB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0EECF-7787-442B-9888-D22F7D36C3DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF344AED-BE00-4A9B-A9DE-C6FB0BEE4617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112122123211974&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101809-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-002-kdc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY85474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/885830",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-562.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-567.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.turbolinux.com/security/2005/TLSA-2005-78.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/224-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112122123211974&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101809-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-002-kdc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY85474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/885830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-562.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.turbolinux.com/security/2005/TLSA-2005-78.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/224-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de doble liberación de memoria en la función krb5_recvauth en MIT Kerberos 5 (krb5) 1.4.1 y anteriores permite que atacantes remotos ejecuten código arbitrario mediante ciertas condiciones de error."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "0C9AE76C-0557-4DF0-B227-ADFA14933DFB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.2",
            "matchCriteriaId" : "3E57D58E-346D-4916-8A88-475D1D91C82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.2",
            "matchCriteriaId" : "93266AB6-D81E-48D6-ABB6-EC639FF9F278"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000993",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112119974704542&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16041",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17899",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22090",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014461",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101810-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-757",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-11.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/623332",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-562.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-567.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446940/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446940/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14239",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0036",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2005/TLSA-2005-78.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1066",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3776",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21055",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9819",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/224-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112119974704542&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101810-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/623332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_17_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-562.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446940/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446940/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2005/TLSA-2005-78.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/224-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1914",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file."
      }, {
        "lang" : "es",
        "value" : "CenterICQ 4.20.0 y anteriores crea ficheros temporales con nombres de ficheros predecibles, lo que permite que usuarios locales sobreescriban ficheros arbitrarios mediante un ataque de enlaces simbólicos en el fichero temporal \"gg.token.PID\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCBE8AE-0EEC-47B2-8035-92214D3F6758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CC839E-C455-437E-802F-5005F961FD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA6C76D-65C1-4964-BF73-5857A83B47CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584CF003-3F36-4657-A29D-B663E37C8185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06A8E51-EE71-44C5-86BC-56E80C0CD749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C66D704-5C59-43F5-83A7-DDCA8091FF3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94147E48-5408-4166-9F5E-9959920F001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7D7062-2846-49AC-9A50-C3C94EE406FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.6.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CDBE0E-0F53-497C-9938-5F43A58C43B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFCF3DED-8400-4C01-B024-B72A38D25344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692C8394-89BC-4D45-93EE-7298F280AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B542683-239D-45AF-A03C-8756E227236F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169063FC-8F03-4DCC-83E9-B409955ADEB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5089220-5A3C-452E-9297-90E10626F12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.7.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B597EB-6911-4635-8AE0-328566C7578B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44BA00BE-7D8E-4941-ACB2-181615E4F8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.7.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11A8822-324B-4362-883D-0036033F1C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2D16B5-2069-444B-BFFC-E71265484174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC176137-99C2-4464-B2FC-5723D313DDDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBCC1C14-038F-4C84-A818-29A597BA318A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218B7E73-CAC4-4031-BAE7-5D0FF7FA7B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C4A10E-0CD2-4FBC-9B71-497B59E30E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB15417E-54DC-4C5C-AF2B-9981AEDBB204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32FE8DB7-1640-4025-8A48-D4509DE43710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65DC489-A0C9-4A75-B1C5-48664149B248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98BD0AF-D08B-425B-9AA6-B7CA64DB86AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C645D83F-719F-4A1D-BED4-331434143513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDD7B8-7082-4BDB-9930-A918C1C17C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA84107B-3FC4-469E-82E2-B3AB88D5933B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B14DFE-82C3-470A-B69F-723B5D695F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA38135-C3CE-4CF7-BB1C-C206381F5746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7E355E-851C-4BA1-920A-C9199590F4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08451E4-DE0F-4A03-99A2-8DABBBD19673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFFA3B0-4178-46B3-B0BC-36D94508CB11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC88F504-56AE-4177-BBB8-8D3DA12B5986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06E7D6A-6A68-483E-9A86-AF7584DD79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D327FC3-A968-4FF5-B5E8-961BBE73C527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E58DE8E-9EFC-42DA-B8FE-7A197B2B6C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAAACE2C-A4B7-4DE1-8F22-D3D531AC3B95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0301CC-47C2-4B5D-B209-9EC17CC7342A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48652F05-E788-4657-99A6-A823361FF2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66475E5F-109E-4798-862C-4777CA43C8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FC4971-E41C-433B-BEB9-A929D989502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD5258C-3794-4B8F-9FD0-B2C2C11BB20E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E302A0A4-9B88-4303-ACCF-F61FEF5D6CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C20BEB2-F7F6-4F65-8CA9-359D1A458657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC6E591-2E03-4C35-BA41-ED83A6A35DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A729142-715C-4342-8A9A-82A927F7D4D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFEC2193-E72E-4E88-AF12-3DA17F317957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7A9C2C-2D27-4B4D-8243-6CFF71B5B89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8247CA7B-63D0-40B4-BDEB-F7F6977A7A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D228190A-0147-43F5-9F5A-FF3D9FAA12BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46494445-C015-49FC-BC22-6CF11DB9E524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF480B43-39B5-4CC4-9618-604E7F6BEA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9327469-2982-4C33-B5B1-70C43BC9BECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0ACE60-DE41-43A1-BE91-A12573457757"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F60E9DD9-9DB5-4FD4-88CC-5B9C09F31195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C09B7EF-8FAE-4DB6-9C47-39B70F30B988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.9.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DCF7591-6577-4B60-A3B4-F414323743EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFF31C2-6F14-4F93-84E2-E596168491CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362F3D2-9BAD-4BD9-BDAC-FAE98EAA3C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC23E15-D1DD-46A5-BAEB-C985C4E6B354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D542930E-3BD8-476A-A48B-1DD7BA31558C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9823A36-1B02-4F28-BA93-7D0065253D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.13.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4414CBA4-015A-4B9D-AC76-87D4C22E9D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE7391D-D3C7-4ACB-B76F-0D230243B392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.14.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3003A41-6620-4263-8151-31B9FEAF3DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDEC439-FC61-4C6F-887C-9B30D9440055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.20.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A664988-0D0D-4F0A-B127-DEFF76FBD877"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-754",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14144",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.zataz.net/adviso/centericq-06152005.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/centericq-06152005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Darwin Streaming Server 5.5 and earlier allows remote attackers to cause a denial of service (application crash) via a URL with a filename containing a .cgi extension and an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1, a different vulnerability than CVE-2003-0421 and CVE-2003-0502."
      }, {
        "lang" : "es",
        "value" : "Apple Darwin Streaming Server 5.5 y anteriores permite que atacantes remotos causen una denegación de servicio (caída de la aplicación) mediante una URL con un nombre de fichero con extensión .cgi y nombre de dispositivo de MS-DOS (tal como AUX, CON, PRN, COM1, o LPT1)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:darwin_streaming_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "8B045CC6-497B-4689-8F7B-FA16CA28954E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112126999514361&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secway.org/Advisory/AD20050713.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112126999514361&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/Advisory/AD20050713.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en demonio IMAP (imapd) en  MailEnable Professional 1.54 permite que usuarios autentificados remotos ejecuten código arbitrario mediante el comando \"status\" con un nombre largo de \"mailbox\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9572349-9433-415F-B81B-10A1375AF33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112127188609993&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/common/showdoc.php?idx=467&idxseccion=10",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112127188609993&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/common/showdoc.php?idx=467&idxseccion=10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco ONS 15216 Optical Add/Drop Multiplexer (OADM) running firmware 2.2.2 and earlier allows remote attackers to cause a denial of service (management plane session loss) via crafted telnet data."
      }, {
        "lang" : "es",
        "value" : "Cisco ONS 15216 Optical Add/Drop Multiplexer (OADM) running firmware 2.2.2 y anteriores permite que atacantes remotos causen una denegación de servicio mediante datos telnet manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ons_15216_optical_add_drop_multiplexer_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.2",
            "matchCriteriaId" : "B589E78E-3BDD-46CD-8811-6BA2582A2277"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050713-ons.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050713-ons.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP packet."
      }, {
        "lang" : "es",
        "value" : "Cisco Security Agent (CSA) 4.5 permite que atacantes remotos causen una denegación de servicio (caída del sistema) mediante un paquete IP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:security_agent:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5562E755-E4A3-4656-859A-40757012BE89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050713-csa.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050713-csa.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebEOC before 6.0.2 uses a weak encryption scheme for passwords, which makes it easier for attackers to crack passwords."
      }, {
        "lang" : "es",
        "value" : "WebEOC anteriror a la 6.0.2 usa esquema de encriptación débil para los passwords, lo que hace más fácil para los atacantes el conocer esos passwords."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juvare:webeoc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.2",
            "matchCriteriaId" : "04EF9920-C343-43C7-8AE3-32A5813A9CB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/491770",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BWQDQ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/491770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BWQDQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in WebEOC before 6.0.2 allow remote attackers to inject arbitrary web script and HTML via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados en WebEOC anterior a la 6.0.2 permite que atacantes remotos inyecten script web arbitrario o HTML mediante métodos de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esi_products:webeoc:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5155A6B-539C-4547-B172-BC69A31C0BC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/138538",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BVST4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/138538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BVST4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated users to cause a denial of service (system and database resource consumption) via a large file."
      }, {
        "lang" : "es",
        "value" : "WebEOC anterior a la 6.0.2 no restringe adecuadamente el tamaño del fichero a subir, lo que permite que usuarios remotos no autentificados causen una denegación de servicio mediante un fichero muy grande."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esi_products:webeoc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "09DA3374-FE82-4EAD-97A7-506648D89D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/956762",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BWLER",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/956762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BWLER",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in WebEOC before 6.0.2 allow remote attackers to modify SQL statements via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en WebEOC anterior a la 6.0.2 permiten que atacantes remotos modifiquen sentencias SQL mediante métodos de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esi_products:webeoc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "09DA3374-FE82-4EAD-97A7-506648D89D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/372797",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6C8Q27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/372797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6C8Q27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebEOC before 6.0.2 stores sensitive information in locations such as URIs, web pages, and configuration files, which allows remote attackers to obtain information such as Usernames, Passwords, Emergency information, medical information, and system configuration."
      }, {
        "lang" : "es",
        "value" : "WebEOC anterior a la 6.0.2 almacena información confidencial en localizaciones tales como URIs, páginas web y ficheros de configuración. Esto permite que atacantes remotos obtengan información tal como nombres de usuarios, claves, información médica y de emergencia y configuración del sistema."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esi_products:webeoc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "09DA3374-FE82-4EAD-97A7-506648D89D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/165290",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BWPXL",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/165290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BWPXL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a resource."
      }, {
        "lang" : "es",
        "value" : "WebEOC anteior a la 6.0.2 no comprueba adecuadamente la autorización del usuario, lo que permite que atacantes remotos obtengan privilegios mediante una petición directa al recurso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esi_products:webeoc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "09DA3374-FE82-4EAD-97A7-506648D89D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/258834",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BWLWG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/258834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6BWLWG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large TCP packet with a leading space, possibly triggering a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "SoftiaCom wMailServer 1.0 y 2.0 permite que atacantes remotos causen una denegación de servicio (caída de la aplicación) mediante un paquete TCP con un espacio en blanco inicial. Lo que posiblemente activa un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softiacom:wmailserver:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD2D6D1-FEDF-47A9-A399-A129247783AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softiacom:wmailserver:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42513689-7C57-4DF9-925D-812C2A20AD59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112122500308722&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112122500308722&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHPCounter 7.2 allows remote attackers to inject arbitrary web script or HTML via the EpochPrefix parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en PHPCounter 7.2  permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro \"EpochPrefix\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcounter:phpcounter:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCDF571-5C6E-4838-AB52-0C8C857D450A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112129495128834&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15816",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112129495128834&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct request to prelims.php, which reveals the path in an error message."
      }, {
        "lang" : "es",
        "value" : "PHPCounter 7.2  permite que atacante remotos obtengan información confidencial mediante una petición directa a \"prelims.php\" (lo que revela el path en un mensaje de error)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcounter:phpcounter:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCDF571-5C6E-4838-AB52-0C8C857D450A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112129495128834&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15816",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112129495128834&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wps_shop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and (2) cat variables."
      }, {
        "lang" : "es",
        "value" : "wps_shop.cgi en WPS Web Portal System 0.7.0 permite que atacantes remotos ejecuten ordenes web de su elección mediante metacaracteres de 'shell' en la variable (1) \"art\" a (2) \"cat\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:wps:web_portal_system:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8EE1A6-D176-4CB9-AAC1-E221BC2263C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112128870110418&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112128870110418&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Oracle JDeveloper 9.0.4, 9.0.5, y 10.1.2 pasa el password en texto plano como parámetro cuando arranca \"sqlplus\", lo que permite que usuarios locales obtengan información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E292E294-90C2-4780-82B6-1265F8FF6040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5EA5B15-5ABD-459D-8327-9DDC1040C04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7F9B0-2BF0-430D-ACB3-8E3A41AD31A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112129082323341&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_jdeveloper_passes_plaintext_password.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112129082323341&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_jdeveloper_passes_plaintext_password.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Oracle JDeveloper 9.0.4, 9.0.5, y 10.1.2 almacena passwords como texto plano en 1) IDEConnections.xml, (2) XSQLConfig.xml y (3) settings.xml. Esto permite que usuarios locales obtengan información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E292E294-90C2-4780-82B6-1265F8FF6040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5EA5B15-5ABD-459D-8327-9DDC1040C04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7F9B0-2BF0-430D-ACB3-8E3A41AD31A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112129177927502&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_jdeveloper_plaintext_password.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112129177927502&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_jdeveloper_plaintext_password.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Oracle Formsbuilder 9.0.4  almacena nombres de usuarios y claves de bases de datos en un fichero temporal (que no se borra después de haber sido usado). Esto permite que usuarios locales obtengan información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms_builder:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75321301-D674-4085-8665-8575ED3146E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112129452232307&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21343",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112129452232307&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers."
      }, {
        "lang" : "es",
        "value" : "Oracle Forms 4.5, 6.0, 6i, y 9i  en Unix, cuando un número elevado de filas son recuperadas por un formulario Oracle, almacena una copia de las tablas de la base de datos en un fichero legible por todo el mundo, lo que permite que usuarios locales obtengan información confidencial tal como números de tarjeta de crédito."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B720808-BCFF-4917-82E3-2F7B11355406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D1AB63-14C5-4343-962B-BC8FC03B412A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:6i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38985A2-F5F6-4157-92C0-CE80B7F37013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:9i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E934ED-92DE-47C3-94C4-6714A32FC32A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112129398711846&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_forms_unsecure_temp_file_handling.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112129398711846&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_forms_unsecure_temp_file_handling.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop) via a packet with a zero datablock size."
      }, {
        "lang" : "es",
        "value" : "NetPanzer 0.8 y anteriores permite que atacantes remotos causen una denegación de servicio mediante un paquete con un tamaño de bloque cero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyrosoft_inc:netpanzer:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC8E35AA-AE3C-4EF7-AB8F-A58458119841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/panzone-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112129258221823&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/panzone-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112129258221823&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-18T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "YabbSE 1.5.5c allows remote attackers to obtain sensitive information via a direct request to ssi_examples.php, which reveals the path."
      }, {
        "lang" : "es",
        "value" : "YabbSE 1.5.5c permite que atacantes remotos obtengan información confidencial mediante una petición directa a \"ssi_examples.php\" (ya que revela el path)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1.5.5c:*:second_edition:*:*:*:*:*",
            "matchCriteriaId" : "483DDD46-CD84-4A89-884F-27F92F258EA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112137300014760&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112137300014760&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sophos Anti-Virus 5.0.1, with \"Scan inside archive files\" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value."
      }, {
        "lang" : "es",
        "value" : "Sophos Anti-Virus 5.0.1, con \"Scan inside archive files\" habilitado permite que atacantes remotos causen una denegación de servicio (agotamiento de CPU por bucle infinito) mediante un archivo Bzip2 con un valor largo en \"Extra field length\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A1739A-B77D-4CD6-9943-52B336EC2F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D4EB83-A8A4-48F2-A835-FA192ADB3BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.78d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1609D51F-41D1-441C-9EA8-3F0510D8ED8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABBFB36-0A7C-45ED-9907-867F31884113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23543D87-E4B6-4B74-A490-378D45AA3481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4DBC8E3-0344-413A-8C4A-F48CBAAFAB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C3AD19-26F4-4AFF-8207-86017509EECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFC7217-88A6-4241-8FD9-4B7E2683F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC8C9FC-9D35-455D-9597-3B2E63845B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07255F9-5726-4FDB-81A3-D0D55AD1F709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1A8D69-0A33-4F47-B1BA-8BC898A3E7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06164FCF-CC47-406D-8561-DDA797B29673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A323A588-59DD-4D89-A224-A6FF7BBD7B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0756438F-DD69-4213-9069-FA613A5D729E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_mailmonitor:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95FA3B01-F58C-45EB-9961-0A9BB8F6FE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_mailmonitor:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB699D72-7E6D-460C-AA5F-8BF9C4D4B196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_mailmonitor_for_notes_domino:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF0468B-81CF-484F-88C4-5F0E6CA8C4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_puremessage_anti-virus:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760B35D-15A5-413B-8C04-4A3668821ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_small_business_suite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28059D6E-6505-408B-81FE-9B91FC9AE849"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=283&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14270",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=283&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1850",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown impact and attack vectors, a different vulnerability than CVE-2005-1916."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F32A39-4443-46C9-8E14-08AA59BC1CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6531EE56-D685-4276-A911-E69C80F86561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28012535-7CAD-456E-86A5-649CF21E28F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A32270-8C65-4ED4-96CB-B389B97587A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A305C4-F461-429D-90F8-3FCC04D07635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF945FFF-C0D9-4C56-8B43-3ABE9530E939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17988E27-6C98-48B4-8779-4EF69E8DBD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FCB0EE-8BCE-4E68-B78D-A57E8E9DEC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D723B90C-9746-4F94-A8A3-273240A2CBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E4CA2-0024-4F4E-AB1C-328539E17451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC21287-D631-4836-9945-9673A2BC9C7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-760",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1851",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Ciertos scripts en el cliente ekg Gadu 1.5 y anteriores permiten ejecutar comandos shell mediante maneras de ataque desconocidas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F32A39-4443-46C9-8E14-08AA59BC1CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6531EE56-D685-4276-A911-E69C80F86561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28012535-7CAD-456E-86A5-649CF21E28F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A32270-8C65-4ED4-96CB-B389B97587A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A305C4-F461-429D-90F8-3FCC04D07635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF945FFF-C0D9-4C56-8B43-3ABE9530E939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17988E27-6C98-48B4-8779-4EF69E8DBD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FCB0EE-8BCE-4E68-B78D-A57E8E9DEC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D723B90C-9746-4F94-A8A3-273240A2CBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E4CA2-0024-4F4E-AB1C-328539E17451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC21287-D631-4836-9945-9673A2BC9C7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-760",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network."
      }, {
        "lang" : "es",
        "value" : "La tarjeta Apple AirPort usa una clave por defecto WEP cuando no se conecta a una red conocida o de confianza, lo que puede provocar que se conecte automáticamente a una red maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:airport_card:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033C8213-C329-4B37-BC04-E9BD05A09202"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en TreeAction.do en Sybase EAServer 4.2.5 hasta la  5.2 permite que usuarios autentificados remotamente ejecute código arbitrario mediante un parámtro grande javascript."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:easerver:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFBD952-17FC-40CF-882C-E473464E3804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:easerver:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C604B5-7CAB-4D38-981A-E8543B717FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:easerver:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53125F6B-62E4-4E03-B8B5-602949EB394F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:easerver:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9C6A53-8D65-4B4D-88A4-2F43D0823B7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112146180532313&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.spidynamics.com/spilabs/advisories/sybaseEAserverOverflow.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sybase.com/detail?id=1036742",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112146180532313&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.spidynamics.com/spilabs/advisories/sybaseEAserverOverflow.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sybase.com/detail?id=1036742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards."
      }, {
        "lang" : "es",
        "value" : "BitDefender Engine 1.6.1 y anteiores no escanea adecuadamente todos los adjuntos, lo que permite que atacantes remotos se salten el escaneo de virus mediante comandos de inicio y fin en el cuerpo del e-mail (lo que BitDefender trata como un adjunto uuencoded y deja de escanear)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwin:bitdefender_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "5C9A9C30-D63B-42C3-9B74-107FEED2434F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112137542212322&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112137542212322&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) FID parameter to forum.cfm, (2) UID parameter to user.cfm, (3) TID parameter to thread.cfm, or (4) PostDate parameter to search.cfm."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados en Simple Message Board Version 2.0 Beta 1 permite que atacantes remtos inyecten script web arbitrario o HTML mediante 1) el parámetro FID en \"forum.cfm\", 2) el parámetro UID en \"user.cfm\", 3) el parámetro TID en \"thread.cfm\" o 4) el parámetro \"PostDate\" en \"search.cfm\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:man_and_machine_ltd.:simple_message_board:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB59859-A7C9-401E-9658-978F5EB1D351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112137585701087&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14266",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112137585701087&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jpg temporary file."
      }, {
        "lang" : "es",
        "value" : "Skype 1.1.0.20 y anteriores permite que usuarios locales sobreescriban ficheros arbitrarios mediante un ataque de enlaces simbólicos en el fichero temporal \"skype_profile.jpg\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0.20",
            "matchCriteriaId" : "00C65222-8776-4CC0-889F-ED04A10E477F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112156036013818&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=7808",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112156036013818&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=7808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote attackers to cause a denial of service (failure to answer ldap questions) and possibly conduct an LDAP injection attack."
      }, {
        "lang" : "es",
        "value" : "PowerDNS anterior a la 2.9.18, cuando se ejecuta en LDAP, no escapa adecuadamente las peticiones LDAP, lo que permite que atacantes remotos causen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C1E89A2-4993-4208-B67F-52B08A6F1BDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B340CA64-2358-46E6-8F65-725B6ACE77D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADBB8B1-C732-49BA-9270-F5551A9E2D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C62126-2E61-4532-BFA2-D66FCCC8C9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4472A3D7-8E17-4D80-AA2D-724C74EEF9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07CDE603-2A52-4C6F-B6A3-563D516BB4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3E5668-9B66-4C80-8C38-6FF01C342182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB793844-A30A-4F97-954B-690083E77430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B636157B-E627-4EF1-B6C2-640648C001D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34EEA40F-CD68-4AE9-A305-402BFBEEA23B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FFBCCC-3595-4148-A3CD-28FD390FB786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7722F1-D913-42A0-93EA-48140F47F221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E26E04-71AA-4A00-B0EE-9A04A63ADBBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A413F4D-123A-4AA6-A097-9900F9B39817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F03070D-C76A-4A31-AA0C-E32442EBE83B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BE9083-C8DA-4CCB-AAA0-8E31A1C566D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FC77A2-E464-4832-ADCD-68D66E7CB29E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-18",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112155941310297&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112155941310297&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questions from clients that are denied recursion, which could cause a \"blank out\" of answers to those clients that are allowed to use recursion."
      }, {
        "lang" : "es",
        "value" : "PowerDNS anterior a la 2.9.18, cuando permite recursión en un rango restringido de direcciones IP, no maneja adecuadamente peticiones de clientes a los que se les deniega la recursión. Esto podría causar un \"bank out\" de respuestas a aquellos clientes que sí les es permitido usar recursión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C1E89A2-4993-4208-B67F-52B08A6F1BDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B340CA64-2358-46E6-8F65-725B6ACE77D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADBB8B1-C732-49BA-9270-F5551A9E2D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C62126-2E61-4532-BFA2-D66FCCC8C9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4472A3D7-8E17-4D80-AA2D-724C74EEF9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07CDE603-2A52-4C6F-B6A3-563D516BB4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3E5668-9B66-4C80-8C38-6FF01C342182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB793844-A30A-4F97-954B-690083E77430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B636157B-E627-4EF1-B6C2-640648C001D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34EEA40F-CD68-4AE9-A305-402BFBEEA23B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FFBCCC-3595-4148-A3CD-28FD390FB786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7722F1-D913-42A0-93EA-48140F47F221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E26E04-71AA-4A00-B0EE-9A04A63ADBBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A413F4D-123A-4AA6-A097-9900F9B39817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F03070D-C76A-4A31-AA0C-E32442EBE83B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BE9083-C8DA-4CCB-AAA0-8E31A1C566D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FC77A2-E464-4832-ADCD-68D66E7CB29E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-18",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112155941310297&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112155941310297&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:35.657",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1218.  Reason: This candidate is a duplicate of CVE-2005-1218.  Notes: All CVE users should reference CVE-2005-1218 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) via an image with an ICC Profile with a large Tag Count."
      }, {
        "lang" : "es",
        "value" : "Microsoft MSN Messenger 9.0 e Internet Explorer 6.0 permiten que atacantes remotos causen una denegación de servicio (caída) mediante una imagen con un ICC Profile con un Tag Count grande."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:live_messenger:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55471978-FD89-4F6E-B128-9A387A0F76D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/405377",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via a long message to TCP port 1071 or 1073, possibly due to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "DG Remote Control Server 1.6.2 permite que atacantes remotos causen una denegación de servicio (caída o agotamiento de CPU) y posiblemente ejecuten código arbitrario mediante un mensaje largo al puerto TCP 1071 o 1073 (posiblmente debido a un desbordamiento de búfer)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dg:remote_control_server:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874C802E-A508-4402-8E65-5296CE274151"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=72",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14263",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could allow authenticated users to gain privileges as other users."
      }, {
        "lang" : "es",
        "value" : "\"Race condition\" en Macromedia JRun 4.0, ColdFusion MX 6.1 y 7.0 cuando están bajo carga pesada, provocan que JRun asigne una autentifcación duplicada a sesiones múltiples, lo que podría permitir que usuarios autentificados obtengan privilegios como otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C65BE0-32FA-4D51-AA2B-E7D630470D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E5A6D-8476-401B-9A18-BDBC07CA1CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4361030D-230A-45CD-AC84-9603DADC75BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16081",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-05.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service crash) via a large integer argument to a particular function, aka \"Network Connection Manager Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "netman.dll en Microsoft Windows Connections Manager Library permite que usuarios locales causen una denegación de servicio (caída de Network Connectios Service) mediante un argumento grande a una cierta función, también conocido como \"Vulnerabilidad de Administración de conexión de red\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using (1) mov_fencepost.jpg, (2) cmp_fencepost.jpg, (3) oom_dos.jpg, or (4) random.jpg."
      }, {
        "lang" : "es",
        "value" : "El descodificador de JPEG en Microsoft Internet Explorer permite que atacantes remotos causen una denegación de servicio (consumo de CPU o caída) y posiblemente ejecuten código arbitrario mediante imágenes JPEG amañadas. Queda demostrado usando (1) mov_fencepost.jpg, (2) cmp_fencepost.jpg, (3) oom_dos.jpg, o (4) random.jpg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lcamtuf.coredump.cx/crash",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405298",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14284",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14285",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14286",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lcamtuf.coredump.cx/crash",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 8.01 allows remote attackers to cause a denial of service (CPU consumption) via a crafted JPEG image, as demonstrated using random.jpg."
      }, {
        "lang" : "es",
        "value" : "Opera 8.01 permite que atacantes remotos causen una denegación de servicio (consumo de CPU) mediante una imagen JPEG amañada. Queda demostrado usando \"random.jpg\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lcamtuf.coredump.cx/crash",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405298",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405524/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lcamtuf.coredump.cx/crash",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405524/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Winamp 5.03a, 5.09 y 5.091 permite que atacantes remotos ejecuten código arbitrario mediante un fichero MP3 con un tag ID3v2 largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.093",
            "matchCriteriaId" : "92312F29-8D4C-4998-BC4B-C92E72D298D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF39A44-528E-4BE8-A923-FFB53C2378F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057B033C-7836-41E0-B184-F9D5DFC42C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6A1F15-A3FA-40FB-980A-569F77E1D104"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014483",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.winamp.com/player/version_history.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.winamp.com/player/version_history.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) request2 temporary files."
      }, {
        "lang" : "es",
        "value" : "SMS 1.9.2m y anteriores permite que usuarios locales sobreescriban ficheros mediante un ataque de enlaces simbólicos en los ficheros temporales \"request1\" o \"request2\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sms:sms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.2m",
            "matchCriteriaId" : "092DC294-BAA6-4C52-AD0B-87475F7D45D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16038",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zataz.net/adviso/sms-06272005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zataz.net/adviso/sms-06272005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifying the user_id parameter."
      }, {
        "lang" : "es",
        "value" : "management.php en Realnode Emilda 1.2.2  permite que atacantes remotos ejecuten acciones como otros usuarios modificando el parámetro \"user_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnode:emilda:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBDC05D-B26C-4E0B-9FB6-D5CA5FEB44F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnode:emilda:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4643E0C6-71B9-4E99-A163-11B8D91FD94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnode:emilda:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F85139-0022-43CB-8D8E-B75544569F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnode:emilda:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FB8F1C-709F-4D3A-AB88-DBEEE049377A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnode:emilda:1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C33574-CA05-4C3D-887D-BABBCA00007F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnode:emilda:1.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B626383-D744-4A0E-BC8A-189C1A9BF3B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=338551",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14244",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=338551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Check Point SecuRemote NG with Application Intelligence R54 allows attackers to obtain credentials and gain privileges via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Check Point SecuRemote NG with Application Intelligence R54 permite que atacantes obtengan credenciales y ganen privilegios mediante formas de ataque desconocidas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:checkpoint:secureclient_ng:r54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C1BE62-6C9B-49DE-9D59-96586489F66B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/14221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "inc.login.php in PHPsFTPd 0.2 through 0.4 allows remote attackers to obtain the administrator's username and password by setting the do_login parameter and performing an edit action using user.php, which causes the login check to be bypassed and leaks the password in the response."
      }, {
        "lang" : "es",
        "value" : "inc.login.php en PHPsFTPd 0.2 hasta la 0.4 permite que atacantes remotos obtengan el nombre de usuario del administrador y su clave fijando el parámeto \"do_login\" y ejecutando una acción de edición usando \"user.php\". Esto provoca que se salte la validación de entrada y se muestre el password como respuesta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsftpd:phpsftpd:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8626B29-B52C-455A-A2DD-50026B9966EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsftpd:phpsftpd:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14855883-A926-4104-8B24-11DA223EF005"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/07/msg00209.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0507-exploits/phpsftpd.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14222",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/07/msg00209.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0507-exploits/phpsftpd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies."
      }, {
        "lang" : "es",
        "value" : "Shorewall 2.4.x anteiror a 2.4.1, 2.2.x anteiror a 2.2.5, cuando MACLIST_TTL es mayor que 0 o MACLIST_DIPOSITION se fija en ACCEPT, permite que atacantes remotos con una dirección MAC aceptada se salten otras reglas de firewall."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70091128-56A5-4C02-B725-1B41345CAF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E685B64-A5B8-4DBF-944C-B81A0CB00028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC4AB0-6195-4F96-A5E6-7D28D4481FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3C10C9-AB0C-4CDB-82C2-606FC92799E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444C2974-82B2-49D9-B6D2-6E6BB19A100B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62537239-2821-4CF0-AA6E-82FC0B930BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6548FF8-CF63-4D34-A1A7-494BC1AE4116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC5BD1C-D56E-4821-BEF3-42C247801F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C47587-030E-4F62-8B5D-DC6199ED6097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A98B9C7-2157-4440-A01E-525A9CAF62DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.2f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9C770-4709-471B-9710-06DF0F43A452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76A1B4-3B30-408B-9E8D-627BA55B44B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DFAFFC-D77C-49DF-ABC8-BF1412EF00D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C8CB53-676E-41E2-BB6D-E40D1ACD3F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.3c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1431560-779E-42A4-A1DB-772D7DE65EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFC6E96-EEEC-4BC3-8E9C-8168AC2F5D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D144DD-7D0B-47D3-9E56-68A50ED26A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9AB855-4E2B-43C6-AAAE-68CBA8D1ABA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D4CF78-242D-4041-8C3B-15B16EB032D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5109BC69-4BE8-485D-AA12-7C4D2EABCA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E01705-E997-4A0D-BC24-185BE7C1F474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871F8DD6-8E45-454D-8C0C-BA84D2062C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF98E55C-A058-4B23-BF34-D3DD0977E0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D9499C-4C76-42A2-B8B3-041561B4C567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDF3FD3B-A82A-4225-9434-1411F6B8C9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6279364-8CCB-4169-94E0-9377FCDB2237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4989AB77-E04C-4AD2-B3C3-FFA492F1EAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0327D7-489E-44DD-94B1-FC3AFF077A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23557434-3D75-4251-97F1-9E4472DDF2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F735D977-390F-4F84-BD00-180100E268EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF248034-12FF-4500-B106-9B3BC1495214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A21A6C8-3419-41B9-8883-722A156E8DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DFA137-145D-4E14-AB14-A0D19D86B4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCFDB74-32A2-4D13-A51B-40BACE9A8F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.4.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8362D306-890B-4010-AEC6-A537CE960858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shorewall:shorewall:2.4.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2831D9-9B51-452F-88F5-518D72570146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Jul/0409.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16087",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shorewall.net/News.htm#20050717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-20.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-197-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Jul/0409.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shorewall.net/News.htm#20050717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-197-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary web script or HTML via the action parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en showerr.asp en DVBSS 7.1 SP2 permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro \"action\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dvbbs:dvbbs:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1C4FCB-24EE-4058-B619-73C6D4861D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dvbbs:dvbbs:7.1_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5649B0A3-0CB6-4E83-A6C0-7E5213297647"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/14223",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the _Yawp[conf_path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP en Yawp library 1.0.6 y anteriores, usado en YaWiki y posiblmente otros productos permite que atacantes remotos incluyan ficheros arbitrarios  mediante el parámetro \"_Yawp\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yawp:yawp:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "009BF752-A979-4848-AC14-00EA4CCD7EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yawp:yawp:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D30FB58-3081-4976-A549-FC0710E04CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yawp:yawp:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7E5AC1-49B0-4FDE-B709-311EF5A71B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yawp:yawp:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681CC1AA-6CFA-4B30-9A06-CAF8EA2AF65D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yawp:yawp:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94115A6-38F8-4C60-AB31-3BA0F5F0A74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yawp:yawp:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B35787-7B3E-4FFF-9B7A-7693F4EFA7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yawp:yawp:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2363BA40-E459-4E82-8A37-A5FBE7D48E4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phpyawp.com/yawiki/index.php?page=ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory-102005.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404948",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14237",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://phpyawp.com/yawiki/index.php?page=ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory-102005.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote attackers to gain privileges."
      }, {
        "lang" : "es",
        "value" : "WebCalendar anteriror a la 1.0.0 no restringe adecuadamente el acceso a \"assitant_edit.php\", lo que permite que atacantes remotos ganen privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2EABBA-AE17-44B6-9789-6E24D794A3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AD3E54-46F8-4DE0-86CE-D5D3FF079787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3857C666-0421-4EC8-80F4-2A62D44A1DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9BB322-7C8F-4ACB-8809-2A96C0F9D65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4AA766-E1FC-4AEA-A2C6-9998A395F978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83918F72-9289-4C14-AC44-46A848DD0487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1BCC1F-3031-49CB-95EF-C733D0A24EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC57185-15AA-414B-9779-AF89170B9E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCFF5B6-324C-43EC-AAF3-EBBA23C2C583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E93824-0B9A-4B6C-A60B-78942160DF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D31CCF-3D1C-472F-B940-758A607111BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2B148A-C41F-44C7-A044-002F25FA06C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B69D3BF4-E0CD-4844-BF5B-BBE5B9D989DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B73A4C5-4D6A-4CB8-9CB9-DFD038B869FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96780B29-70A4-41B9-BFAE-F6AE56526A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "206445B6-2D25-46B6-8ED2-32CEF068CD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576E931E-A40F-4087-B810-9BAA11464452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BFF736-D44F-4A13-A67E-1D3103F6DBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F26E6E8-9EAB-4293-B12F-D81973C01447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD49942E-171A-44E4-AE84-301F3E39B117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0925C97E-E404-46A6-952A-BDF64D7EAF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5611335-10FE-4040-AF02-A2C871DAF3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCFB394-8FA7-4076-8098-37D569829B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB49B00-95CE-43A0-B64F-D2014692C7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2809B65-50FC-4536-8A61-D8164EE99320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC47C91-B1FF-404B-8F73-37E325FCC566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A232F7-49E3-49B6-951A-1048D71BCF03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE65D8C-C531-4212-AEF6-003A869030FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F803CC2-7E5E-460B-95CA-33BD80DC1CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BE8F76-8C07-49BD-9E66-9790C0E8EDF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D9BF6-6CFE-4BD6-923B-3E5F6F5FC59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:0.9.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD15A765-60CC-4A0D-ADA3-8F6D1ABBE9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8261B9D7-505A-48BB-9987-ED0B7F21630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0045C00A-1F7E-4533-AA56-6175AA916ACA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/14072",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to (1) cl_minical.php, (2) clmcpreload.php, (3) mcconfig.php, or (4) mcpi-demo.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP en  CaLogic 1.2.2 permite que atacantes remotos ejecuten código arbitrario mediante el parámetro CLPATH a (1) cl_minical.php, (2) clmcpreload.php, (3) mcconfig.php, o (4) mcpi-demo.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calogic:calogic:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A607EB-CD0E-4937-9FAF-E9D4E992B26C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16090",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.albaniafuckgreece.org/adviso/calogic.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.calogic.de/modules/newbb/viewtopic.php?topic_id=333&forum=7",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.albaniafuckgreece.org/adviso/calogic.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.calogic.de/modules/newbb/viewtopic.php?topic_id=333&forum=7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the (1) viewuser_id or (2) group parameter to users.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de sencuencia de comandos en sitios cruzados en Class-1 Forum 0.24.4 and 0.23.2, y Clever Copy  con forums instalados  permite que atacantes remotos inyecten script web arbitrario o HTML mediante los parámetros de \"users.php\" \"viewuser_id\" o \"group\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:class-1:class-1_forum:0.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBCD404-9538-421E-91D9-D926961B52C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:class-1:class-1_forum:0.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A9B91F-6D3C-4D7E-BEFA-623BF5E8F980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0533A346-38E0-4F1B-975E-ED8692E7CA7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16078",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014485",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014486",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum parameter to viewforum.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy permiten que atacantes remotos modifiquen sentencias SQL mediante diversos parámetros en \"viewattach.php\", \"users.php\" y \"viewforum.php\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:class-1:class-1_forum:0.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBCD404-9538-421E-91D9-D926961B52C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:class-1:class-1_forum:0.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A9B91F-6D3C-4D7E-BEFA-623BF5E8F980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0533A346-38E0-4F1B-975E-ED8692E7CA7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16078",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014485",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014486",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/17921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en Clever Copy 2.0 y 2.0a permite que atacantes remotos inyecten script web arbitrario o HTML mediante los parámetros \"searchtype\" o \"searchterm\" en \"results.php\" o \"categorysearch.php\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5DD585-BF9F-4AE5-B112-A6D9AB1ACDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4679FE-E971-435C-AED0-6E1DB3E561E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/07/clever-copy-path-disclosure-and-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/07/clever-copy-path-disclosure-and-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request to (1) ticker.php, (2) menu.php, (3) banned.php, (4) endlayout.php, (5) randomhlinesblock.php, (6) showlast.php, (7) showlast5class1.php, (8) showlast5phorum.php, (9) showlast5phorumblock.php, (10) showlastforumbb2.php, or (11) showlastforumbb2block.php."
      }, {
        "lang" : "es",
        "value" : "Clever Copy 2.0 y 2.0a permite que atacantes remotos obtengan el path absoluto a la raíz web mediante una petición directa a: 1) ticker.php, (2) menu.php, (3) banned.php, (4) endlayout.php, (5) randomhlinesblock.php, (6) showlast.php, (7) showlast5class1.php, (8) showlast5phorum.php, (9) showlast5phorumblock.php, (10) showlastforumbb2.php, or (11) showlastforumbb2block.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5DD585-BF9F-4AE5-B112-A6D9AB1ACDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4679FE-E971-435C-AED0-6E1DB3E561E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/07/clever-copy-path-disclosure-and-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/07/clever-copy-path-disclosure-and-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the yr parameter to calendar.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en Clever Copy 2.0 y 2.0a  permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro \"yr\" en \"calendar.php\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5DD585-BF9F-4AE5-B112-A6D9AB1ACDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4679FE-E971-435C-AED0-6E1DB3E561E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/07/clever-copy-calendarphp-yr-variable.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/07/clever-copy-calendarphp-yr-variable.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested [url] BBCode tags."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en e107 0.617 y anteriores permite que atacantes remotos inyecten script web arbitrario o HTML mediante tags anidadas \" [URL]BBCode\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437C4251-886C-4E94-B7F6-AE34A0142A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D4EE9-0D54-4370-BCBC-3C23481C127B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11E3F9E-708E-44CB-8FD2-E4961028B732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F38EB42-437C-4381-B36A-FD3DB78E724E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC957BA-D96C-41B7-9BD4-2ECD37C9C924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9E9AC1-5ECD-448F-B72A-1CE8228C2C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC4B3A4-2563-4C06-A484-5C02CD8F7408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E80F85C-61AD-49C0-9EBF-B79F728F6A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE097FC-A525-4599-9FDA-1A011EECE767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF51B0D-E020-491D-92A9-D2A01A7417AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8692341-8DF2-4943-853A-4AAF1F313914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75197306-53DB-4C94-959B-C46D3FB1F42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C5C91C-C1C5-457D-9E09-24C7CACCC280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB88C92-4F62-471A-8C10-C13C890E764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5585DC36-C65F-4FCA-B26F-E4A7901863E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7DD56C-66F7-421C-B211-07C7856112C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E14B108-228D-454F-AF16-9D9086E4C10B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C91C45-9A96-4E69-8A0A-D619AB45BC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7C68F4-9ECD-41A9-B4AE-48F028841428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AA824A-CEE6-460B-A668-92FC3A822305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17F613A-6BE1-4B45-8E40-8E44E0EEA756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB33E9-9AB8-482A-A196-768A2085A49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BD5CAD-0EB8-48F2-AF80-510584A83446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4189588A-A887-4D27-B3A0-48A3DBBD5E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA26A71E-F1E6-4EA0-9165-F7989FB89B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.3_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C90BAB9-2ACE-48E4-BC15-E88C2C370B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD219A3-4958-4EA9-A914-37D4F0A8A24D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3417C70B-E531-49C8-971E-CC349FB5AA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5EF2F8-0A65-4C8C-A4A3-9B9B1151509C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FBE3F6-7685-43BA-B63B-28AA79330323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CC3B56-F1FC-452A-A0A7-4CF60089C1E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7524B12E-3D05-4CD1-B582-8A66EEC3F6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "590FE150-07AF-4E25-B8F8-D0E8500D73B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F515DEBF-B55A-4B42-8E1F-AB9A2C3DD8DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014513",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in im.php in Laffer 0.3.2.6 and 0.3.2.7 allows remote attackers to execute arbitrary PHP code via the CFG_PATH variable."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP remoto in im.php en Laffer 0.3.2.6 y 0.3.2.7 permite que atacantes remotos ejecuten código PHP arbitrario mediante la variable CFG_PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laffer:laffer:0.3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DDF411-E84C-4FF3-9751-490E6CDBA8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laffer:laffer:0.3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D62E1F4-F313-45E1-83B9-DCB0FF176B64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://laffer.sourceforge.net/cgi-bin/index.pl?page=news&key=373747410",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1235463&group_id=101249&atid=629313",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://laffer.sourceforge.net/cgi-bin/index.pl?page=news&key=373747410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1235463&group_id=101249&atid=629313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key authentication, does not properly restrict access to ports, which allows remote authenticated users to access the consoles of other users."
      }, {
        "lang" : "es",
        "value" : "MRV Communications In-Reach LX-8000S, LX-4000S, y LX-1000S 3.5.0 cuando usa autenficación por clave pública SSH, no restringe adecuadamente el acceso a los puertos, lo que permite que usuarios autenficados remotos accedan a las consolas de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mrv_communications:in_reach_lx_1000s:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438B33E3-FEB5-43F9-8671-E3F70F426C43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mrv_communications:in_reach_lx_4000s:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E800F6D6-4079-4930-98A0-3700D847A72F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mrv_communications:in_reach_lx_8000s:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF16525-656A-47BA-9859-E9F13D6CF1C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405546",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via (1) .. sequences or (2) a full pathname in the readme_file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de franqueo de directorio en extras/update.php en osCommerce 2.2 permite que atacantes remotos lean ficheros arbitrarios mediante (1) secuencias .. o (2) un nombre de ruta completo completo en el parámetro \"readme_file\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2_ms2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C382022-5D4A-419E-9A6F-14A38094C187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/oscommerce_22_adv.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_id=12318248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oscommerce.com/community/bugs%2C2835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14294",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/oscommerce_22_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_id=12318248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oscommerce.com/community/bugs%2C2835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in display.php in MooseGallery allows remote attackers to execute arbitrary PHP code via the type parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP remoto en display.php en MooseGallery permite que atacantes remotos ejecuten código PHP arbitrario mediante el parámetro \"type\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moosegallery:moosegallery:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "877932CD-BA61-46DB-BA8B-A1BE9CE1C117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moosegallery:moosegallery:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46971111-61E8-4C71-A905-3808D998505E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16093",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014487",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHPPageProtect 1.0.0a allows remote attackers to inject arbitrary web script or HTML via the username parameter to (1) admin.php or (2) login.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en PHPPageProtect 1.0.0a permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro \"username\" en \"admin.php\" o \"login.php\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.warpedweb.net:phppageprotect:1.0.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1372371-9368-466B-9D5A-334CCC929B34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16110",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014510",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in smilies_popup.php in SEO-Board 1.0 allows remote attackers to inject arbitrary web script or HTML via the doc parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en smilies_popup.php en SEO-Board 1.0 permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro \"doc\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seo-board:seo-board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C85FBD-06F8-4A5F-A5E1-86CE086A95CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014509",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-20T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to (1) w_s3mbfm.cgi, (2) w_s3adix.cgi, or (3) w_s3sbfm.cgi."
      }, {
        "lang" : "es",
        "value" : "Y.SACK permite que atacantes remotos ejecuten comandos arbitrarios mediante metacaracteres de shell en la variable \"no\" en (1) w_s3mbfm.cgi, (2) w_s3adix.cgi, o (3) w_s3sbfm.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:y.sak:y.sak:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24818C6F-756F-4863-B262-C6140DFF2505"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2355",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-25T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:36.537",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2335, CVE-2005-2356.  Reason: due to a typo in an advisory, this candidate was accidentally referenced.  Notes: All CVE users should consult CVE-2005-2335 and CVE-2005-2356 to determine the appropriate identifier for the issue"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to read arbitrary files via \"..\" sequences in an HTTP GET request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de franqueo de directorios en Internet Graphics Server en SAP anterior a la 6.40 Patch 11 permite que atacantes remotos lean ficheros arbitrarios mediante secuencias \"..\" en una petición HTTP GET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_r_3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.30",
            "matchCriteriaId" : "595752A5-ED49-421B-AA3E-212DA0868FC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.corsaire.com/advisories/c050503-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.corsaire.com/advisories/c050503-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1849",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced."
      }, {
        "lang" : "es",
        "value" : "inftrees.h en zlib 1.2.2 permite que atacantes remotos realizen una dengación de servicio (caída de la aplicación) mediante un fichero inválido que hace que se produzca un arbol dinámico muy grande."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zlib:zlib:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C77C974-9A8A-4F22-A680-5095552589BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16137",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17326",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17516",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18377",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19334",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19550",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19597",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24788",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1014540",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-763",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-797",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1026",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-18.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:196",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:070",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_43_zlib.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/18141",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-584.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464745/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14340",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-151-3",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1267",
        "source" : "security@debian.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21456",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11402",
        "source" : "security@debian.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_43_zlib.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-584.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-151-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1852",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en libgadu, usado en Kopete en KDE 3.2.3 hasta la 3.4.1, ekg anteriores a 1.6rc3, GNU Gadu, CenterICQ, Kadu, y otros paquetes, permite que atacantes remotos causen una denegación de servicio (caída) y posiblemente ejecuten código arbitrario mediante un mensaje de entrada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F32A39-4443-46C9-8E14-08AA59BC1CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6531EE56-D685-4276-A911-E69C80F86561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28012535-7CAD-456E-86A5-649CF21E28F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A32270-8C65-4ED4-96CB-B389B97587A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A305C4-F461-429D-90F8-3FCC04D07635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF945FFF-C0D9-4C56-8B43-3ABE9530E939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17988E27-6C98-48B4-8779-4EF69E8DBD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FCB0EE-8BCE-4E68-B78D-A57E8E9DEC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D723B90C-9746-4F94-A8A3-273240A2CBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E4CA2-0024-4F4E-AB1C-328539E17451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC21287-D631-4836-9945-9673A2BC9C7D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17407A2-089E-43A5-9BD5-EFF966F5CC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4B436D-8D6A-473E-B707-26147208808B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E26B353-4985-4116-B97A-5767CDC732F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7180B3-03AC-427C-8CAD-FE06F81C4FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442021C9-BE4D-4BC9-8114-8BEFA9EC1232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D600E27F-A1D6-42C7-8ED1-FD508F5B3AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7036AE90-C7E0-48CE-805D-3F1E04852675"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "865F252C-CC39-47D8-BCFD-66E3E331E514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kadu:kadu:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0215DF17-C015-41E1-91F0-9D216209105C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lwn.net/Articles/144724/",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16140",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16155",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16211",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16242",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-23.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-26.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050721-1.txt",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-639.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14345",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9532",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lwn.net/Articles/144724/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-26.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050721-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-639.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1920",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Las aplicaciones Kate y Kwrite en KDE 3.2.x hasta la 3.4.0 no fijan adecuadamente los permisos en los ficheros de backup, lo que podría permitir que usuarios locales, y posiblemente también remotos, obtengan información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndIncluding" : "3.4.0",
            "matchCriteriaId" : "A8FBCB14-BB97-4340-B5A5-5759A7D417DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112171434023679&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/16099",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23099",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-21.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014512",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-804",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050718-1.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-612.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14297",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9434",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112171434023679&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/16099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050718-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-612.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass restrictions on a jailed process."
      }, {
        "lang" : "es",
        "value" : "El sistema de ficheros de dispositivos en FreeBSD 5.x no comprueba adecuadamente los parámetros del tipo de nodo cuando crea un nodo de dispositivo, lo que hace que dispositivos ocultos estén disponibles a tacantes (quienes pueden por tanto sortear restricciones en ciertos procesos)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A612F6-E4EB-4E34-8F55-79E16C74758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "5C19B266-8FE7-49ED-8678-2D522257491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "15C4D826-A419-45F5-B91C-1445DB480916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9F2B04-A1F2-4788-A53D-C8274A758DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5309ED-D84F-4F52-9864-5B0FEEEE5022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD73CDB-94C5-4DBF-8B4C-DD3E4E399445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BC012-ADE4-468F-9A25-261CD8055694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "C89129C5-A1DB-4018-B43A-C60C8E650080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:17.devfs.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:17.devfs.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI (e.g. \"j&#X41vascript\" in an IMG tag."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en Novell Groupwise WebAccess 6.5 anterior a July 11, 2005 permite que atacantes remotos inyecten script web arbitrario o HTML mediante un mensaje de correo con un javascript codificado en un URI (e.g. \"jAvascript\" en una etiqueta IMG)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B28BB6-4A33-4A61-9810-9AB26911B490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EFCA37-C863-4E22-B231-B0A10E65594E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5298016B-B6E3-4236-B99F-57353A495B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "27060485-FD94-4E73-87B6-2AE940F02283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A5347B-3A18-40D0-BD9F-F7966819CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "DF391879-EA38-4F0E-B0A4-C409E8A7386E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112181451014783&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16098/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098301.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-11.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14310",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112181451014783&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16098/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098301.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels."
      }, {
        "lang" : "es",
        "value" : "vim 6.3 anterior a la 6.3.082, con \"modelines\" habilitado, permite que atacantes remotos con la implicación del usuario que ejecuten comandos arbitrarios mediante metacaracteres de shell en los comandos \"glob\" o \"expand\" de una expresión \"foldexpr\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim_development_group:vim:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27672CCF-59C2-45D8-8B82-822040DDAE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim_development_group:vim:6.3.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B0FABE-75CE-4074-91FF-0D02DD0B6F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim_development_group:vim:6.3.025:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536006A-DB7A-4A50-9CF3-30EEAB59A83F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim_development_group:vim:6.3.030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7240424-79F1-41AA-AF22-C66F9F94B7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim_development_group:vim:6.3.044:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BA3F17-DA8F-4E4F-B654-AEBED68B43B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim_development_group:vim:6.3.081:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B414DCD0-4413-4190-92E0-B206B78752AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035402.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-745.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035402.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-745.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2369",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Múltiples errores de signatura en libgadu, usado en ekg anterior a la 1.5rc2 y otros paquetes, puede permitir que atacantes remotos causen una denegación de servicio o ejecuten códgio arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A32270-8C65-4ED4-96CB-B389B97587A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17988E27-6C98-48B4-8779-4EF69E8DBD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FCB0EE-8BCE-4E68-B78D-A57E8E9DEC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D723B90C-9746-4F94-A8A3-273240A2CBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A4DE4D-6521-49DF-917A-7621CABA3D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:2005-04-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0288DF54-4271-42AD-8985-07440A7CFBC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:2005-06-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1B9704-DBF5-4973-9E37-D6D904B15626"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-813",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14415",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10281",
        "source" : "security@debian.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2370",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"memory alignment errors\" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message."
      }, {
        "lang" : "es",
        "value" : "Múltiples \"errores de alineamiento de memoria\" en libgadu, usado en ekg anterior a la 1.5rc2, Gaim anteriores a 1.5.0 y otros paquetes permite que atacantes remotos causen una denegación de servicio (error de bus) en ciertas arquitecturas, tales como SPACRC, mediante un mensaje de entrada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A32270-8C65-4ED4-96CB-B389B97587A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17988E27-6C98-48B4-8779-4EF69E8DBD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FCB0EE-8BCE-4E68-B78D-A57E8E9DEC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D723B90C-9746-4F94-A8A3-273240A2CBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A4DE4D-6521-49DF-917A-7621CABA3D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:2005-04-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0288DF54-4271-42AD-8985-07440A7CFBC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:2005-06-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1B9704-DBF5-4973-9E37-D6D904B15626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "CFA6DFFE-838F-4E5D-AD19-77201AAFDED1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=20",
        "source" : "security@debian.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16265",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-813",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1318",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-627.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/24600",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10456",
        "source" : "security@debian.org"
      }, {
        "url" : "http://gaim.sourceforge.net/security/index.php?id=20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-627.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/24600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) \"..\", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter.  NOTE: this issue was probably fixed by REP06 in CPU Jan 2006, in which case it overlaps CVE-2006-0289."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en Oracle Reports 6.0, 6i, 9i, y 10g permite que atacantes remotos sobreescriban ficheros arbitrarios mediante el parámetro \"desname\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:reports:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0E0107-3398-4479-88C4-E797CEAF1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:reports:6i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20A7C259-2705-49B4-843E-CD4B92A8DAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:reports:9i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3672EE5-FAA7-4665-B2B9-48A1865F0C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:reports:10g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B768FF-F7F9-41E1-BFA5-6D41895089CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112180096507467&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_overwrite_any_file.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422257/30/7430/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112180096507467&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_overwrite_any_file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422257/30/7430/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a malicious .fmx file and referencing it using an absolute pathname argument in the (1) form or (2) module parameters to f90servlet."
      }, {
        "lang" : "es",
        "value" : "Oracle Forms 4.5 hasta la 10g arranca desde ejecutables de directorios arbitrarios y los ejecuta como usuario Oracle o System, lo que permite que atacantes ejecuten código arbitrario usando un fichero .fmx malicioso y referenciándolo a través de un path absoluto en los parámetros \"form\" o \"module\" en f90servlet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F7AD5F-99F2-4549-9407-4F077B2D6DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B720808-BCFF-4917-82E3-2F7B11355406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119C936-B996-42F1-9141-D3DECAB1949E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D1AB63-14C5-4343-962B-BC8FC03B412A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:6i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38985A2-F5F6-4157-92C0-CE80B7F37013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:9i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E934ED-92DE-47C3-94C4-6714A32FC32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:10g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D0E1F5-89E9-4C1E-B20A-6EF175D8AE70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112180805413784&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_forms_run_any_os_command.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112180805413784&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_forms_run_any_os_command.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en SlimFTPd 3.15 y 3.16 permite que usuarios remotos autentificados ejecuten código arbitrario mediante un nombre de directorio largo en los comandos LIST, DELE o RNFR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whitsoft_development:slimftpd:3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE67BB86-1E6C-4246-817A-261042F15AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whitsoft_development:slimftpd:3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC9CC25-F733-474E-82C1-2861F1A15E49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112196537312610&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.whitsoftdev.com/slimftpd/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112196537312610&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.whitsoftdev.com/slimftpd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the (1) Telnet or (2) web administration interfaces."
      }, {
        "lang" : "es",
        "value" : "Los rúter inalámbricos Belkin 54g no fijan adecuadamente el password de administración, lo que permite que atacantes remotos ganen acceso mediante las interfaces de administración de Telnet o de web."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:belkin:belkin_54g_wireless_router:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0AB4AD-172C-4BEE-A6BB-70304C43C9F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112144089102115&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Jul/1014493.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112144089102115&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Jul/1014493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a (1) nickname or (2) chat message."
      }, {
        "lang" : "es",
        "value" : "Vulenrabilidad de formateo de cadenas en Race Driver 1.20 y anteriores  permite que atacantes remotos causen una denegación de servicio (caída de la aplicación) mediante especificadores de formato de cadenas en un mensaje \"nickname\" o \"chat\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codemasters:toca_race_driver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.20",
            "matchCriteriaId" : "B817FED6-86B7-48CD-ABBA-3868427D97D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/rdrum-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112171364923678&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/rdrum-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112171364923678&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via a long (1) nickname or (2) chat message."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Race Driver 1.20 y anteriores permite que atacantes remotos causen una denegación de servicio (caída de la aplicación) mediante un mensaje largo \"nickname\" o \"chat\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codemasters:toca_race_driver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.20",
            "matchCriteriaId" : "B817FED6-86B7-48CD-ABBA-3868427D97D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/rdrum-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112171364923678&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/rdrum-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112171364923678&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating systems, does not properly handle a SIGPIPE signal when sending a search request to an LDAP directory server, which might allow remote attackers to cause a denial of service (crond and other application crash) if they can cause an LDAP server to become unavailable.  NOTE: it is not clear whether this attack scenario is sufficient to include this item in CVE."
      }, {
        "lang" : "es",
        "value" : "nss_ldap 181 hasta la versión 213, usado en Madrake Corporate Server y Mandarke 10.0 y otros sistemas operativos no maneja adecuadamente la señal SIGPIPE cuando envía una petición a un servidor de directorios LDAP, lo que podría permitir que atacantes remotos causen una denegación de servicio (caída de crond y otras aplicaciones)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E842CFC9-6A9E-4DDA-9E54-7AF926772B0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://qa.mandriva.com/show_bug.cgi?id=13271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:121",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://qa.mandriva.com/show_bug.cgi?id=13271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the (1) CUSTOMIZE or (2) desformat parameters to rwservlet.  NOTE: vector 2 is probably the same as CVE-2006-0289, and fixed in Jan 2006 CPU."
      }, {
        "lang" : "es",
        "value" : "Oracle Reports permite que atacantes remotos lean ficheros arbitrarios mediante un path absoluto o relativo a los parámetros CUSTOMIZE o \"desformat\" de \"rwservlet\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:reports:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D4F86C-AFED-42BF-9B96-9FF7C9A77E55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112181054226520&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112181242916757&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_read_any_file.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_read_any_xml_file.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422256/30/7430/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112181054226520&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112181242916757&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_read_any_file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_read_any_xml_file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422256/30/7430/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) debug parameter to showenv, (2) test parameter to parsequery, or (3) delimiter or (4) CELLWRAPPER parameter to rwservlet."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de sencuencias de comandos en sitios cruzados en Oracle Reports 9.0.0.2 permite que atacantes remotos inyecten script web arbitrario o HTML mediante 1) el parámetro \"debug\" a \"showenv\", 2) el parámetro \"test\" en \"parsequery\" o 3)el parámetro \"delimiter\" o \"CELLWRAPPER\" en \"rwservlet\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:reports:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04827FEA-7E69-45AD-8D2E-116765822B6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112181649831863&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_various_css.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112181649831863&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_various_css.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the (1) sid, (2) start, and (3) id parameters to browse.php, or the sid parameter to (4) dataentry.php or (5) export.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en  PHP Surveyor 0.98 permite que atacantes remotos inyecten script web arbitrario o HTML mediante los parámetros 1) sid, 2) start y 3) ID en \"browse.php\", o bien el parámetro \"sid\" en 4) \"dataentry.php\" o 5) \"export.php\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_surveyor:php_surveyor:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E91066-133F-4946-B355-A951753A3D3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112188282401681&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112188282401681&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Surveyor 0.98 allows remote attackers to obtain sensitive information via a direct request to (1) question.php, (2) survey.php, or (3) group.php in the root directory, a direct request to (4) database.php, (5) sessioncontrol.php, (6) html.php, (7) sessioncontrol.php, an invalid (8) qid parameter to dumpquestion.php, or an invalid lid parameter to (9) labels.php or (10) dumplabel.php, which reveal the path in an error message."
      }, {
        "lang" : "es",
        "value" : "PHP Surveyor 0.98 permite que atacantes remotos obtengan información confidencial metiante una petición a (1) question.php, (2) survey.php,  (3) group.php,  (4) database.php, (5) sessioncontrol.php, (6) html.php, (7) sessioncontrol.php,  (8) dumpquestion.php, (9) labels.php o (10) dumplabel.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_surveyor:php_surveyor:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E91066-133F-4946-B355-A951753A3D3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112188282401681&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112188282401681&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which allows local users to gain privileges by accessing the Help functionality."
      }, {
        "lang" : "es",
        "value" : "Oray PeanutHull 3.0.1.0 y anteriores no abandona los privilegios SYSTEM cuando se lanza desde   la bandeja del sistema, lo que permite que usuarios locales ganen privilegios accediendo a la funcionalidad de ayuda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oray:peanuthull:3.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0A3FA9-7338-439A-8986-C355C2481743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112190569628213&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secway.org/advisory/AD20050720EN.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112190569628213&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/AD20050720EN.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-26T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en auth.php en PHPNews 1.2.5 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro \"user\" en una petición HTTP POST."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnews:phpnews:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B158F9B-3EB3-4714-8806-39EAA8ACE28F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112189453304389&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://newsphp.sourceforge.net/changelog/changelog_1.30.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112189453304389&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://newsphp.sourceforge.net/changelog/changelog_1.30.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses.  NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.5.1",
            "matchCriteriaId" : "B61F7795-769B-45F4-A178-5D307C23B5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF519D04-7596-42C6-A1D8-FC1018D1A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AFEC739-BDFA-4D14-9A04-96FFB71AE330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1923712-7B88-483E-B38A-0EA6FB38EB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9608A96-D131-401B-B041-09ADEEB59354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4555DBB-B63B-4637-86A9-399B34B27D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8AB8504-8CD1-4013-9413-1378F3BAE0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345D0848-958F-4B44-8F31-0793C36A5ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E179061-FB6A-44AA-8EAC-4916719D9A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A6B5F4-C799-45C4-9EAD-A55023767033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FDB8B9-5537-4E08-8FA0-931D4BED43E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC13DE1B-1428-4842-9567-BBE5EEF7042F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "215ED879-1E26-4FF4-8857-18499C5DE3A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72604F3D-2DE8-4BFF-97D5-4AFA64399201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8792F7FF-9E56-4201-89FD-F0146D4F0DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12812E8-1C5B-46CF-A266-EE19C5CD3B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DEAA0E8-746D-446D-AAEA-0ED287766332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D3E14C3-82AE-4D4A-8963-438BECBA5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFB7BB-2879-4EB7-BE1D-163238E313C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED223B6-1864-415C-96D6-64E1EDE4C840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3417C2E-1117-4FE7-B2FA-74CAB57235B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C61DC4-50D5-44B2-92F8-A59C65144108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A37E19-1E07-4FD0-AC6D-6AC3ED954787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853DD3E0-668F-4FAC-BA0B-D4E9C416D646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF70FCA-5DA4-4C0B-B876-0345FA077D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D12F53-07DE-447D-8403-40EB75B91955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19ECB844-F378-4A94-B9FC-A731B8186013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3169AA63-79F6-4B89-9405-8F6A2FB6FD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6615C7D-09B5-4943-A124-2FF9A0F4B927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF18219F-0406-4D46-90DE-EA2A17C8EFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B56DFD-BDA9-4D8B-BE54-BF59B762D574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33EA0CA8-468F-4A94-8DA3-5D820AB65973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA21C847-57ED-4E7D-9366-6038467D9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0450BD04-15D2-4122-A210-6225B89BDA7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18428805-AEB2-4BA4-9762-906B59CE74D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFCCBB15-DFFE-4A57-A029-E57707D15E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A4B962-BE5B-471C-83EF-674525C5AE83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B309C89-99E2-4F0B-976C-95E44A45ADC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C67DFF-A1BE-4486-A11F-CD3729927220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D365E6E-8777-4084-BEC8-7CBF4997D976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C4FF28-0DBA-4995-8252-2D62FF896BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96774635-9A12-4DAB-BCF6-2D678F244CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD2EE7A-36CB-4A26-8EEB-DACA2864D921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4267DCE8-985C-416D-A6B7-536585E5A573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E63EDF-FF0A-447C-A3FC-7BA2414C15CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DDD4A1-6185-41B6-A715-4C70F0AA2631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10A7E3C-07CD-48A6-9075-5314B4E1EEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "319955A4-27A8-46FF-ACE7-97E6DF27B2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925CF3DD-682B-40E6-900C-23F784CD9239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16366780-611E-4217-A614-EBA01421D148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AEA36F-E730-4305-9CB6-738A7152F02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9536BA-6334-4957-9632-6D64365B88AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52FA32B-8048-4FD7-9D20-20DC5E52098B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA92DF1-3AAD-46AC-A9E4-E9386C977818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837D66DB-F9CB-41F1-A091-BCFBAC2F45B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D12B67-6E66-419A-A28F-6306402931EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71FCBED-B25D-48E3-916C-FBA9E0DE8D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A17995E-DCAF-465A-8ABD-F1EA0D538784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93D03D78-C56E-4189-97FC-916C918EDFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A66C77-041F-4A12-8A36-233A6B50641C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C945059C-EF39-486D-A804-FBB8704AB927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1258CA65-FBC1-4848-A9E5-A8F5E5D6FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91C6418-41F0-46EB-ACFC-FCE907F5AA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C020534-7596-496C-B9B0-739F58F6F4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A77D40C-6FF5-42BD-9EFB-B532824D7606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04C6A76-2718-4DBA-8972-A3EECDDB1A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38ACD96E-5582-4ED0-BBB1-C891094D8217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264386DA-747F-492C-B660-D49BE9DB7139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4066AC-BE10-4189-86F6-BF94443738DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C25A146-50D5-4BA2-ABA2-20BF8784D7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E76256-997F-4229-9B03-7BC3074F359D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A717C50-2C5A-4CD1-B2E6-8CDF450940CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F908FF-9986-4F71-B0B6-D6A86555EF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816E9640-A932-4E2F-9793-689F80D2AA89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.berlios.de/project/shownotes.php?release_id=6617",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00088.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00089.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00104.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-640.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435197/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441856/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14349",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.berlios.de/project/shownotes.php?release_id=6617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00088.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00089.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00104.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-640.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435197/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441856/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary files via an ACE archive containing filenames with (1) .. or (2) absolute pathnames."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de franqueo de directorios en librería de compresión (UNACEV2.DLL), usada en avast! Antivirus Home/Professional Edition 4.6.665 y Server Edition 4.6.460 permite que atacantes remotos escriban ficheros arbitrarios mediante un archivo ACE que contiene nombre de ficheros con 1) .. o 2) paths absolutos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.460:*:server:*:*:*:*:*",
            "matchCriteriaId" : "4C7C856F-6BAE-45F1-98AF-53B8D253885E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.665:*:home:*:*:*:*:*",
            "matchCriteriaId" : "49A1FDB9-20DE-4E8E-BE33-2AF061C7953E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.665:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "8A291DD4-BA4B-46D2-AB0D-27C9789AF25A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15776",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-20/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.avast.com/eng/av4_revision_history.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-20/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.avast.com/eng/av4_revision_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to execute arbitrary code via an ACE archive containing a long filename."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer  en librería de compresión (UNACEV2.DLL), usada en avast! Antivirus Home/Professional Edition 4.6.665 y Server Edition 4.6.460 permite que atacantes remotos ejecuten código arbitrario mediante un archivo ACE que contenga un nombre de fichero largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.460:*:server:*:*:*:*:*",
            "matchCriteriaId" : "4C7C856F-6BAE-45F1-98AF-53B8D253885E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.665:*:home:*:*:*:*:*",
            "matchCriteriaId" : "49A1FDB9-20DE-4E8E-BE33-2AF061C7953E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.665:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "8A291DD4-BA4B-46D2-AB0D-27C9789AF25A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15776",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-20/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.avast.com/eng/av4_revision_history.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-20/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.avast.com/eng/av4_revision_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary web script or HTML via the message parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en viewCart.asp en CartWIZ 1.20 permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro \"message\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elemental_software:cartwiz:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C72B71A-A220-4DFA-9E53-90E4DEF5596E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elemental_software:cartwiz:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B7B5B5-E8CC-4818-8906-4C52E36230F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=4008",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14386",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=4008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via (1) a RCPT TO command with a long DNS name, or (2) a large number of RCPT TO commands with a long e-mail name arugment in the last command."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en GoodTech SMTP server 5.16 permite que atacantes remotos ejecuten código arbitrario mediante 1) un comando RCPT TO con un nombre DNS largo, o 2) un número grande de comandos RCPT TO  con un nombre largo de e-mail en el último comando."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goodtech_systems:goodtech_smtp_server:5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C185F1E2-0FAF-4169-B8FE-DB4A3F86A80E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jul/0402.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jul/0402.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en cierto driver USB, usado en Windows, permite que atacantes ejecuten código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_95:*:sr2:*:*:*:*:*:*",
            "matchCriteriaId" : "25DA02ED-9093-42E8-A9AD-F7B882430488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eweek.com/article2/0%2C1759%2C1840131%2C00.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eweek.com/article2/0%2C1759%2C1840131%2C00.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NDMP server in Veritas NetBackup 5.1 allows attackers to cause a denial of service via a CONFIG message with an out-of-range timestamp, which triggers a null dereference."
      }, {
        "lang" : "es",
        "value" : "NDMP server en Veritas NetBackup 5.1 permite que atacantes causen una denegación de servicio mediante un mensaje CONFIG con fecha fuera de rango, lo que provoca intento de acceso a puntero nulo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup_enterprise_server:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA871F8-39A9-414E-8883-98B796EEF1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup_server:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FA73BD-B342-4B05-BB0F-2C471F1B2E55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16187",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hat-squad.com/en/000170.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hat-squad.com/en/000170.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de formateo de cadenas en ProFTPD anterior a la 1..3.0rc2 permite que atacantes causen una denegación de servicio u obtengan información confidencial mediante: 1) ciertos inputs al mensaje de apagado de ftpshut o 2) la directiva SQLShowInfo mod_sql"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.0_pre9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D0097C-ED4C-407B-B363-AFE6BE547199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.0_pre10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA7079C-7203-4018-B39C-4BE7B13B5EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3704E3B8-C1CE-442F-B69D-0ED9EDAD5D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE12C338-EE8E-4E28-8E18-9C4FCC9D063D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E7C8D7-5F57-4B49-B404-DB4DAE273926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BBF8B2-02E6-4A53-A5FC-DA8D39171753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79330B03-B812-435F-A210-6844CC93C71F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9280692-0AB9-4C1F-804C-CB088E5E4483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F108D73C-1107-41DE-9DDB-505ABAF6E34D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7D3BDE-2200-4A5A-B149-DF4D52145A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.2_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D3C65A-3EE0-4BF1-AB0E-E5D4B01DED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8488C93D-2826-47BE-AE6D-A523199BA7D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD18DE8B-E0E2-43DA-A365-FCCAED59A623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3591365-5973-450F-A3F5-2EA0247A9571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85FFCBDF-B1A2-4B93-A2ED-83EA4FE52E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15715C4-0E91-4D9C-96E0-4CB49150F0F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B126A9-3501-4FB2-8AE7-054A6061BE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F8C767-468C-448B-8CA8-9DCD43A4BD8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E52D66-5252-42D5-8226-E73523FD5DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.6_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C706764-D081-4CA1-BBD3-0BEFABAD6BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.6_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1D7983-887E-48D7-B264-7EE349019C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D12FAE-5839-4123-876E-0A32DA2B1A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.7_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8C629A-5D13-4DE2-A866-DC99C8D0A761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.7_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A879A73-C624-4D47-A748-9EAC73EC8DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.7_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CC91C6-C680-469E-A103-691FAA1CF344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11D565E-0A90-4093-AA87-34A6DAE68E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.8_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B4A0D9-071F-4F0E-9826-054D5651773C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.8_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918684E1-D1B5-48C6-B413-2FE86379EFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C1A60B-D79B-4EE3-9E48-83AF875AD062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C5CBBA-43CE-4D77-9DA4-D4C4E010978B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.9_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89CD92BA-407E-4089-A98F-6D1309D8C294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.9_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3EA91F4-AC66-4A9E-B3B0-AB9B52257DCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB59FBA-AD15-453A-A3CA-7673D005920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.10_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A35BC8A-C406-424A-B90B-2B7810380D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.10_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E9A40C-65E4-4AD8-9FDF-F91F06BF0FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.10_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FDA09D-2CD7-4E98-8BD0-39D3F015144C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.3.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAED483-3825-493E-978D-9047A1F7087B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112604373503912&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16181",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.proftpd.org/docs/RELEASE_NOTES-1.3.0rc2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112604373503912&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.proftpd.org/docs/RELEASE_NOTES-1.3.0rc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in 3Com OfficeConnect Wireless 11g Access Point before 1.03.12 allows remote attackers to obtain sensitive information via the web interface."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en Com OfficeConnect Wireless 11g Access Point anterior a la 1.03.12  permite que atacantes remotos obtengan información confidencial mediante la interfaz web."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:3crwe454g72:1.02.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7663E9-ACFF-4BC9-86F9-732640A522D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:3crwe454g72:1.02.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2BD375-E722-4CCC-A1A9-C944D1DA0F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:3crwe454g72:1.03.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "347F9521-65BF-4283-8123-5E729D8DC550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:3crwe454g72:1.03.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "482606A6-0DB9-4AB6-A8F5-A1E06D4DD7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:3crwe454g72:1.03.07a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD95285-F7B7-4B68-BB12-FCA5F677D26F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16207",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en index.php para CMSSimple 2.4 y anteriores permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro \"search\" en la función de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F7E5BD-553E-4731-BED1-7E7DB772AD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574E610A-4799-45C9-B005-C1593B033AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FA0450-91E6-4250-A1D1-F2CFBB74A5B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:1.3:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEC1EBC-1DBA-4350-8B34-7A872C62B6BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:1.3:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "078B102C-748B-4847-8413-71659982AF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2DC53-EA5E-41A3-A972-EE0CBE71A8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA355EC8-6FDF-44AC-93AF-3BA62F933EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "77432D04-7A08-4897-9067-F1172C4B3444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "77BE8ADE-AD39-429F-BF60-AE403B653FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBC33E0-708B-497A-B3F7-33A525144256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221D0520-DAF7-4812-B94B-0E3630A967EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A477E39-3EB1-418F-9D55-E873815ADCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E86AAE-9DD4-426A-B004-794F6FD3571B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "BF28FC3C-37D2-4468-A309-D5B71CA16BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "264C0C12-D60B-4657-90B1-243F037F8B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1580903B-ED0B-4EFC-B1AF-982641D13B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "882FBDD4-ADF3-457C-811A-DC02D0079F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA83E3C-D14C-453A-B8A4-729C910D79D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "3272B7A3-F5E6-469B-A308-56EDF7C831B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "16F2CC21-339B-4B38-AFD3-6CBA1A0BE61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9F185C-B41B-4E85-AB52-654738602581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C67479D1-4D79-4819-9C70-24D9B146DB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "94838957-A9DC-4155-B747-696B4E49B2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2C53DD-CDA9-4678-A933-54CD32B6F43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB1C968-DE13-47E9-A0B1-E2DA1A1C8CD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "439F7115-7B8F-4A95-B748-795E7D1C80A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311645A8-2614-4D07-AC73-A164BC5BFD68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467CF107-2801-4251-9223-38536E7EAA78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BAB9F8A-AB22-4A8F-9BF2-B58D9878B920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16147",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.aria-security.net/advisory/cmsimple.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cmsimple.dk/forum/viewtopic.php?t=2470",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442106/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14346",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.aria-security.net/advisory/cmsimple.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cmsimple.dk/forum/viewtopic.php?t=2470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442106/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTML via (1) the lastusername parameter to index.php or (2) selected_search_arch parameter to search.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en CuteNews 1.3.6 permite que atacantes remotos inyecten script web arbitrario o HTML mediante 1) el parámetro \"lastusername\" en index.php o 2) el parámetro \"selected_search_arch\" en search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7BF20D-34F9-453A-A54A-3A0B39EAAD58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014514",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "show_news.php in CuteNews 1.3.6 allows remote attackers to obtain the full path of the server via an invalid archive parameter."
      }, {
        "lang" : "es",
        "value" : "show_news.php en CuteNews 1.3.6 permite que atacantes remotos obtengan el path absoluto al servidor mediante un parámetro \"archive\" inválido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7BF20D-34F9-453A-A54A-3A0B39EAAD58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014514",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox 1.0.4 and 1.0.5  no elige el esquema de autentificación más fuerte disponible, como requiere la RFC2617, lo que podría provocar que las credenciales se envíen en texto plano, aunque haya disponible un canal encriptado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5PP0L00GUQ.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405666",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=281851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5PP0L00GUQ.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/405666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=281851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the page move template."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en MediaWiki 1.4.6 y anteriores permite que atacantes remotos inyecten script web arbitrario o HTML mediante un parámetro a la plantilla de mover página."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C96D337-1D37-4ADE-871D-9829928EE80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFB843C-4513-4569-9746-DA9FDD7A5CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377F0F7A-8E50-4803-9670-F719D17400D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4CCA5C-3594-41B4-99F3-FC99BA0495BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0A0C81-CDB6-4A11-B6B0-DECB12558DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BD0855-A9C8-47CD-BB50-E422E0C4A1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A9DCC7-CF58-44CC-9489-51FA79EECDF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80D651C6-116D-448A-8569-BAB9BAEC7D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AFC6EE-41C7-4369-8BA1-DDBF8A744ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F54837-5004-4D10-B3B0-502CED4F6592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09F36C1-CBC0-489E-B62D-4590A2E5A4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F0067D-534A-4238-A244-D92A73845432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEC422E-49BC-41D4-9F71-B834D4108EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D854161-28AA-4386-B90A-97F9692CE37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A0FA49-99DC-4691-968F-6AEB76B74370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0C6A2C-992B-45A0-8E0C-1AE983881337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292A77C7-8C7B-4F3A-B7FD-3505A9F37E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77FC97A-3BB2-4AA5-B0D6-C0D1FBEA5FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9393EF-083A-4662-BC7A-89979C2B8546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DE6A4E-6BCE-499E-B017-1E0F8D1F65B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD90730F-BF26-46C5-83F8-039CD661C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174665BA-F231-45F6-922C-933B8A613009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B175F5A-7CB6-44E6-9E98-FB40F6D14FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45833DC-F104-42BB-8688-4DE66AFF72F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A75AFB-2706-42FF-8534-B910997987AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E70F32-2F26-4836-8A4F-0A0B06EAD371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE506B8C-245E-4A7E-A24C-FABB1D4531EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934382C1-088A-4AEE-A71A-E9802AC9C1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9028E-1BDE-4BA0-A479-7A30020331D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D02E4C1-2BA7-4BC0-9C11-D0F74181DF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728E2852-5658-4DCC-AF1E-718B292F06C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-18.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14327",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in guestbook.php in phpBook 1.46 allows remote attackers to inject arbitrary web script or HTML via the admin parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en guestbook.php en phpBook 1.46 permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro \"admin\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:phpbook:1.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4311E06-6F60-4313-AA73-65DB01D25BDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014573",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP Surveyor 0.98 allows remote attackers to execute arbitrary SQL commands via (1) the sid, start, and id parameters to browse.php, the sid parameter to (2) dataentry.php, (3) export.php, (4) admin.php, (5) conditions.php, (6) spss.php, (7) deletesurvey.php, (8) dumpsurvey.php, or (9) statistics.php, or the lid parameter to (10) labels.php or (11) dumplabel.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en PHP Surveyor 0.98 permite que atacantes remotos ejecuten comandos SQL mediante: (1) parámetros sid, start, e id en browse.php, parámetro sid en (2) dataentry.php, (3) export.php, (4) admin.php, (5) conditions.php, (6) spss.php, (7) deletesurvey.php, (8) dumpsurvey.php, y (9) statistics.php, y parámetro lid en  (10) labels.php y (11) dumplabel.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_surveyor:php_surveyor:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E91066-133F-4946-B355-A951753A3D3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112188282401681&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16123",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112188282401681&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to (1) browse.php, (2) export.php, (3) conditions.php, or (4) spss.php."
      }, {
        "lang" : "es",
        "value" : "PHP Surveyor 0.98 permite que atacantes remotos generen errores SQL mediante un parámetro que falte a: (1) browse.php, (2) export.php, (3) conditions.php, o (4) spss.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_surveyor:php_surveyor:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E91066-133F-4946-B355-A951753A3D3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112188282401681&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16123",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112188282401681&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges."
      }, {
        "lang" : "es",
        "value" : "Los scripts nc.login.php en PHPFinance 0.3 permiten que atacantes remotos se salten el login y ganen privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpfinance:phpfinance:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9112D99-8F72-49A0-B47B-9ABAE72F2A1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpfinance/phpfinance/inc.conf.php?rev=1.2&view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpfinance/phpfinance/inc.login.php?rev=1.2&view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=343135",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpfinance/phpfinance/inc.conf.php?rev=1.2&view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpfinance/phpfinance/inc.login.php?rev=1.2&view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=343135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag."
      }, {
        "lang" : "es",
        "value" : "PHP-Fusion permite que atacantes remotos inyecten CSS arbitrario mediante el tag de color BBCode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DC9F38-3CAD-4B5F-8DC9-0183A92F640F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0EDB22-A7E0-44C0-903C-02EE07BC9675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1040A11C-5F39-4045-9E7B-A9FFC0D119ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:5.01_service_pack:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6D6B0C-920B-4547-A42A-6463BE84A3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F2384D-1E17-4DA8-A797-7E4729C2720F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21F2030-F535-49A4-8E6E-FD1CBE689AFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in PHPSiteSearch 1.7.7d allows remote attackers to inject arbitrary web script or HTML via the query parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en \"search.php\" en PHPSiteSearch 1.7.7d permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro  \"query\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsitesearch:phpsitesearch:1.7.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CF978C-8131-4AD3-8F29-0D3D0C2F3FA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rgod.altervista.org/PHPSiteSearch177dpoc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rgod.altervista.org/PHPSiteSearch177dpoc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username."
      }, {
        "lang" : "es",
        "value" : "El protocolo de login en RealChat 3.5 no usa autentificación, lo que permite que atacantes remotos se logueen como otros usuarios (escuchando el inicio de una sesión de chat y repitiéndola con un nombre de usuario modificado)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realchat:realchat:3.5.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23BDBD51-DDBD-445D-9678-DD92C7EC1895"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jul/0403.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Jul/0403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-07-27T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en sendcard.php de Sendcard 3.2.3  permite que atacantes remotos ejecuten código arbitrario SQL mediante el parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DDEA53D-9AE5-45FA-BFC1-4049656FF30D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 8.01, when the \"Arial Unicode MS\" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Opera 8.0.1, cuando está instalado el font Arial Unicode MS, no maneja adecuadamente los caracteres ASCII extendidos en el diálogo de descarga de ficheros, lo que permite que atacantes remotos engañen con las extensiones de ficheros y posiblemente induzcan a los usuarios a ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15870",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014592",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.opera.com/linux/changelogs/802/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14402",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1251",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21784",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/15870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.opera.com/linux/changelogs/802/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by tricking a user into dragging an image that is a \"javascript:\" URI."
      }, {
        "lang" : "es",
        "value" : "Opera 8.01 permite que atacantes remotos puedan realizar ataques con secuencias de comandos en sitios cruzados incitando al usuario a arrastrar una imagen que es una URI \"javascript:\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15756",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014593",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.opera.com/linux/changelogs/802/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14410",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1251",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.opera.com/linux/changelogs/802/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then tricking the user into double-clicking on the \"Run\" button, aka \"link hijacking\"."
      }, {
        "lang" : "es",
        "value" : "Un error de diseño en Opera 8.01 y anteriores permite a atacantes con la implicación del usuario superponer una ventana nueva maliciosa sobre un cuadro de diálogo de descarga de fichero, y entonces engañar al usuario para que haga doble clic en el botón \"Ejecutar\", tcc \"link hijacking\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.01",
            "matchCriteriaId" : "19F15684-F3B2-4083-98BF-DC69159B6203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15781",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-19/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1015353",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.opera.com/linux/changelogs/802/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15835",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1251",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/15781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-19/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1015353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.opera.com/linux/changelogs/802/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formateo de cadenas en util.c en nbsmtp 0.99 y anteriores, mientras se ejecuta en modo debug, permite que atacantes remotos ejecuten código arbitrario mediante especificadores de formato de cadena que no se manejan adecuadamente en una llamada syslog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nbsmtp:nbsmtp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99",
            "matchCriteriaId" : "4D02656B-2768-4727-A470-BCD5CFC10CB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://people.freebsd.org/~niels/issues/nbsmtp-20050726.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vuxml.org/freebsd/debbb39c-fdb3-11d9-a30d-00b0d09acbfc.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://people.freebsd.org/~niels/issues/nbsmtp-20050726.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vuxml.org/freebsd/debbb39c-fdb3-11d9-a30d-00b0d09acbfc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2410",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formateo de cadenas en  la función nm_info_handler en Network Manager puede permitir que atacantes remotos ejecuten código arbitrario mediante especificadores de formato de cadenas (ya que no se manejan adecuadamente en una llamada syslog)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:networkmanager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.4.1",
            "matchCriteriaId" : "A7873EDA-44B5-470A-9CFB-B2E5FED06BF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lwn.net/Alerts/145678/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mail.gnome.org/archives/networkmanager-list/2005-July/msg00196.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://mail.gnome.org/archives/networkmanager-list/2005-July/msg00197.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://lwn.net/Alerts/145678/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mail.gnome.org/archives/networkmanager-list/2005-July/msg00196.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://mail.gnome.org/archives/networkmanager-list/2005-July/msg00197.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2411",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-01T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad \"Cross-Site Request Forgery\" en tDiary 2.1.1 y 2.0.1 y anteriores, permite que atacantes remotos ejecuten acciones como otro usuario y ejecuten comandos en el servidor (mediante una URL que es activada por el usuario)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tdiary:tdiary:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "44FFB6E0-3B54-47CA-910C-A3E564FCF2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tdiary:tdiary:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D008FDC5-C6EB-4616-8B56-A210A552F840"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16329",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16787",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=482743",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-808",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/18604",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14500",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21735",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=482743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1762",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service (kernel crash) via a \"non-canonical\" address."
      }, {
        "lang" : "es",
        "value" : "La llamada a \"ptrace\" en el kernel de Linux 2.6.8.1 y 2.6.10 para la plataforma AMD64  permite que usuarios locales causen una denegación de servicio (caída del kernel) mediante una dirección \"no-canónica\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15786",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13904",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10630",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/143-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/143-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-02T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers allows remote attackers to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Admin Plus Pack Option for VERITAS Backup Exec 9.0 hasta 10.0 para Windows Servers  permite que atacantes remotos ejecuten código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAD90A9-B5AA-4D6A-9207-2A302BD2774C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555367EF-249E-4310-8A06-E59947D33576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B969FA8-F5F8-4C34-A99F-1630EAD4EA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15FFFB18-9F1D-4630-BD13-0F34A1D6E5D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276607.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/277429.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/352625",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-180A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/15789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/276607.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/277429.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/352625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-180A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1853",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges."
      }, {
        "lang" : "es",
        "value" : "gopher.c en el cliente Gopher 3.0.5 no crea adecuadamente los ficheros temporales, lo que permite que usuarios locales ganen privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_minnesota:gopher:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A6EB13-6F31-4E94-941F-D6B72A09FEE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-770",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jul/1014599.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Jul/1014599.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service (lack of response) via multiple invalid portmap requests."
      }, {
        "lang" : "es",
        "value" : "RPC portmapper (rpcbind) en SCO UnixWare 7.1.1 m5, 7.1.3 mp5, y 7.1.4 mp2 permite que atacantes remotos o usuarios locales causen una dengación de servicio (falta de respuesta) mediante múltiples peticiones portmap inválidas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.1_m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53376D4-40E5-43FC-90E9-88C89FF679C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.3_mp5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1550B238-186D-485D-B69C-DC5A2820A023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.4_mp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3662F98-36E6-4A34-A4B4-76F3544D894B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.31/SCOSA-2005.31.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112247187722821&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.31/SCOSA-2005.31.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112247187722821&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a long entry, as demonstrated using a long ES02TKS.VEW value in the Group Task section."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Cliente Novell GroupWise 6.5 permite que atacantes remotos ejecuten código arbitrario mediante un fichero de lenguaje GWVW02xx.INI con una entrada larga (como se demuestra usando un valor largo para ESO2TKS.VEW en la sección Group Task)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112247652532002&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098314.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112247652532002&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098314.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in block.php in PHP FirstPost allows remote attackers to execute arbitrary PHP code via the Include parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero remoto PHP en block.php en PHP FirstPost permite que atacantes remotos ejecuten código PHP arbitrario mediante el parámetro \"include\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_firstpost:php_firstpost:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84F7994-4073-4B62-B3F9-07AC39A70D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112230599222543&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112230599222543&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote attackers to execute arbitrary PHP code via the apa_module_basedir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero remoto PHP en apa_phpinclude.inc.php en Atomic Photo Album (APA)  permite que atacantes remotos ejecuten código PHP arbitrario mediante el parámetro \"apa_module_basedir\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B8363D-96B3-4A50-8696-10D37F9ACDB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E281306-8908-41D4-82A4-128D6B0AA8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E37F83-12C3-48E4-906E-B879C5D1ABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28113521-EE23-4BDA-89D3-3772641909B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4273D7C0-3C38-4433-9D13-D42C4872D978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54BECF11-C4A9-4470-8F47-909779FEEC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.1.0_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FF839-330A-4C2B-BB1A-9995DB7EACD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.1.0_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E53952-5184-4A87-8BC1-9ABC1529D281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.1.0_pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB359041-3C3F-4D17-996A-9807CAF0392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.1.0_pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D1795D-E84D-4C6F-BBDF-16D8956F66E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112230428725189&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112230428725189&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remote attackers to cause a denial of service (application crash) via a large HTML file that loads a DOM call from within nested DIV tags, which causes part of the currently rendering page and referenced objects to be deleted."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad \"race condition\" en la librería xpcom, usada por Firefox, Mozilla, Netscape y Galeon, permite que atacantes remotos causen una denegación de servicio (caída de la aplicación) mediante un fichero HTML grande que carga una llamada DOM desde dentro de tags DIV anidados. Esto causa que partes de la página y objetos referenciados sean borrados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpcom:xpcom:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B491A4A7-C60F-4E62-A877-B86BD03C56ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112199282029269&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00091-07212005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112199282029269&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00091-07212005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en Contrexx anterior a la 1.0.5 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro \"value\" al módulo poll o el parámetro \"pld\" al módulo gallery"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astalavista_it_engineering:contrexx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "3B18553E-DB63-4EB4-96AC-FA93E9F11B7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112206702015439&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_112005.59.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112206702015439&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_112005.59.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) term parameter to the search module or (2) title in the blog aggregation module."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en Contrexx anterior a la 1.0.5 permite que atacantes remotos inyecten script web o HTML mediante el parámetro \"term\" al módulo de búsqueda o el título en el módulo de agregación de blog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astalavista_it_engineering:contrexx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "3B18553E-DB63-4EB4-96AC-FA93E9F11B7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112206702015439&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_112005.59.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112206702015439&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_112005.59.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xml."
      }, {
        "lang" : "es",
        "value" : "Contrexx anterior a la 1.0.5 permite que atacantes remotos obtengan información confidencial mediante una petición directa a /config/version.xml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astalavista_it_engineering:contrexx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "3B18553E-DB63-4EB4-96AC-FA93E9F11B7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112206702015439&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_112005.59.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112206702015439&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_112005.59.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:37.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2403.  Reason: This candidate is a duplicate of CVE-2005-2403.  Notes: All CVE users should reference CVE-2005-2403 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "B-FOCuS Router 312+ allows remote attackers to bypass authentication and gain unauthorized access via a direct request to firmwarecfg."
      }, {
        "lang" : "es",
        "value" : "B-FOCuS Router 312+  permite que atacantes remotos se salten la autentificación y obtengan acceso no autorizado mediante una petición directa a firmwarecfg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:eci_telecom:b-focus_router:312:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886E6BBA-9B01-45C2-B041-74E497B9FA21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112230649106740&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112230649106740&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP GET request."
      }, {
        "lang" : "es",
        "value" : "flsearch.pl en FtpLocate 2.02  permite que atacantes remotos ejecuten comandos arbitrarios mediante metacaracteres shell en la petición HTTP GET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ftplocate:ftplocate:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D71190-6B77-401F-A160-E3F0FE907F1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112230697123357&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112230697123357&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php and other pages in Beehive Forum allow remote attackers to execute arbitrary SQL commands via the webtag parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en index.php y otras páginas en Beehive Forum permite que atacantes remotos ejecuten comandos SQL arbitrarios a través del parámetro \"webtag\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C479F7-639D-4C3D-9449-E94426C3B1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD1988-4C10-4F78-A84A-AAFCB1DFFB6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8FB1E8-E4E3-4C72-9012-72D60E5C3B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB948F88-6C9F-44B6-850F-9F6B02738A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400EACD2-95CE-404E-B8F8-21A92A6D7817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6071EAB1-B425-43D7-ACDE-009972279603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D73944F-A924-4801-A819-730AB165171C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4543096-BA8B-41A0-B0F5-CE92A063898E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E19DFA-F5D4-4D64-8B5D-65E10B7E1698"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112230744103930&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112230744103930&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Beehive Forum allows remote attackers to inject arbitrary web script or HTML via the webtag parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en index.php en Beehive Forum permite que atacantes remotos inyecten script web o HTML arbitrarios mediante el parámeto \"webtag\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C479F7-639D-4C3D-9449-E94426C3B1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD1988-4C10-4F78-A84A-AAFCB1DFFB6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8FB1E8-E4E3-4C72-9012-72D60E5C3B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB948F88-6C9F-44B6-850F-9F6B02738A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400EACD2-95CE-404E-B8F8-21A92A6D7817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6071EAB1-B425-43D7-ACDE-009972279603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D73944F-A924-4801-A819-730AB165171C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4543096-BA8B-41A0-B0F5-CE92A063898E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E19DFA-F5D4-4D64-8B5D-65E10B7E1698"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112230744103930&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112230744103930&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Beehive Forum allows remote attackers to obtain sensitive information via (1) an invalid final_uri or sort_by parameter to index.php or a direct request to (2) admin.php, (3) attachments.inc.php, (4) banned.inc.php, (5) beehive.inc.php, (6) constants.inc.php, (7) db.inc.php, (8) dictionary.inc.php or (9) search_index.php, which reveal the path in an error message."
      }, {
        "lang" : "es",
        "value" : "Beehive Forum permite que atacantes remotos obtengan información confidencial mediante: (1)  inválidos parámetros final_uri o sort_by parameter en  index.php o una petición directa a: (2) admin.php, (3) attachments.inc.php, (4) banned.inc.php, (5) beehive.inc.php, (6) constants.inc.php, (7) db.inc.php, (8) dictionary.inc.php or (9) search_index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C479F7-639D-4C3D-9449-E94426C3B1C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD1988-4C10-4F78-A84A-AAFCB1DFFB6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8FB1E8-E4E3-4C72-9012-72D60E5C3B49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB948F88-6C9F-44B6-850F-9F6B02738A8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400EACD2-95CE-404E-B8F8-21A92A6D7817"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6071EAB1-B425-43D7-ACDE-009972279603"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D73944F-A924-4801-A819-730AB165171C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4543096-BA8B-41A0-B0F5-CE92A063898E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E19DFA-F5D4-4D64-8B5D-65E10B7E1698"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112230744103930&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112230744103930&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson HN294dp and Dynalink RTA300W, allows remote attackers to access the Telnet port without authentication via certain packets to the web interface that cause the interface to freeze."
      }, {
        "lang" : "es",
        "value" : "La interfaz de administración de Siemens SANTIS 50 running firmware 4.2.8.0, y posiblemente otros productos como Ericsson HN294dp y Dynalink RTA300W permite que atacantes remotos accedan al puerto Telnet sin autentificación mediante ciertos paquetes a la interfaz web (lo que provoca que la interfaz se congele)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:siemens:santis_50:4.2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "781F6738-836C-468C-97CF-DC3EFB9455B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112230914431638&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securenetwork.it/advisories/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112230914431638&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securenetwork.it/advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via a (1) long history parameter in the configuration file (ares.conf) or (2) long search string."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Ares FileShare 1.1 permite que atacantes remotos o usuarios locales ejecuten código arbitrario mediante (1) parámetros de configuración largos en el fichero de configuración (ares.conf), o (2) string de búsqueda largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ares:fileshare:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF473A7-73CA-4AD0-935E-73AB66E3A216"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112239196706345&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112239196706345&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application crash) by multiple connections and disconnections without using the QUIT command."
      }, {
        "lang" : "es",
        "value" : "FTPshell Server 3.38 permite que usuarios autentificados remotos causen una denegación de servicio (caída de la aplicación) mediane conexiones múltiples y desconexiones sin usar el comando \"QUIT\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftpshell:ftpshell_server:3.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "401E054B-F50C-4BBA-AC9F-D3EB7A506037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112239297430460&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112239297430460&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en viewCart.asp en CartWIZ permite que atacantes remotos inyecten código web arbitrario o HTML mediante el parámetro \"message\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elemental_software:cartwiz:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983269A3-3EE9-44AB-9846-AF222CA728D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112240525414263&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112240525414263&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lotus Domino R5 and R6 WebMail, with \"Generate HTML for all fields\" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696."
      }, {
        "lang" : "es",
        "value" : "Lotus Domino R5 and R6 WebMail  almacena datos en campos ocultos en \"names.nsf\" (con permisos de lectura universal), lo que permite que atacantes remotos otengan información confidencial mirando el código HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3264F8E8-C40A-4C5C-BF2C-BD4690FE7EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9989FEB-3B5E-40FF-BDBF-CFC835BCF93B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D6F4E6-2C8A-40B6-9DB9-38E15D2AFEEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112240869130356&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16231/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21212934",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cybsec.com/vuln/default_configuration_information_disclosure_lotus_domino.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5FP0E15GLQ.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/39495/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112240869130356&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16231/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21212934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cybsec.com/vuln/default_configuration_information_disclosure_lotus_domino.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5FP0E15GLQ.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/39495/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows remote attackers to write arbitrary data to open applications in Microsoft Office."
      }, {
        "lang" : "es",
        "value" : "Firefox, cuando abre documentos de Microsoft Word, no fija adecuadamente los permisos en secciones compartidas, lo que permite que atacantes remotos escriban datos arbitrarios en aplicaciones abiertas en Microsoft Office."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112248181422193&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112248181422193&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id or (2) group_id parameter to forum.php, (3) project_task_id parameter to task.php, (4) id parameter to detail.php, (5) the text field on the search page, (6) group_id parameter to qrs.php, (7) form, (8) rows, (9) cols or (10) wrap parameter to notepad.php, or the login field on the login form."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados en GForge 4.5 permiten que atacantes remotos inyecten script web arbitrario o HTML mediante: el parámetro (1) forum_id o (2) group_id a forum.php, (3) parámetro project_task_id a task.php, (4)parámetro  id a detail.php, (5) el campo de texto en la página de búsqueda, (6) parámetro  group_id a qrs.php, (7) form, (8) rows, (9) cols o (10) parámetro  wrap a notepad.php, o (11) el campo de login en la página de login."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gforge:gforge:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542842B0-9FD5-48A8-915E-59F030FED57F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112259845904350&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16253/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112259845904350&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16253/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses (aka mail bomb)."
      }, {
        "lang" : "es",
        "value" : "Las funcionalidades pendientes de password perdido o cuenta en GForge 4.5 no fijan adecuadamente un límite en el número de e-mails enviados a una dirección de e-mail, lo que permite que atacantes remotos envíen un número elevado de mensajes a direcciones e-mail arbitrarias (\"bomba de correo\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gforge:gforge:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542842B0-9FD5-48A8-915E-59F030FED57F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112259845904350&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112259845904350&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin."
      }, {
        "lang" : "es",
        "value" : "Vulerabilidad de inyección de SQL en PhpList permite que atacantes remotos modifiquen sentencias SQL mediante el argumento id en las páginas de administració, tales como \"members\" o \"admin\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D81DDB-41DD-406E-85A1-49B739B519E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112258115325054&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112291396731712&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16274",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112258115325054&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112291396731712&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php, (3) domainstats.php or (4) usercheck.php in public_html/lists/admin directory, (5) attributes.php, (6) dbcheck.php, (7) importcsv.php, (8) user.php, (9) usermgt.php, or (10) users.php in admin/commonlib/pages directory, (11) helloworld.php, or (12) sidebar.php in public_html/lists/admin/plugins directory, or (13) main.php in public_html/lists/admin/plugsins/defaultplugin directory, which reveal the path in an error message."
      }, {
        "lang" : "es",
        "value" : "PhoList permite que atacantes remotos obtengan información confidencial mediante una petición directa a: (1) about.php, (2) connect.php, (3) domainstats.php o (4) usercheck.php en el directorio public_html/lists/admin , (5) attributes.php, (6) dbcheck.php, (7) importcsv.php, (8) user.php, (9) usermgt.php, o (10) users.php en el directorio admin/commonlib/pages , (11) helloworld.php, o (12) sidebar.php en el directorio public_html/lists/admin/plugins, o (13) main.php en el directorio public_html/lists/admin/plugsins/defaultplugin, lo que revela el path en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D81DDB-41DD-406E-85A1-49B739B519E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112258115325054&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112258115325054&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to sniff the SSL connection and obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "El rúter de Linksys WRT54G usa la misma clave privada en todos los rúter, lo que permite que atacantes remotos puedan escuchar conexiones SSL y obtener así información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBECE9D-7805-4521-A0B1-15F2755312B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112258422806340&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112258422806340&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbitrary web script or HTML via the dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en browse.php en Website Baker Project permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro \"dir\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:website_baker:website_baker:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E331CB78-5CD0-4847-9828-7DE4F2E67C14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112260471228762&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112260471228762&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "browse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a directory that does not exist in the dir parameter or (2) a direct request to certain php files, which reveal the path in an error message."
      }, {
        "lang" : "es",
        "value" : "browse.php en Website Baker Project permite que atacantes remotos obtengan información confidencial mediante un directorio que no existe en el parámetro \"dir\", o una petición directa a ciertos ficheros php (lo que revela el path en un mensaje de error)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:website_baker:website_baker:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E331CB78-5CD0-4847-9828-7DE4F2E67C14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112260471228762&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112260471228762&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to upload and execute arbitrary PHP code."
      }, {
        "lang" : "es",
        "value" : "Website Baker Project no verifica adecuadamente las extensiones de los ficheros subidos, lo que permite que atacantes remotos suban y ejecuten código php arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:website_baker:website_baker:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E331CB78-5CD0-4847-9828-7DE4F2E67C14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112260471228762&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112260471228762&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier allows remote attackers to inject arbitrary Javascript via the BBCode color value."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados en UseBB 0.5.1 y anteriores permite que atacantes remotos inyecten Javascript arbitrario mediante el valor del color BBCode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47515248-71FF-451D-BA3A-B3729A08E12E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F89271-645A-478B-BBE7-65AC42D9CC0A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575F8D44-98DF-4D4E-B87D-09D9D6B5C56A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF43C451-3507-4362-96D0-152A49ED3342"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031AA5C9-E4C8-46E5-A299-BCECD0591D66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A045B4F-3A02-41D7-A2E0-3DD224D7C871"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D12B81-5E0E-4123-BD1C-B5E823BB3726"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D32DFF5-107C-4A8B-AD35-E918197C396C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF8DED1-980C-4463-A4BC-D8326D98FB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E736160-C577-4BCD-BBA4-DF0EF3B0382C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07549F5B-69A1-4E16-8989-9CB91B0529AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576D4057-3550-48DF-98EB-06DB8FF9D0CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E57778-CCE4-473C-9ED3-FC74F1C3E7E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7322CBAE-D9DA-4663-9D4A-AEEF5F0C0CEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112264706213040&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_122005.60.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.usebb.net/community/topic.php?id=605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112264706213040&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_122005.60.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.usebb.net/community/topic.php?id=605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en UseBB 0.5.1 y anteriores, cuando \"magic_quotes_gpc\" está deshabilitado, permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante la función de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47515248-71FF-451D-BA3A-B3729A08E12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F89271-645A-478B-BBE7-65AC42D9CC0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575F8D44-98DF-4D4E-B87D-09D9D6B5C56A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF43C451-3507-4362-96D0-152A49ED3342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031AA5C9-E4C8-46E5-A299-BCECD0591D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A045B4F-3A02-41D7-A2E0-3DD224D7C871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D12B81-5E0E-4123-BD1C-B5E823BB3726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D32DFF5-107C-4A8B-AD35-E918197C396C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF8DED1-980C-4463-A4BC-D8326D98FB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E736160-C577-4BCD-BBA4-DF0EF3B0382C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07549F5B-69A1-4E16-8989-9CB91B0529AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576D4057-3550-48DF-98EB-06DB8FF9D0CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E57778-CCE4-473C-9ED3-FC74F1C3E7E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7322CBAE-D9DA-4663-9D4A-AEEF5F0C0CEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112264706213040&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_122005.60.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.usebb.net/community/topic.php?id=605",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112264706213040&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_122005.60.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.usebb.net/community/topic.php?id=605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitrary SQL commands via the svmPassword parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en login.asp en Thomson Web Skill Vantage Manager permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro \"svmPassword\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomson_netg:web_skill_vantage_manager:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C31171F-8171-4F56-90F3-52EC5ECE052E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112258777107822&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16268/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112258777107822&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16268/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados en VBzoom permite que atacantes remotos inyecten script web arbitrario y HTML mediante el parámetro UserName en profile.php o el parámetro UserID en login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BC647F-88F4-4DCB-89F5-73E5D3123BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112300586019568&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426874/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112300586019568&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426874/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Javascript from one application into another."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en aplicaciones cruzadas en SPI Dynamis WbInspect 5.0.196 permite que atacantes remotos inyecten Javascript de una aplicación a otra."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spi_dynamics:webinspect:5.0.196:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C464D57-AE7B-479E-AE5D-BEB8F35642C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035414.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112239353829324&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112264765216499&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14385",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035414.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112239353829324&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112264765216499&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kshout 2.x and 3.x stores settings.dat under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords."
      }, {
        "lang" : "es",
        "value" : "Kshout 2.x and 3.x almacena settings.dat bajo el documento root del web, con insuficiente control de acceso, lo que permite que atacantes remotos obtengan información confidencial tal como los nombres de usuarios o sus claves."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kshout:kshout:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2351CAD-C999-47F5-83F3-D4207004CCD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112274114623893&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/advisory/kshout_advisory.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112274114623893&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/advisory/kshout_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Trillian Pro 3.1 build 121, cuando comprueba el e-mail de Yahoo, almacena el password en texto plano en un fichero legible y no borra ese fichero después del login, lo que permite que usuarios locales conozcan esa información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerulean_studios:trillian_pro:3.1_build_121:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C47987-82A8-4653-8AF6-3B831144BD37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112274667603628&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112274667603628&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQK en viewPrd.asp en Product Cart 2.6 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámeto \"idcategory\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:early_impact:product_cart:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D220A3-8433-488D-B01B-4995B1F01493"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112274710020521&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112274710020521&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:37.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2369.  Reason: This candidate is a duplicate of CVE-2005-2369.  Notes: All CVE users should reference CVE-2005-2369 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:37.780",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2370.  Reason: This candidate is a duplicate of CVE-2005-2370.  Notes: All CVE users should reference CVE-2005-2370 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"endianness errors\" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invalid behavior in applications) on big-endian systems."
      }, {
        "lang" : "es",
        "value" : "Múltiples errores de \"endianness\" en libgadu en ekg anterior a la 1.6rc2 permite que atacantes remotos causen una denegación de servicio (compartamiento inválido en aplicaciones) en sistemas big-endian."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A32270-8C65-4ED4-96CB-B389B97587A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17988E27-6C98-48B4-8779-4EF69E8DBD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FCB0EE-8BCE-4E68-B78D-A57E8E9DEC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D723B90C-9746-4F94-A8A3-273240A2CBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A4DE4D-6521-49DF-917A-7621CABA3D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:2005-04-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0288DF54-4271-42AD-8985-07440A7CFBC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekg:ekg:2005-06-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1B9704-DBF5-4973-9E37-D6D904B15626"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/24600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/24600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp."
      }, {
        "lang" : "es",
        "value" : "\"Race condition\" en sandbox anterior a la 1.2.11 permite que usuarios locales creen o sobreescriban ficheros arbitrarios mediante un ataque de enlaces simbólicos en sandobxpids.tmp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C04E95-48E0-4F99-9FF6-19B003C710FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C0FDB2-3343-4082-ACA4-9A033E090E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.1_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9B4B07-AD80-46CB-BF21-D11CDB753630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A65A1840-BB99-42BE-A2D7-BDDF5D1B6F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9BC0E0-8D71-42DF-A4AE-FB2C502CB7E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53182CAA-9474-4469-9211-36EA012537D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A4AC13-F885-400D-B555-D7C6647F624A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.5_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B20DC9-DE75-4DFF-8BA9-709AF7BA1834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.5_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A0ABB0-DA9F-4DC8-B420-E7924C91EB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822A133E-75A1-4517-84B2-7C01FCA6F8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF8BE44-95A0-4D2A-9FEB-D914C7BEF4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064760A7-4A9F-4260-9F19-EE8D6C2B5DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286F256F-94DD-4499-8E5F-F68B50AA6B8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandbox:sandbox:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E8BF5B-F57C-4E87-95B6-D3655920AC0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=96782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-22.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=96782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en los procesadores de formato de fichero NEF, CHM y FSG en libclamav for Clam AntiVirus (ClamAV) 0.86.1 y anteriores  permite que atacantes remotos ganen privilegios mediante un e-mail amañado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112230864412932&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-25.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=344514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112230864412932&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200507-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=344514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet."
      }, {
        "lang" : "es",
        "value" : "Cisco IOS 12.0 hasta 12.4 y IOS XR anterior a 3.2 con IPv6 habilitado, permite que atacantes remotos en un segmento de red local provoquen una denegación de servicio (recarga del dispositivo) y posiblmemente ejecuten código arbitrario mediante un paquete IPv6 amañado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6B0C2F-2FBE-4422-AD30-305100C595CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEA01D2-B985-4575-AF00-144CE2E3024D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E78DEE-1125-4183-A0CD-947B850E956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DC4B6-8B3D-4A0D-9934-743FD7494DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF3601D-DF44-4A10-A424-8E97C65A36A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1835410-77EB-46F2-ACF0-379759D4B0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88DCCDE-6A81-473F-B4FE-95A84F8DF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B9E2C6-0E23-4AC9-906F-28BBC15868DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9F8FF-94EA-4D1D-93AE-623075014426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F44EC8-13BF-4032-9EBA-0D50C6A353BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98E703A-717D-4997-AFBC-CAE4B644025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B27825D-099A-4733-8D3F-8EF2B050E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8A1FE0-F74A-4C92-8625-7C933128B567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB7E760-8260-4488-B9FB-C741C1763F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F4B373-490C-463F-B518-89D0CABB852C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A9400-571E-4955-AB84-C49A4255A5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A68D177-B028-4025-BD7B-82ACDB2D1E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D717498-4DF9-4D15-A25B-D777FF460E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972EC35D-B727-49A0-A0F1-654FD4E9576C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7918C59-1678-4F24-A7C2-68824D1B59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56365432-1E57-4D35-B764-DDDA878B96ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390755B3-30B7-4086-8FB2-A41614F747D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB57AAA9-4715-468F-A734-A12209A6069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A310F30-F94D-4A70-94BD-6B94D7B5F5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778F5573-0741-442F-AFFA-937053F8280C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF0D7F5-7A9C-4E58-A9DB-33BF13CE135D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0663.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050729-ipv6.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/930892",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-210A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050729-ipv6.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/930892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-210A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-03T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header with a zero \"YCbCr subsampling\" value, which causes a divide-by-zero error in (1) tif_strip.c and (2) tif_tile.c, a different vulnerability than CVE-2004-0804."
      }, {
        "lang" : "es",
        "value" : "libtiff hasta 3.7.0 permite que atacantes remotos causen una denegación de servicio (caída de la aplicación) mediante un encabezamiento de imagen TIFF con un valor cero para \"YCbCr subsampling\", lo que causa un error de división por cero en (1) tif_strip.c y (2) tif_tile.c, una vulnerabilidad diferente de CVE-2004-0804."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5021564-5E0A-4DDC-BC68-200B6050043E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AA66E5-FDDD-4243-B945-DFEBDD25F258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C8C550-3313-4266-B4B3-E9E9047CFE04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16266",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=12008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/156-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=12008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/156-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the query string."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, y 3.5.13 (y quizás otras versiones), permite que atacantes remotos inyecten script web o HTML mediante el string de query."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:networkactiv:networkactiv_web_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B088EE-495F-4CE0-A07A-AA0D4B2491D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:networkactiv:networkactiv_web_server:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5F3FCD-A7EA-4440-8BDE-E08CE84D21EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:networkactiv:networkactiv_web_server:3.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518E13B2-19BC-4EB8-87A7-E3B84DA8C040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:networkactiv:networkactiv_web_server:3.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7695F-1559-4C92-995F-898CD66E6D54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16301",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-31/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-31/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2) list installed scripts using GM_scripts, or obtain sensitive information via (3) GM_setValue and GM_getValue."
      }, {
        "lang" : "es",
        "value" : "Greasemonkey anterior a la 0.3.5 permite que servidores web remotos: (1) lean ficheros arbitraios (función GM_xmlhttpRequest), (2) liste scripts instalados usando GM_scripts, y (3) obtenga información valiosa mediante GM_setValue y GM_getValue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greasemonkey:greasemonkey:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE9692F-4C76-4933-9F53-53D61D17DFD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://greaseblog.blogspot.com/2005/07/mandatory-greasemonkey-update.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://greasemonkey.mozdev.org/changes/0.3.5.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mozdev.org/pipermail/greasemonkey/2005-July/004000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://mozdev.org/pipermail/greasemonkey/2005-July/004022.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16128",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014529",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5CP0P20GBK.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14336",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://greaseblog.blogspot.com/2005/07/mandatory-greasemonkey-update.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://greasemonkey.mozdev.org/changes/0.3.5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mozdev.org/pipermail/greasemonkey/2005-July/004000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://mozdev.org/pipermail/greasemonkey/2005-July/004022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5CP0P20GBK.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-04T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock->sk_policy array."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento en el índice del array en la función xfrm_sk_policy_insert en xfrm_user.c en el kernel de Linux 2.6 permite que usuarios locales provoquen una denegación de servicio y posiblemente ejeucten código arbitrario mediante una valor de p->dir que sea  mayor que XFRM_POLICY_OUT (usado como índice en el array sock->sk_policy)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16298",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16500",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=8da3e25b2c4c1f305fd85428d3a9eb62b543bfba%3Bhp=ecade4893a139cc35d4fe345ce70242ede5358c4%3Bhb=a4f1bac62564049ea4718c4624b0fadc9f597c84%3Bf=net/xfrm/xfrm_user.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a4f1bac62564049ea4718c4624b0fadc9f597c84",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mail-archive.com/netdev%40vger.kernel.org/msg00520.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14477",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21710",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10858",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=8da3e25b2c4c1f305fd85428d3a9eb62b543bfba%3Bhp=ecade4893a139cc35d4fe345ce70242ede5358c4%3Bhb=a4f1bac62564049ea4718c4624b0fadc9f597c84%3Bf=net/xfrm/xfrm_user.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a4f1bac62564049ea4718c4624b0fadc9f597c84",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mail-archive.com/netdev%40vger.kernel.org/msg00520.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1268",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte."
      }, {
        "lang" : "es",
        "value" : "Error de fuera-por-uno en la retrollamda de verificación de Lista de Revocación de Certificados (CRL) de mod_ssl para Apache, cuando se configura para usar un CRL, permite a atacantes remotos causar una denegación de servicio (caída de proceso hijo) mediante una CRL que causa un desbordamiento de búfer de un byte nule."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.35",
            "versionEndIncluding" : "2.0.54",
            "matchCriteriaId" : "7535ECA4-B797-455A-9DFA-11F2698EF126"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397313C3-6BF5-4A87-90B3-55678E807171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FE6DAA-4702-409A-98B6-DE13B12805A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5DCF29-6830-45FF-BC88-17E2249C653D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-582.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19072",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/604",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-805",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:129",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_46_apache.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14366",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163013",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1346",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1747",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9589",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-582.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_46_apache.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Apache",
        "comment" : "Fixed in Apache HTTP Server 2.0.55:\nhttp://httpd.apache.org/security/vulnerabilities_20.html",
        "lastModified" : "2008-07-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 permite que atacantes remotos ejecuten código arbitrario mediante el envío de una cadena larga al puerto 6070 ó 6050."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937AD0E8-1FA8-4246-9CDD-5DBC902D2052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78AA54EA-DAF1-4635-AA1B-E2E49C4BB597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup:9.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "CFA805A6-4507-4063-A30D-4BE9B6CA5040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup:9.0_1:*:oracle:*:*:*:*:*",
            "matchCriteriaId" : "590FC2F4-DEF9-43B5-9FE5-4B28C9BA393C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:oracle:*:*:*:*:*",
            "matchCriteriaId" : "C0F75ADA-8761-4672-901B-A3D41B5138B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D231F28B-F0CC-4B46-801F-E86A371C814B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:oracle:*:*:*:*:*",
            "matchCriteriaId" : "76B1841C-ECFC-42D5-914F-0B19EB437CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9E11A387-BF4A-4A54-8F29-37EFF14D72DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:9.0.1:*:exchange:*:*:*:*:*",
            "matchCriteriaId" : "2355FC94-DC88-4759-959C-BCD037271D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:9.0.1:*:sap:*:*:*:*:*",
            "matchCriteriaId" : "2679DEE2-A318-4319-BB0E-824B6DE03A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:9.0.1:*:sql:*:*:*:*:*",
            "matchCriteriaId" : "2D09C368-72B3-4065-A4A5-064595CFC5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11:*:exchange:*:*:*:*:*",
            "matchCriteriaId" : "0E007AC1-E84F-4D05-838B-EF317FF455E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11.0:*:sap:*:*:*:*:*",
            "matchCriteriaId" : "86BCE53E-EE56-4370-8C2A-39D3A4083BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11.0:*:sql:*:*:*:*:*",
            "matchCriteriaId" : "E8D21407-0C60-4598-87D4-1386E4C20E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11.1:*:exchange:*:*:*:*:*",
            "matchCriteriaId" : "FE8E44C1-250D-4BCE-8F72-4B19D12B4D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11.1:*:sap:*:*:*:*:*",
            "matchCriteriaId" : "5CB10448-1451-4BB8-9D9C-46A7CE947FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11.1:*:sql:*:*:*:*:*",
            "matchCriteriaId" : "5C80D603-C650-465E-A9FD-34BA6E36335A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.0:*:oracle:*:*:*:*:*",
            "matchCriteriaId" : "E53DF21C-D2C0-4982-A02E-3E0D6164F9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.0:*:sap:*:*:*:*:*",
            "matchCriteriaId" : "DF691595-496E-4024-BB46-B36BB369E8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.0:*:sql:*:*:*:*:*",
            "matchCriteriaId" : "025B5168-F250-4541-ADAC-46395E58D89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.5:*:oracle:*:*:*:*:*",
            "matchCriteriaId" : "59089180-9FCC-4048-85E6-24C260736A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.5:*:sap:*:*:*:*:*",
            "matchCriteriaId" : "17445E00-10FF-4BB6-9FA9-9C68444B8ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.5:*:sql:*:*:*:*:*",
            "matchCriteriaId" : "897538FC-F1C7-4834-B45E-0B9EF5A609FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/279774",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14453",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/279774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1761",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en el kernel de Linux permite que usuarios locales provoquen una denegación de servicio mediante ptrace"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:open_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2740DD2-7F0C-47DE-9174-FD8BF0106D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5595E484-647C-4F85-94AB-5A4D55CD766B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*",
            "matchCriteriaId" : "C7EAAD04-D7C4-43DE-B488-1AAD014B503E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D2E2EF3C-1379-4CBE-8FF5-DACD47834651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea78729b8dbfc400fe165a57b90a394a7275a54",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_44_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea78729b8dbfc400fe165a57b90a394a7275a54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_44_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1767",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault exception)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en el kernel de Linux 2.6.x y 2.4.x permite que usuarios locales provoquen una denegación de servicio (\"stack fault exception\") mediante métodos desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:open_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2740DD2-7F0C-47DE-9174-FD8BF0106D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5595E484-647C-4F85-94AB-5A4D55CD766B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*",
            "matchCriteriaId" : "C7EAAD04-D7C4-43DE-B488-1AAD014B503E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D2E2EF3C-1379-4CBE-8FF5-DACD47834651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=51e31546a2fc46cb978da2ee0330a6a68f07541e",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_44_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14467",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-187-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=51e31546a2fc46cb978da2ee0330a6a68f07541e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_44_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-187-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1854",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in apt-cacher in Debian 3.1, related to \"missing input sanitising,\" allows remote attackers to execute arbitrary commands on the caching server."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en apt-catcher en Debian 3.1 relacionada con \"missing input sanitising\", permite que atacantes remotos ejecuten código arbitrario en el servidor donde se cachea."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt-cacher:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1371B72F-59E7-4F90-A16D-49D69CC9DD38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt-cacher:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCD8B38-CC03-4D31-A373-D6176DE22809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16327",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-772",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14459",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21664",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2353",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files."
      }, {
        "lang" : "es",
        "value" : "run-mozilla.sh en Thunderbird, con debuggin activado, permite que usuarios locales creen o escriban en ficheros arbitrarios mediante un ataque symlink en ficheros temporales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:173",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14443",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/157-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/157-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2359",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session."
      }, {
        "lang" : "es",
        "value" : "El algoritmo AES-XCBC-MACen IPsec en FreeBSD 5.3 y 5.4, cuando se usa para autentificación sin otra encriptación, usa una clave constante (en vez de la que  asigne el administrador del sistema). Esto puede permitir que atacantes remotos establezcan una sesión IPsec."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:19.ipsec.asc",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://secunia.com/advisories/16244/",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014586",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14394",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21551",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:19.ipsec.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16244/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pstopnm in netpbm does not properly use the \"-dSAFER\" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands."
      }, {
        "lang" : "es",
        "value" : "pstopnm en netpbm no usa adecuadamente la opción \"-dSAFER\" (cuando llama a Ghostscript para convertir un archivo PostScript en un pbm, pgm o pnm), lo que permite que atacantes remotos con la intervención del usuario puedan ejecutar comandos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:2.10.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21F0D2D-880B-44DA-BEF0-704CD7AE0B87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=319757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16184",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18330",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19436",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-743.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0038/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=319757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-743.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0038/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in BusinessMail 4.60.00 allow remote attackers to cause a denial of service (application crash) via a long string to SMTP (1) HELO or (2) MAIL FROM commands."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en BusinessMail 4.60.00 permite que atacantes remotos provoquen una denegación de servicio (caída de la aplicación) mediante un string largo en los comandos SMTP: HELO o MAIL FROM."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netcplus:businessmail:4.60.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC370BCC-405B-4476-B83C-6B351422BC76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035647.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112291456305261&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://reedarvin.thearvins.com/20050730-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16306",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14434",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035647.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112291456305261&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://reedarvin.thearvins.com/20050730-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php, or (7) UserDelete.php, (8) DepositSlipID parameter to DepositSlipEditor.php, (9) QueryID parameter to QueryView.php, GroupID parameter to (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, or (15) /Reports/GroupReport.php, (16) PropertyID parameter to PropertyEditor.php, FamilyID parameter to (17) Canvas05Editor.php, (18) CanvasEditor.php, or (19) FamilyView.php, or (20) PledgeID parameter to PledgeDetails.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en ChurchInfo permite que atacantes remotos ejecuten comandos SQL arbitrarios en: (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php,  (7) UserDelete.php, (8) DepositSlipEditor.php, (9) QueryView.php,  (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, (15) /Reports/GroupReport.php, (16) PropertyEditor.php,  (17) Canvas05Editor.php, (18) CanvasEditor.php, (19) FamilyView.php,  (20) PledgeDetails.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F879219C-C632-459D-A16F-8342B60462A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C82088-3340-4612-BA6A-86A7F8E960F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C458ED-C5A0-4F6F-874D-7736BC9B4DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB7A122-18F3-4EC2-B91F-17F3D18C4B95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D3103F-8660-481E-8B6A-6BEC565E668C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD7E63B-9E84-4C73-B6B9-97E19F763AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AF3C4E-031D-4F81-94F2-11FF29BF2207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C41826-6116-4F37-BA73-6B9C8AE2A299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F6567B-558F-475D-8EC4-9067F4F643DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112291550713546&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112291550713546&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChurchInfo allows remote attackers to execute obtain sensitive information via the PersonID parameter to (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php, or (7) UserDelete.php, an invalid Number parameter to (8) SelectList.php or (9) SelectDelete.php, GroupID parameter to (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, or (15) /Reports/GroupReport.php, (16) PropertyID parameter to PropertyEditor.php, FamilyID parameter to (17) Canvas05Editor.php, (18) CanvasEditor.php, or (19) FamilyView.php, or (20) PledgeID parameter to PledgeDetails.php, which reveal the path in an error message."
      }, {
        "lang" : "es",
        "value" : "ChurchInfo permite que atacantes remotos obtengan información valiosa en: (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php,  (7) UserDelete.php, (8) DepositSlipEditor.php, (9) QueryView.php,  (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, (15) /Reports/GroupReport.php, (16) PropertyEditor.php,  (17) Canvas05Editor.php, (18) CanvasEditor.php, (19) FamilyView.php,  (20) PledgeDetails.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F879219C-C632-459D-A16F-8342B60462A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C82088-3340-4612-BA6A-86A7F8E960F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C458ED-C5A0-4F6F-874D-7736BC9B4DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB7A122-18F3-4EC2-B91F-17F3D18C4B95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D3103F-8660-481E-8B6A-6BEC565E668C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD7E63B-9E84-4C73-B6B9-97E19F763AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AF3C4E-031D-4F81-94F2-11FF29BF2207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C41826-6116-4F37-BA73-6B9C8AE2A299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchinfo:churchinfo:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F6567B-558F-475D-8EC4-9067F4F643DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112291550713546&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112291550713546&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete."
      }, {
        "lang" : "es",
        "value" : "Race condition en Unzip 5.52 permite que usuarios locales modifiquen permisos de ficheros arbitrarios mediante un ataque a un fichero que se esté descomprimiendo (cuyos permisos serán cambiados por Unzip después de que la descompresión se complete)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:info-zip:unzip:5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E12425-5797-46E1-AD6E-0F6616A36A50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.39/SCOSA-2005.39.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112300046224117&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.info-zip.org/FAQ.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0203.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0053/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-191-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.39/SCOSA-2005.39.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112300046224117&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.info-zip.org/FAQ.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0203.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0053/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-191-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=164927\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.\n\nThe risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 2.1 which is in maintenance mode.",
        "lastModified" : "2007-09-05T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in lost_passowrd.php in Naxtor Shopping Cart 1.0 allows remote attackers to inject arbitrary web script or HTML via the email parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en lost_passowrd.php en Naxtor Shopping Cart 1.0 permite que atacantes remotos inyecten código HTML o script mediante el parámetro email."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:naxtor:shopping_cart:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48920835-E42F-4AD3-89FA-DBBB660BC651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112301600608192&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16262",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112301600608192&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "shop_display_products.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a cat_id with a \"'\" (single quote), which reveals the path in an error message, possibly due to an SQL injection vulnerability."
      }, {
        "lang" : "es",
        "value" : "shop_display_products.php en Naxtor Shopping Cart 1.0 permite que atacantes remotos obtengan información restringida mediante un cat_id con una única \"\" (comillas sencillas)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:naxtor:shopping_cart:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48920835-E42F-4AD3-89FA-DBBB660BC651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112301600608192&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16262",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112301600608192&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en SilverNews 2.0.3 permite que atacantes remotos ejecuten comandos SQL en el campo \"user\" de la página de login del panel de control de administración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silver-scripts:silvernews:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF378E78-980A-459E-9BB3-45C757BF819B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112309780321088&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16315",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rgod.altervista.org/silvernews.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112309780321088&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rgod.altervista.org/silvernews.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quick 'n Easy FTP Server 3.0 allows remote attackers to cause a denial of service (application crash or CPU consumption) via a long USER command."
      }, {
        "lang" : "es",
        "value" : "Quick 'n Easy FTP Server 3.0 permite que atacantes remotos causen una denegación de servicio (caída de la aplicación o excesivo consumo de CPU) mediante un comando USER demasiado largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pablo_software_solutions:quick_n_easy_ftp_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C218D1-855B-49EE-9E75-4ACC4A4CCE00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112300508617889&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112309262324047&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112319110831249&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428812/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112300508617889&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112309262324047&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112319110831249&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428812/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter, which is not quoted in an error page, as demonstrated using index.cfm."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en ColdFusion Fusebox 4.1.0 permite que atacantes remotos inyecten script web arbitrario o HTML (mediante el parámetro fuseaction)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion_fusebox:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547AA29E-CE58-4B5F-91CB-C061C8DC2B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112309656102615&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16320",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14460",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112309656102615&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-05T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full server path in an error message, as demonstrated using the \"?\" (question mark) character."
      }, {
        "lang" : "es",
        "value" : "ColdFusion Fusebox 4.1.0 permite que atacantes remotos obtengan información confidencial mediante un parámetro fuseaction inválido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion_fusebox:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547AA29E-CE58-4B5F-91CB-C061C8DC2B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112309656102615&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112309656102615&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The StateToOptions function in msfweb in Metasploit Framework 2.4 and earlier, when running with the -D option (defanged mode), allows attackers to modify temporary environment variables before the \"_Defanged\" environment option is checked when processing the Exploit command."
      }, {
        "lang" : "es",
        "value" : "La función StateToOptions en msfweb de Metasploit Framework 2.4 y anteriores, cuando corre con la opción -D (modo defanged, desdentado) permite a atacantes modificar variables de entorno temporales antes de que la opción de entorno \"_Defanged\" sea comprobada cuando se procesa la orden Exploit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metasploit:metasploit_framework:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF37D89-2422-40ED-B56D-46C01001E995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metasploit:metasploit_framework:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC29C8C8-89B9-45C5-8987-2C6CD5B67A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metasploit:metasploit_framework:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429E8DD5-9539-459E-8B5D-0D640311FF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metasploit:metasploit_framework:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D7D95C1-A62E-4737-B1A7-D99905E7DC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metasploit:metasploit_framework:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A806C7-696D-4256-A78F-8A8EAC793CDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://metasploit.com/archive/framework/msg00469.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16318",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/archive/framework/msg00469.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via modified arguments to a Karrigell services (.ks) script, which can reference functions from libraries that are used by that script."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de \"evaluación de código dinámica directa\" en Karrigell anterior a la 2.1.8 permite que atacantes remotos ejecuten código arbitrario en Python  mediante argumentos modificados a un script de servicios karrigell (.ks)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A37B2FC-6BBA-4EF9-A7BC-B37D05007CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5067DC-2500-4368-8259-D753A550E979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D945C07C-82CA-4EDA-8CA9-248DAD72AB04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC6A95-D2DC-4F35-BA6F-C1C024973478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34793BD5-7705-469C-A22C-2D40B5D65B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCAB760-87E2-41AB-B44E-90B00166DDD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6806F58-5501-4F85-935C-B609506A9C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3E84-3E60-4811-876E-2B7B47E09E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5927380-1840-4F2D-A848-261E1426084E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D7DB43-CD3C-4CA0-A043-40A059DBA773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB602622-72E8-4F93-AA51-A2799E365D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08FF6B92-E4C5-46A0-B60D-070CCCBCB6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karrigell:karrigell:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E71CC1F-1011-4DC7-A7F6-0E73DCD2A986"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=7863293&forum_id=32318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_id=12539317",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=7863293&forum_id=32318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_id=12539317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the rdb_query function for Denora IRC Stats 1.0 might allow attackers to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en función rdb_query para Denora IRC Stats 1.0 podría permitir que atacantes ejecuten código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denora_irc_stats:denora_irc_stats:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342C7809-FBB1-4CC8-B9C8-D9093DBE2738"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://denora.nomadirc.net/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16281",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=346819",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14471",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://denora.nomadirc.net/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=346819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Helpdesk in Logicampus before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en Helpdesk en Logicampus anterior a la 1.1.1 permite que atacantes remotos inyecten código arbitrario (script web o HTML) mediante vías desconocidas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicampus:logicampus:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB06E02-D68D-41D7-9EF4-4B93271F3CC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=346801",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14472",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=346801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in mod_forum/read_message.php in PortailPHP allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php with the affiche parameter set to \"Forum-read_mess\", a different vulnerability than CVE-2005-1701."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en mod_forum/read_message.php de PortailPHP permite a atacantes ejecutar órdenes SQL con el parámetro id de index.php y el parámetro affiche establecido a \"Forum-read_mess\", una vulnerabilidad distinta de CAN-2005-1701."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portailphp:portailphp:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6073EC0D-2875-4843-8FED-58439ED8AEFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://msgs.securepoint.com/cgi-bin/get/bugtraq0508/53.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://msgs.securepoint.com/cgi-bin/get/bugtraq0508/53.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Sun McData switches and directors 4300, 4500, 6064, and 6140 before E/OS 6.0.0 may allow attackers to cause a denial of service (connectivity and array access loss) via a network broadcast storm."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en conmutadores y directores Sun McData 4300, 4500, 6064 y 6140 anteriores a E/OS 6.0.0 pueden permitir a atacantes causar una denegación de servicio (conectividad de acceso al array perdida) mediante un tormenta de multidifusión (broadcasten la red."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:mcdata:intrepid_6064_director_switch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1274E07D-5C50-4D12-BDA5-7B465EC84D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:mcdata:intrepid_6140_director_switch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F93CC8-7A13-4DC2-936C-371CB26DDD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:mcdata:sphereon_4300_fabric_switch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBBFB30-39EF-4E91-8DA4-47AC80B5BAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:mcdata:sphereon_4500_fabric_switch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1BBDFF-22E1-4576-BA97-91795B0C39E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16295",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101833-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101833-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via (1) the strRootpath parameter to validsession.php or (2) the strTable parameter to Admin/News/List.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de scritps en sitios cruzados (XSS) en Web Content Management News System permite a atacantes remotos inyectar script web arbitrario o HTML mediante \r\n\r\nel parámetro strRootpath de validsession.php o\r\nel parámetro strTable de Admin/News/List.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_content_management:web_content_management_news_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C33549-F03B-4F35-A520-6EE57133F8C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16317",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014616",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.rgod.altervista.org/webc.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.rgod.altervista.org/webc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-07T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Web Content Management News System allows remote attackers to create arbitrary accounts and gain privileges via a direct request to Admin/Users/AddModifyInput.php."
      }, {
        "lang" : "es",
        "value" : "Web Content Management News System permite a atacantes remotos crear cuentas de su elección y ganar privilegios mediante una petición directa a Admin/Users/AddModifyInput.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_content_management:web_content_management_news_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C33549-F03B-4F35-A520-6EE57133F8C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16317",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014616",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rgod.altervista.org/webc.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rgod.altervista.org/webc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-08T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the xdr_xcode_array2 function in xdr.c in Linux kernel 2.6.12, as used in SuSE Linux Enterprise Server 9, might allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted XDR data for the nfsacl protocol."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función xdr_xcode_array2 en xdr.c en el kernel de Linux 2.6.5 y anterirores podría permitir a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código de su elección mediante datos XDR artesanales para el protocolo nfsacl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.5",
            "matchCriteriaId" : "20E334FA-0423-46D7-A9D9-F2BB9F890C50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042b9c4fdYUuaq0joRUZi8W0Q-2hA1A",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2005/6/23/126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2005/6/23/19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_44_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042b9c4fdYUuaq0joRUZi8W0Q-2hA1A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2005/6/23/126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2005/6/23/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_44_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16354/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16354/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1218",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112146383919436&w=2",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://security-protocols.com/modules.php?name=News&file=article&sid=2783",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/490628",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/904797.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14259",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-221A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-041",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100092",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A180",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A346",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A376",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A609",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A618",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://www.immunitysec.com/pipermail/dailydave/2005-July/002188.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112146383919436&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security-protocols.com/modules.php?name=News&file=article&sid=2783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/490628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/904797.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-221A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.immunitysec.com/pipermail/dailydave/2005-July/002188.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1981",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16368/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014642",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/610133",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100095",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100097",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100099",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100101",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100103",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100105",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/16368/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/610133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1982",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16368/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014642",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/477341",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14520",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100096",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100098",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100100",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100102",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100104",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100106",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/16368/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/477341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1983",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el servicio Plug and Play (PnP) de Microsoft Windows 2000 y Windows XP Service Pack 1 ; permite a atacantes remotos ejecutar código de su elección a través de un paquete manipulado. También los usuarios locales pueden aumentar sus privilegios a través de aplicaciones maliciosas, como se ha explotado con el gusano Zotob (también llamado Mytob)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0384.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/16372",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1014640",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-266.shtml",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.frsirt.com/english/alerts/20050814.ZotobA.php",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.hsc.fr/ressources/presentations/null_sessions/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/998653",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18605",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5YP0E00GKW.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14513",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-221A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1354",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/202",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-039",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21602",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100073",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A160",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A267",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A474",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A497",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A783",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-266.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.frsirt.com/english/alerts/20050814.ZotobA.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hsc.fr/ressources/presentations/null_sessions/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/998653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5YP0E00GKW.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-221A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1984",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16356/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014638",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/220821",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14514",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-221A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-043",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100077",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1045",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1405",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A256",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/16356/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/220821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-221A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1988",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka \"JPEG Image Rendering Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16373/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/965206",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-221A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1353",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-038",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1140",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1216",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1335",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A390",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/16373/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/965206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-221A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1989",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka \"Web Folder Behaviors Cross-Domain Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16373/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14512",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1353",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-038",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100081",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100082",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1319",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A697",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A790",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A888",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/16373/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1990",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, including (1) devenum.dll, (2) diactfrm.dll, (3) wmm2filt.dll, (4) fsusd.dll, (5) dmdskmgr.dll, (6) browsewm.dll, (7) browseui.dll, (8) shell32.dll, (9) mshtml.dll, (10) inetcfg.dll, (11) infosoft.dll, (12) query.dll, (13) syncui.dll, (14) clbcatex.dll, (15) clbcatq.dll, (16) comsvcs.dll, and (17) msconf.dll, which causes memory corruption, aka \"COM Object Instantiation Memory Corruption Vulnerability,\" a different vulnerability than CVE-2005-2087."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16373/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014643",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14511",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-221A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1353",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-038",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100082",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1061",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1221",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1235",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1337",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/16373/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-221A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2360",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the LDAP dissector in Ethereal 0.8.5 through 0.10.11 allows remote attackers to cause a denial of service (free static memory and application crash) via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE62DEB3-8DF4-424C-AE9C-0573432692B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1890B0A-82D7-4445-A90B-971A084425BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E093F4-E2C3-438B-AB53-9A49200B816A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F39D2C-1B39-4A33-87BF-DCF26DBCFD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34C4BCB-5EFA-4CE5-A549-5923D93AEEA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6652AA3B-7450-4214-968C-FC8FDA090DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEC68D1-E523-4CEC-AD74-B4DA66BE1BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "766567CB-C8A5-4CD3-8C14-7D59FE974498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E737F77-ABE6-4E3E-9156-4FAF841E8314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B5EB4E-D9D6-4324-BEB6-85C2845AC102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934E636C-5EC3-436C-990F-D9434776CEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73117E69-715B-4779-A5D8-218E15122A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2361",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP dissector, (6) DCERPC, (7) DHCP, (8) RADIUS dissector, (9) Telnet dissector, (10) IS-IS LSP dissector, or (11) NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial of service (application crash or abort) via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934E636C-5EC3-436C-990F-D9434776CEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73117E69-715B-4779-A5D8-218E15122A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10225",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2362",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of service (application crash) by reassembling certain packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73117E69-715B-4779-A5D8-218E15122A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16225",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2363",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissector in Ethereal 0.8.15 through 0.10.11 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E737F77-ABE6-4E3E-9156-4FAF841E8314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B5EB4E-D9D6-4324-BEB6-85C2845AC102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934E636C-5EC3-436C-990F-D9434776CEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73117E69-715B-4779-A5D8-218E15122A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11271",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2364",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through 0.10.11 allows remote attackers to cause a denial of service (application crash) via certain packets that cause a null pointer dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934E636C-5EC3-436C-990F-D9434776CEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73117E69-715B-4779-A5D8-218E15122A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/18386",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10007",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2365",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial of service (memory consumption) via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73117E69-715B-4779-A5D8-218E15122A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9118",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2366",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abort or infinite loop) via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11239",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2367",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=289&type=vulnerabilities",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:131",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10765",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=289&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:arcserve_backup_2000:r16.5:*:windows:ja:*:*:*:*",
            "matchCriteriaId" : "0F92699B-5BF2-4B6D-9E5A-79FC5419B48B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "3A0F8A34-6C29-409B-8F45-9CFA3F3D476C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A0A0939D-F6B0-419B-834E-1A526425ED16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.0:*:linux:ja:*:*:*:*",
            "matchCriteriaId" : "A740AFED-83A1-47DA-AEB4-EF89E9D0D216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.0:*:netware:*:*:*:*:*",
            "matchCriteriaId" : "F8EB5A1B-BAA2-46EB-84E2-E10983B1B39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3985E7FC-61E5-46CD-ACD5-BCA398668E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "AA3BE714-5F8A-4D72-B9C2-588966436F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "35547C3F-7BF2-4DC0-9B8E-BF83473E6DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "BC6305FE-E727-4B3E-9ABA-3A57CA4BDB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "09A830AF-2C6C-4FED-8470-FBC58749C8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:netware:*:*:*:*:*",
            "matchCriteriaId" : "D87CE17C-356A-44AB-84D8-789264B9724D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "42C50C18-54D8-45AD-A4BA-313555A5BAAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:tru64:*:*:*:*:*",
            "matchCriteriaId" : "A40F2EDB-2D61-4DFE-993E-220C3C420408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E927DA83-2F4A-4915-871D-B79D4B9A1FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup_hp:11.1:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "68CB2B8F-1915-41E5-9DC8-BC5F563C959D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D4206807-8040-4F50-94E4-232482145F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937AD0E8-1FA8-4246-9CDD-5DBC902D2052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "F7731D14-3789-43BB-846F-B430306E4876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.0:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "721D1ABA-8F88-4390-BD84-F40F2DAC75A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.0:*:mainframe_linux:*:*:*:*:*",
            "matchCriteriaId" : "69AFA92B-1360-4EA3-A6C0-AE3BA5702965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78AA54EA-DAF1-4635-AA1B-E2E49C4BB597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "061B6EAA-48D5-4937-801E-4A38E1B59F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:hp:*:*:*:*:*",
            "matchCriteriaId" : "3644670B-9CC9-4772-A6F6-81B37FB632B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "C020DAC4-70B5-480D-BB4D-825E3FCB902C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:tru64:*:*:*:*:*",
            "matchCriteriaId" : "89DE1848-0A85-4B5C-8FAD-424DE9091A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D1257789-97D6-4D31-96BE-3A9073D98A73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-02/0123.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-02/0141.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-02/0201.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/14293",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/966880",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/13814",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12536",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?ID=32478",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19320",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-02/0123.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-02/0141.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-02/0201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/14293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/966880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/13814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?ID=32478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pstotext before 1.8g does not properly use the \"-dSAFER\" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pstotext:pstotext:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.1",
            "matchCriteriaId" : "F75C0ADA-7787-4429-B2D7-F61611525EB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16183/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-29.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16183/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200507-29.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct request to structure.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80720E0A-2E73-47B2-BA0E-4CFA177F5BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112327238030127&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rgod.altervista.org/flatnuke.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112327238030127&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rgod.altervista.org/flatnuke.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via (1) a null byte or (2) an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1 in the mod parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80720E0A-2E73-47B2-BA0E-4CFA177F5BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112327238030127&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rgod.altervista.org/flatnuke.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112327238030127&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rgod.altervista.org/flatnuke.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attackers to inject arbitrary web script or HTML via the (1) bodycolor, (2) backimage, (3) theme, or (4) logo parameter to structure.php, (5) admin, (6) admin_mail, or (7) back parameter to footer.php, or (8) the message body in a news post."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80720E0A-2E73-47B2-BA0E-4CFA177F5BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112327238030127&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rgod.altervista.org/flatnuke.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112327238030127&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rgod.altervista.org/flatnuke.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitrary PHP commands via an ASCII char 13 (carriage return) in the signature field, which is injected into a PHP script without a preceding comment character, which can then be executed by a direct request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80720E0A-2E73-47B2-BA0E-4CFA177F5BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112327238030127&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rgod.altervista.org/flatnuke.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112327238030127&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rgod.altervista.org/flatnuke.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:tar:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B4A20D-AAD0-4857-AC0F-D221EBB08BFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112327628230258&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112327628230258&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This is the documented and expected behaviour of tar.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, which is automatically downloaded and processed as HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABB6806-5DC0-4146-89FC-05D079F0CFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77C15A2-9A9D-4C3F-8A62-18C54941B79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C79F9F-FE3C-4CC6-88A9-6EFB27724CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F427913-7FEB-49CA-AD9F-5E5EC77CA9ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "993BCE2D-C03F-4F2F-A973-68CEC6B34EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_alpha_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8C2DB4-06C3-4400-B0F3-2025FD829788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pdr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053B554A-AC3D-496F-9E3D-D357D14B87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B7742A-2BD1-4119-8850-5BCB35E9F7C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4CBB17-B8EB-4A60-B8F5-34A2816373FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B47FAD-8DCA-4B31-A5CF-884286F49E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112327712614854&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14492",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112327712614854&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitrary files via a .. (dot dot) in the download parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comdev:comdev_ecommerce:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70782A22-4793-401F-BB08-2C57F08F6972"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112327874920062&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14479",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112327874920062&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the path[docroot] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comdev:comdev_ecommerce:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70782A22-4793-401F-BB08-2C57F08F6972"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112327556202520&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16346",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112327556202520&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content parameter to profile.php and profile_misc.php, (3) the profile fields in userpage.php, (4) subject or (5) body in mail.php, or (8) disinvited_chatter or (7) invited_chatter parameter to invite.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpopenchat:phpopenchat:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59390560-5558-434D-ACCE-68EDA977B5CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112327181704137&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112327181704137&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-10T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arab Portal 2.0 allows remote attackers to obtain sensitive information via a long (1) username or (2) password, which reveals the path in an error message when the undefined \"errmsg\" function is called."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arab_portal:arab_portal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D16BAE4-E97A-480A-B7E5-E15632BFE17D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112300301707175&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112300301707175&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bluez_project:bluez:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00806108-C5EA-4568-BDE1-430B686FC0DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/bluez/utils/hcid/security.c?r1=1.31&r2=1.34",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=7893206&forum_id=1881",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=101557",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/bluez/utils/hcid/security.c?r1=1.31&r2=1.34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=7893206&forum_id=1881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=101557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. These issues did not affect the version of BlueZ as shipped with Red Hat Enterprise Linux 4.\n",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2548",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service (kernel oops from null dereference) via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=309308",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.osdl.org/pipermail/bridge/2004-September/000638.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14611",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=309308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.osdl.org/pipermail/bridge/2004-September/000638.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2549",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44773EE-24D1-49F9-8B80-DA47450251E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48282B11-CBED-4E04-984A-48D0EC579748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0219B1ED-5EA4-44FE-A4CB-5F50670D6A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A90124-F131-4FF2-91FA-371F54D556A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEE0340-36EA-477D-9928-6894B53F0802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C456D757-63DC-4881-AA9E-84C13B1AE9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28A92EC-24AB-471A-9E23-DE8493B50AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2128A01C-A2AA-4E11-94D6-E361486BBFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6337DBEC-591E-4D33-ABA0-D761237C4FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7160595D-FB7B-45F9-85BD-5767B08F4855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=112368237712032&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16394",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1016",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_54_evolution.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-267.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/407789",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9553",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/166-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112368237712032&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_54_evolution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-267.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/407789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/166-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2550",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FBC98A-111A-4E78-AAA5-CF76B7B32D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44773EE-24D1-49F9-8B80-DA47450251E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48282B11-CBED-4E04-984A-48D0EC579748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0219B1ED-5EA4-44FE-A4CB-5F50670D6A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A90124-F131-4FF2-91FA-371F54D556A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEE0340-36EA-477D-9928-6894B53F0802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C456D757-63DC-4881-AA9E-84C13B1AE9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28A92EC-24AB-471A-9E23-DE8493B50AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2128A01C-A2AA-4E11-94D6-E361486BBFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6337DBEC-591E-4D33-ABA0-D761237C4FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7160595D-FB7B-45F9-85BD-5767B08F4855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=112368237712032&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16394",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1016",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_54_evolution.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-267.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/407789",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10880",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/166-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112368237712032&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_54_evolution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-267.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/407789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/166-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029ADE6D-6761-4196-847C-A0EFB3A06341"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098568.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972038.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/213165",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098568.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972038.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/213165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in HP ProLiant DL585 servers running Integrated Lights Out (ILO) firmware before 1.81 allows attackers to access server controls when the server is \"powered down.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_dl585:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90AA240-0231-46BC-A915-841F7322672B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112369495001738&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112369495001738&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112369495001738&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112369495001738&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2553",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The find_target function in ptrace32.c in the Linux kernel 2.4.x before 2.4.29 does not properly handle a NULL return value from another function, which allows local users to cause a denial of service (kernel crash/oops) by running a 32-bit ltrace program with the -i option on a 64-bit executable program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "74F962BE-2187-4C8F-BAE7-EFA3D79FCB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.4/cset%4041dd3455GwQPufrGvBJjcUOXQa3WXA",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lkml.org/lkml/2005/1/5/245",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14965",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9647",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.4/cset%4041dd3455GwQPufrGvBJjcUOXQa3WXA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2005/1/5/245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-12T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) uses insecure permissions for the \"Common Framework\\Db\" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:network_associates:epolicy_orchestrator_agent:3.5.0_\\(patch_3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B79801B-47ED-4E79-A0C5-47EE16E6F2E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://knowledgemap.nai.com/KanisaSupportSite/search.do?cmd=displayKC&docType=kc&externalId=KBkb42216xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.virus.org/full-disclosure-0508/msg00376.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://reedarvin.thearvins.com/20050811-01.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://knowledgemap.nai.com/KanisaSupportSite/search.do?cmd=displayKC&docType=kc&externalId=KBkb42216xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.virus.org/full-disclosure-0508/msg00376.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://reedarvin.thearvins.com/20050811-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4",
            "matchCriteriaId" : "72B26DE8-DB65-4D9D-8C74-4BCDB83B0A76"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16412",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17463",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014636",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-892",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=false",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/18696",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5DP0J00GKE.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14525",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21769",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/167-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1014636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=false",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/18696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5DP0J00GKE.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/167-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2498",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-15T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gggeek:phpxmlrpc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "7AE79B9A-3181-4A0E-863A-646D231891DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112412415822890&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431497300344&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605112027335&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16432",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16441",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16460",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16465",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16468",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16469",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16491",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16550",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16558",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16563",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16619",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16635",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16693",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16976",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17053",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-798",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-840",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-842",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-19.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory_152005.67.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_49_php.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-748.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14560",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9569",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112412415822890&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431497300344&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605112027335&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory_152005.67.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_49_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-748.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2097",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xpdf and kpdf do not properly validate the \"loca\" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a \"broken\" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF2714-DEC9-407F-9D1B-EF2A4D8B4DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B93B3ED-AF82-49A9-8C7F-E5F652F19669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D23CF8-2B6C-4D2A-8E5E-6AACE99A7C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9107B531-7254-4908-97F0-3BF1EA0495AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17277",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21339",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:138",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-670.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-671.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-706.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-708.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/163-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-670.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-671.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-706.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-708.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/163-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2102",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that contains invalid UTF-8 characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BC7CF5-118A-4127-BA07-749179FA5A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BB3FC7-C33B-4FA6-84F9-5894DFAB7B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE70BCCA-A025-4F93-A773-8D4FF482540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93EBDBD2-D687-4680-998A-3C89477EC7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B13807-C799-4589-9546-2680D122C5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F91275-123E-412C-AA15-B2010D656D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2842937-2275-4C1C-85FE-9C1246B2A06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478EA6B8-99D9-4378-8839-AC85F281F630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6F9FB-C9DA-44BB-9AF7-E8D828788873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA41A48-DCDE-4DB9-BE38-FC255A712478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EFC670-8B21-4ABC-B656-989FEF3FE7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7051327C-FB24-45C8-BF62-BD88DA838911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_flynn:gaim:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9260E414-FB80-4872-B158-F9FA77733794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gaim.sourceforge.net/security/?id=21",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-627.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14531",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9283",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/168-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://gaim.sourceforge.net/security/?id=21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-627.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/168-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2103",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gaim_project:gaim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "ECD67819-CAC7-4629-802E-EAD243AA7DED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gaim.sourceforge.net/security/?id=22",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-589.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-627.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14531",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11477",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/168-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://gaim.sourceforge.net/security/?id=22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-589.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-627.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/168-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:navisphere_manager:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB832CE-CB22-4CDD-998F-A619D9F249CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:navisphere_manager:6.4.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97DCE41B-3E4F-40AC-8F4D-9B5987248E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:navisphere_manager:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84768F3C-373B-42FA-A714-151BE3666C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:navisphere_manager:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E664AC-B7AE-4883-8BB8-0E291A3556F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=288&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=288&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a directory that ends in a \".\" (trailing dot)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:navisphere_manager:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB832CE-CB22-4CDD-998F-A619D9F249CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:navisphere_manager:6.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6678196D-95D2-4B21-884B-5C6D9BFBE47B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:navisphere_manager:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84768F3C-373B-42FA-A714-151BE3666C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:navisphere_manager:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E664AC-B7AE-4883-8BB8-0E291A3556F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=288&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14487",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=288&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in a \"core application plug-in\" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "201F059D-33D1-4D9F-9C6F-FC8EB49E4735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B025E795-5713-485E-8A15-EBE4451A1A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183B5940-2310-4D2E-99F0-9792A801A442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8BB13E-2732-4F9E-A588-EA1C00893C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FCDCBF-597B-439C-8D8B-2819FC70C567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF742B8-5F7A-487B-835C-756B1BB392F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B9351C2-16ED-4766-B417-8DB3A8766C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74667860-0047-40AD-9468-860591BA9D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/321644.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/896220",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-750.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/321644.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/896220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-750.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fc0b4a7a73a81e74d0004732df358f4f9975be2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6fc0b4a7a73a81e74d0004732df358f4f9975be2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14609",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fc0b4a7a73a81e74d0004732df358f4f9975be2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6fc0b4a7a73a81e74d0004732df358f4f9975be2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5032D74E-CC8D-4217-AEF0-98DCD1820AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3340604-0D38-4494-847B-E9E8B0026A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC117BF1-3127-477A-9500-C9A32596ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C43BB-81C6-496F-AC7B-61382DE76B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6ED2E0A-37C6-4BD2-87B0-FD3E6D0C2108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7196E5-8483-4872-A78A-8BE7EC551CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDA057-D211-42BD-B8AF-F250F1C5B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "19001041-22C4-4D2C-A918-378DACBB1DF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112354450412427&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/mysql/2005-002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14509",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1326/references",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-180-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-180-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112354450412427&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/mysql/2005-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1326/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-180-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-180-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via (1) shell metacharacters in the eping_count parameter or (2) restricted shell metacharacters such as \">\" and \"&\" in the eping_host parameter, which is not handled by the validation function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED52F96-48B9-4111-AAEB-4E9190114802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e107plugins.co.uk/news.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112328161319148&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e107plugins.co.uk/news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112328161319148&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.cfm in CFBB 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ader_software:cfbb:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F2FF52-5403-4460-816A-9FB5CC79A4F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112352059715868&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112352059715868&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MYFAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the Theme parameter to (1) affichagefaq.php3, (2) choixsoustheme.php3, (3) consultation.php3, (4) insfaq.php3, (5) inssoustheme.php3, (6) instheme.php3, (7) saisiefaqtotale.php3, (8) saisiesoustheme.php3, or (9) voirfaq.php3, the SousTheme parameter to (10) affichagefaq.php3, (11) consultation.php3, (12) insfaq.php3, (13) inssoustheme.php3, (14) saisiefaq.php3, (15) saisiefaqtotale.php3, or (16) voirfaq.php3, the Faq parameter to (17) saisiefaq.php3, (18) voirfaq.php3, or (19) inssolution.php3, or (20) question parameter to affichagefaq.php3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myfaq:myfaq:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A62CCD-88FD-4210-B470-C96CE89602EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112352204602309&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svt.nukleon.us/lab/svadvisory13.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112352204602309&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svt.nukleon.us/lab/svadvisory13.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the login field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravity_board_x_development_team:gravity_board_x:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D9AA3D-4E59-409F-924B-2495434A3C10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112351740803443&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Aug/1014631.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14497",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112351740803443&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Aug/1014631.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Gravity Board X (GBX) 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the board_id parameter to deletethread.php or (2) the template."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravity_board_x_development_team:gravity_board_x:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D9AA3D-4E59-409F-924B-2495434A3C10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112351740803443&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Aug/1014631.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112351740803443&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Aug/1014631.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in editcss.php in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary PHP code, HTML, and script via the csscontent parameter, which is directly inserted into the gbxfinal.css file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravity_board_x_development_team:gravity_board_x:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D9AA3D-4E59-409F-924B-2495434A3C10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112351740803443&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112351740803443&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gravity Board X (GBX) 1.1 allows remote attackers to obtain sensitive information via (1) a 1 in the perm parameter to deletethread.php or a direct request to (2) ban.php, (3) addnews.php, (4) banned.php, (5) boardstats.php, (6) adminform.php, (7) /forms/admininfo.php, (8) /forms/announcements.php, (9) forms/banform.php, or (10) other pages in the /forms directory, which reveal the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravity_board_x_development_team:gravity_board_x:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D9AA3D-4E59-409F-924B-2495434A3C10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112351740803443&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112351740803443&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter to board.php or (2) UID parameter to member.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbb:openbb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B65AFA43-5835-4EE9-A157-B13D9705DDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112351834624072&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112351834624072&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP code via the language parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:syscp_team:syscp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.10",
            "matchCriteriaId" : "B0EB9665-4CCC-49D0-9A06-80054735A909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112352095923614&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_132005.64.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.syscp.de/forum/viewtopic.php?t=1772",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112352095923614&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_132005.64.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.syscp.de/forum/viewtopic.php?t=1772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in the template engine for SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP code via a string containing the code within \"{\" and \"}\" (curly bracket) characters, which are processed by the PHP eval function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:syscp_team:syscp:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3034B734-7033-4D45-8CE2-CADEDD45C498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112352095923614&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_132005.64.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.syscp.de/forum/viewtopic.php?t=1772",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112352095923614&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_132005.64.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.syscp.de/forum/viewtopic.php?t=1772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the fbusername or fbpassword parameter to (1) editpost.php, (2) prefs.php, (3) newtopic.php, (4) reply.php, or (5) profile.php, the (6) fbusername, (7) fmail, (8) www, (9) icq, (10) yim, (11) location, (12) sex, (13) interebbies, (14) sig or (15) aim parameter to register.php, or (16) subject parameter to newtopic.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funkboard:funkboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.66f",
            "matchCriteriaId" : "1A44188F-4B0A-4CE7-92A6-0E06C1CFD41C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112360702307424&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112413891603018&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112360702307424&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112413891603018&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to forums.php, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funkboard:funkboard:0.66cf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153A58D3-437F-4705-A614-A5F64D1483DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112360702307424&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112413891603018&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112360702307424&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112413891603018&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_install.php scripts, which allows attackers to obtain the database username and password or inject arbitrary PHP code into info.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funkboard:funkboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.66f",
            "matchCriteriaId" : "1A44188F-4B0A-4CE7-92A6-0E06C1CFD41C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112360702307424&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112413891603018&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.funkboard.co.uk/forum/thread.php?id=265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112360702307424&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112413891603018&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.funkboard.co.uk/forum/thread.php?id=265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via (1) a request for a non-library file, which causes the Windows LoadLibraryEx function to block, or (2) a request for a function in a library that has the XXX_deinit or XXX_init functions defined but is not tailored for mySQL, such as jpeg1x32.dll and jpeg2x32.dll."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5965032E-5BC0-4E69-B097-F9EE2B24C861"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03897409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03897409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112360818900941&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/54788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/mysql/2005-003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/62358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1029010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03897409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03897409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112360818900941&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/54788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/mysql/2005-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/62358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1029010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash (\\) character."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5032D74E-CC8D-4217-AEF0-98DCD1820AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3340604-0D38-4494-847B-E9E8B0026A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC117BF1-3127-477A-9500-C9A32596ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C43BB-81C6-496F-AC7B-61382DE76B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6ED2E0A-37C6-4BD2-87B0-FD3E6D0C2108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7196E5-8483-4872-A78A-8BE7EC551CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDA057-D211-42BD-B8AF-F250F1C5B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "19001041-22C4-4D2C-A918-378DACBB1DF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035847.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112360618320729&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mysql.bkbits.net:8080/mysql-4.0/cset%40428b981bg2iwh3CbGANDaF-W6DbttA",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mysql.bkbits.net:8080/mysql-4.0/gnupatch%40428b981bg2iwh3CbGANDaF-W6DbttA",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/mysql/2005-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035847.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112360618320729&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mysql.bkbits.net:8080/mysql-4.0/cset%40428b981bg2iwh3CbGANDaF-W6DbttA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mysql.bkbits.net:8080/mysql-4.0/gnupatch%40428b981bg2iwh3CbGANDaF-W6DbttA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/mysql/2005-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as _SERVER[REMOTE_ADDR]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6305AB1C-E801-4EF8-8783-01714E6F6D30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.xmbforum.com/viewthread.php?tid=754523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112361545228809&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.xmbforum.com/viewthread.php?tid=754523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112361545228809&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "As noted in https://docs.xmbforum2.com/index.php?title=Security_Issue_History XMB version 1.9.10 or later must be installed to prevent attacks described by this CVE. All earlier versions of XMB are vulnerable until upgraded. Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2020-09-09T12:59:05.317"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands via certain values that are inserted into the $in variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6305AB1C-E801-4EF8-8783-01714E6F6D30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112361545228809&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112361545228809&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "XMB versions 1.9.8 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2021-04-23T12:34:58.300"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) doclsqlres.php, (2) clmcpreload.php, (3) viewhistlog.php, (4) mcconfig.php, (5) doclsqlbak.php, (6) defcalsel.php, or (7) cl_minical.php, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calogic:calogic:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C11380-6187-44BF-AD21-734152E94846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112369871827743&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112369871827743&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device crash) via a packet with a zero in the IP option length field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wyse:winterm:1125se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "329AA9FC-05B8-47A4-A63A-CDB8C6826B83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112379283900586&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112379283900586&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:39.970",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2552.  Reason: This candidate is a duplicate of CVE-2005-2552.  Notes: All CVE users should reference CVE-2005-2552 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nortel:contivity:v05_01.030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7340D1-1449-4B0D-8AA0-1A6BD6623C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112370730131219&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112370730131219&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Patch released by vendor."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to execute arbitrary SQL commands via the Username field in (1) index.php or (2) member.php, action parameter to (3) search.php or (4) member.php, or (5) polloptions parameter to polls.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4_security_patch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488811F6-7CC9-4F56-AD7C-81247B351851"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112387501519835&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112387501519835&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grandstream BudgeTone 101 and 102 running firmware 1.0.6.7 and possibly earlier versions, allows remote attackers to cause a denial of service (device hang or reboot) via a large UDP packet to port 5060."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:grandstream:budgetone_101:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6.7",
            "matchCriteriaId" : "7CB6F117-79EF-4EFC-B353-E18D0810FB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:grandstream:budgetone_102:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6.7",
            "matchCriteriaId" : "83BD8317-F61C-4E55-945E-5CB1F26AF833"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112388062328906&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112388062328906&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 uses world-writable permissions for the (1) log and (2) license directory, which allows local users to delete log files, append to arbitrary files via a symlink attack on kavmonitor.log, or delete license keys and prevent keepup2date from properly executing."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.5:*:linux_servers:*:*:*:*:*",
            "matchCriteriaId" : "5A3B9DBA-58A9-4E15-8B22-67795D047278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.aerasec.de/pub/advisories/kav4unix/kav4unix-local-root-exploit.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112387573811339&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.aerasec.de/pub/advisories/kav4unix/kav4unix-local-root-exploit.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112387573811339&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mentor ADSL-FR4II router running firmware 2.00.0111 has an undocumented web server running on TCP port 5678, which allows local users to gain access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:mentor:adslfr4ii:2.00.0111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65AF93DE-8B01-4907-B912-D08CD45C0DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112394620905095&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112394620905095&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not set a default password, which allows local users to gain access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mentor:adslfr4ii:2.00.0111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65AF93DE-8B01-4907-B912-D08CD45C0DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112394620905095&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112394620905095&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mentor ADSL-FR4II router running firmware 2.00.0111 allows remote attackers to cause a denial of service (active TCP connections state table consumption) via a large number of connections, such as a port scan."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:mentor:adslfr4ii:2.00.0111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65AF93DE-8B01-4907-B912-D08CD45C0DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112394620905095&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112394620905095&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mentor ADSL-FR4II router running firmware 2.00.0111 stores the web administration password in cleartext in the backup configuration file, which allows local users to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:mentor:adslfr4ii:2.00.0111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65AF93DE-8B01-4907-B912-D08CD45C0DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112394620905095&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112394620905095&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-16T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary SQL commands via the mid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phptb:topic_boards:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776BE9FE-BEA8-40C3-8135-43201C7F5802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112395837127707&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112395837127707&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2101",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEED379-3111-4451-B782-8C66CE568A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B146FCD3-F6E7-4412-94FD-F9E66089C227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C629F0C8-C765-4076-B426-80929F9CE285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671D1461-4AB4-4FB6-977D-733888A1BA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E268EFFF-6B28-4C64-B052-AFA3BB1E709F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9B6CD2-7343-4D68-BEC6-A7BB0E0F0962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F98A556-D640-40F1-92C2-FC262F50F5C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E2C256-8E9F-4D12-ABF4-FECE06B52CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33AF934D-B51B-4A81-BC47-FFEAB9A62C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3096F2-B0F1-45E1-806D-6434DE56619A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5560AA-372B-4462-AFF8-8F27A980E507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4904CFFD-4CE1-4D65-A7BA-9B06E5B35D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296D60E4-859E-458A-BDDA-A6265C020F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6AD786-E68C-4952-90D4-3712560FAB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F628A0-E6F0-4843-9897-1B389853709B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F69843-978D-4686-BC5B-1D09DA4A21BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666F5ADD-94D8-42C9-8A38-5D2F10CB213E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE0AED-7918-41E9-A902-AC4070E03132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E19472-47B4-4398-A188-CA5A5D3E7060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17407A2-089E-43A5-9BD5-EFF966F5CC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4B436D-8D6A-473E-B707-26147208808B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E26B353-4985-4116-B97A-5767CDC732F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7180B3-03AC-427C-8CAD-FE06F81C4FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442021C9-BE4D-4BC9-8114-8BEFA9EC1232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7036AE90-C7E0-48CE-805D-3F1E04852675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D49AE92-BA00-4A8E-BBFE-1BE994CFA3CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16428",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-818",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050815-1.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14561",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050815-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DVBBS 7.1 SP2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the page parameter to dispbbs.asp, (2) name parameter to dispuser.asp, or the (3) title, (4) view, or (5) act parameter to boardhelp.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dvbbs:dvbbs:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1C4FCB-24EE-4058-B619-73C6D4861D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dvbbs:dvbbs:7.1_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5649B0A3-0CB6-4E83-A6C0-7E5213297647"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/08/dvbbs-multiple-variable-cross-site.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16131",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014632",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/08/dvbbs-multiple-variable-cross-site.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Linksys WRT54GS wireless router with firmware 4.50.6, with WPA Personal/TKIP authentication enabled, allows remote clients to bypass authentication by connecting without using encryption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54gs:4.50.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9761BB51-0CF6-45BE-9DF2-8953AB32CFA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parlano:mindalign:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF6124F-5ED2-4EE2-B026-6E44E8C24457"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050812-00673.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050812-00673.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the \"User Enumeration\" vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parlano:mindalign:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF6124F-5ED2-4EE2-B026-6E44E8C24457"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050812-00673.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050812-00673.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to bypass authentication via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parlano:mindalign:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF6124F-5ED2-4EE2-B026-6E44E8C24457"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050812-00673.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050812-00673.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parlano:mindalign:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF6124F-5ED2-4EE2-B026-6E44E8C24457"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050812-00673.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20050812-00673.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javascript, possibly involving a function that defines a handler for itself within the function body."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/407702",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14528",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/407702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Dada Mail before 2.10 Alpha 1 allows remote attackers to execute arbitrary Javascript via archived messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "471590EC-59BF-43AF-A9BE-46F4F8E6A80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A48EF0-5CF7-4BC0-9D4A-F0AC20566090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C78364-487B-45E1-8F01-4A727E558D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.12_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A4E472-DE73-49C0-8834-B586B4A94199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2307910-5F2D-4E5A-999B-8A23BFDBE182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.13_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC5F463-8BE4-4DB1-A261-5DAED0B25923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.13_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC6BA53-E0FE-4828-86F6-659E34A4AE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.14_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0BDA93-C534-4910-B04B-82698FD8342B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.14_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4EA5E1-466E-475E-A742-C39C7BF2D1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.14_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275AEF3B-5610-420A-863D-0FB31854A857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.14_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39451055-698E-4EE3-91D1-3E103C1039B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17982024-F5E1-40D9-AD7C-BA6448134F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.15_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E394914F-AA69-42DB-A37C-EDA8A8FC13D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.15_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821B8BA7-4052-4425-8546-C2A0A02A8F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.15_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868511CA-D544-4C4B-8BD6-A80D3BCEAD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.16_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5368F7D1-F2FE-4EB9-8461-2C126F82AF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.16_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "672F863D-6D15-45D0-AF7A-BBC518A1613D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.16_alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0969BA-62DB-4C22-B248-239038CC5AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.8.16_alpha4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF8A23C-8EFC-4562-BDFB-43C9D8D2C98F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD726C22-7553-4D29-8C3B-593762A9D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.9.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3BF574-1E72-4824-8E95-C21F0206C365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.9.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42534EC2-32A3-4661-AF92-D193B52A7BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.9.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279E4064-AD26-4CB3-9806-3B846CDB5181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16546541-FF43-4E15-A3FA-762D04699CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dada_mail:dada_mail:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88BBBF75-D9A2-4F6D-A787-9DCEE3169906"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mojo.skazat.com/download/testing_2_10_0_alpha1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16435",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mojo.skazat.com/download/testing_2_10_0_alpha1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0D3AAC-9BB0-49E9-BD67-27A635DA34CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gallery.menalto.com/index.php?name=PNphpBB2&file=viewtopic&t=7048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16389",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gallery.menalto.com/index.php?name=PNphpBB2&file=viewtopic&t=7048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol_client_software:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45CF4BC-6E75-4002-8D13-AB4499710F93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/ntbugtraq/2005-08/0009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/ntbugtraq/2005-08/0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Dokeos 1.6 and earlier, and possibly Claroline, allow remote attackers to (1) delete arbitrary files or directories via the delete parameter to claroline/scorm/scormdocument.php, (2) move arbitrary files via the move_to and move_file parameters to claroline/document/document.php, or determine the existence of arbitrary files via the file parameter to (3) claroline/scorm/showinframes.php or (4) claroline/scorm/contents.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "E8B4FBFD-5417-4B7A-B34C-AEFA7D3B80F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036345.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Aug/0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16407",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036345.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Aug/0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hummingbird FTP for Connectivity 10.0 uses weak encryption (trivial encoding) to store the user's password in the FTP profile, which allows attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:connectivity:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADEF937E-DE5F-4C6B-89E9-BA452911BCD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-08/0219.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16430",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-08/0219.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FUDForum 2.6.15 with \"Tree View\" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D1C9D-E8C2-43D1-A87E-89DA4CBDE4BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0383.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16414",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to (1) Item_Show.asp or (2) search_list.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:midicart_software:midicart_php_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0F7EBA-EE49-40F0-83CC-887CC45E9270"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014660",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://systemsecure.org/ssforum/viewtopic.php?t=30",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://systemsecure.org/ssforum/viewtopic.php?t=30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Thunderbird 1.0 and Firefox 1.0.6 allows remote attackers to obfuscate URIs via a long URI, which causes the address bar to go blank and could facilitate phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/407704",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/407704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) currDir or (2) image parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my_image_gallery:my_image_gallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44E62328-7D54-44DD-836B-8392DEA81ABF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050813_Mig.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=349348",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18741",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14570",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050813_Mig.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=349348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to obtain the web server path via certain currDir and image arguments, which leaks the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my_image_gallery:my_image_gallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44E62328-7D54-44DD-836B-8392DEA81ABF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050813_Mig.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=349348",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18742",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14570",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secwatch.org/advisories/secwatch/20050813_Mig.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=349348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Lasso Professional Server8.0.4 and 8.0.5 allows attackers to bypass authentication, related to [Auth] tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omnipilot_software:lasso_professional_server:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8232FB52-1175-4E4B-9EDA-B6FA0A559B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omnipilot_software:lasso_professional_server:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25E592E-2EB7-48C4-85F9-A227B60E37FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.omnipilot.com/Software%20Updates.1747.8901.lasso",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14543",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.omnipilot.com/Software%20Updates.1747.8901.lasso",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the \"frontend authentication\" in PHlyMail 3.02.00 has unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phlymail:phlymail:3.02.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A6B36C-FCF0-4E54-BCDE-61A7AA46C2B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phlymail.de/forum/viewtopic.php?t=698",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16388",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14537",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phlymail.de/forum/viewtopic.php?t=698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null (\"%00\") characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsimplicity:simplicity_of_upload:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9002B740-A21B-4B2E-8BF1-6521392D922F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/simply.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014591",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.phpsimplicity.com/scripts.php?id=3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14424",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rgod.altervista.org/simply.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.phpsimplicity.com/scripts.php?id=3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "Download new version of program at http://www.phpsimplicity.com/scripts.php?id=3."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SafeHTML before 1.3.5 does not properly filter script in UTF-7 and CSS comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks in vulnerable applications that use SafeHTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safehtml:safehtml:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4311F71D-F38F-4055-8775-D90AFE9BBFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14574",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to obtain the full server path via an invalid VDNS_Sessid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vegadns:vegadns:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACADB428-C314-4714-B088-C315CED75324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vegadns:vegadns:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D77203-91A5-4945-972A-13402B1ECFAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16370",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://vegadns.org/src/current/CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.packetstormsecurity.org/0508-exploits/vegadns-dyn0.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://vegadns.org/src/current/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.packetstormsecurity.org/0508-exploits/vegadns-dyn0.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the message parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vegadns:vegadns:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACADB428-C314-4714-B088-C315CED75324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vegadns:vegadns:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D77203-91A5-4945-972A-13402B1ECFAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16370",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://vegadns.org/src/current/CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.packetstormsecurity.org/0508-exploits/vegadns-dyn0.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://vegadns.org/src/current/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.packetstormsecurity.org/0508-exploits/vegadns-dyn0.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.0.4019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24230F6-26C4-4A09-BEB0-BF4E5B8A83F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.0.4170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49730A7-4C5B-4130-A194-63BCB0C0DB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.0.4172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9247F741-16D7-40B3-9037-326270AE1A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.0.4174:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBFD68D-E56E-4B95-AA70-CA2FC371AF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.0.4202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B5CC50-7D43-493F-8DD5-56807CFFB56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.1.306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A59088D-B16C-4508-8594-4F9A66702914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.1.307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6B20BEF-0D8F-412E-8AE3-9D660BF89C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.1.1067_.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7C5BF9-5780-435D-9F42-5F2712A9C612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.1.1067_.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17278449-4647-418C-A43F-980EDCE47E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.1.1127_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EC8908-5A6E-4BE7-9AB6-A96E331392F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.1.1151_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE7C8D6-CCFF-4C67-BD53-12519510A904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.1.1152:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CD25F2-2F58-4468-9898-15CE0701BBA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.1.1152_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB00211-2397-4444-B8E2-FD05344FE05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.1.1154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58ED7E29-8BFA-460F-B2C9-651DF9D31D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_servers_9.1.1156:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEFCF58-B287-4299-92FE-5077A52ADFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6375C88-EF6D-44E5-8445-788FB8B8DCDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C778849-F5FE-4C4D-BED3-B4E59D18E5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_9.0_rev._4367:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E034329F-003A-4A76-9146-8C3A216DEDD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_9.0_rev._4367_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724349E3-8152-4FF3-8617-6399B13B5332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_9.0_rev._4454:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BA959E-A95D-4828-9FE5-7A5D82627A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_9.0_rev._4454_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02B3EF2-1327-4138-B8E1-BEFEAABC4066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF573CC6-E3A5-49A0-9D64-C7D82EE87903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_9.1_rev._4691:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AB7137-F41A-420F-9C01-FBB3E012CDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_9.1_rev._4691_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDD5FDA-B5D4-4C93-A83E-3B7A1B89F02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_10.0_rev._5484:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E65B29-5535-4818-ADF9-0E880AE152FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_10.0_rev._5484_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBBC7B82-58F9-4D75-B910-5287B7FA3720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:windows_servers_10.0_rev._5520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46AD7EE2-DA3A-4877-B29D-71650B255061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec_remote_agent:netware_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4823F99-C0BA-43E1-AA7F-E35415D6C279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec_remote_agent:unix_linux_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19977C9B-BD6C-45A4-AB33-31C7BB00782D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec_remote_agent:windows_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE4468B-241C-4F20-BC43-5A24F187014A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5081924-EAEB-4BAC-A6A9-A23587654D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_fp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4EC4ED-AD7A-4D07-B105-D8BC11267942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_fp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8A41C7-1AB9-443D-BB23-F31144DFAFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_fp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D5585D-CBC1-4209-A990-33DCE08BD10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_fp4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D927248C-CD93-4266-8018-06546BDE0F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_fp5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4076FB-45BD-46B8-AAB7-B46EA7901C28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_fp6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3593F48-41BF-44E2-B91C-BA2A895FB100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_fp7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "616B1E3A-D14E-4C88-BA71-84C060A13A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_fp8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F86FDE-00EF-4166-B079-E0E69DD90A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_mp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6CE835-E847-4ED5-A8BC-1F5B363D057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_mp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1CD6F4-BC8B-45DE-A978-1537E3A87689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_mp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CBF588-B9FB-463B-BEE2-AC6D841EE81D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_mp4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F638B809-E7E7-49FD-8CFE-08595B287D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_mp5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD1DB09-DCC8-43DA-A27F-5388716FF013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_mp6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242E0063-43B4-4ADD-AB51-E4491509F83B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_mp7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951B5532-C019-4B80-94A8-61DE2D084589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_4.5_mp8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F658FB82-5BF8-437E-BABA-14FFCDE3332F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D5E1821-A0D8-42CC-B0EF-A4C7EAB6D173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_5.0_mp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04483F1-F206-4693-870F-84FFA310F6DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_5.0_mp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D342EB5-8DA1-4573-9EA3-210C94A883E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_5.0_mp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E9E8E6-E6B9-42E4-BF40-8CC402A7AF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_5.0_mp4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F114D1-1D7B-41C3-A735-6F60C7B41460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_5.0_mp5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74B8A14-1CD5-49C1-AF30-AE37796C9030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE510737-B5FD-4B10-8062-AB90A57F3958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_5.1_mp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1E8843-29A8-41EB-8689-C5E02791E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_5.1_mp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA48FEAB-AD82-4648-AC9E-B2C72AA27BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:netware_media_servers_5.1_mp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB12220-726E-4B32-BEEF-63B2E450F4D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16403",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014662",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/378957",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14551",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-224A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/378957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-224A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7BEFBD-4326-44A5-A160-9406D94AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85A88D7-07A1-4A8C-88B5-057AD9C675E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0B6EAC-E43D-4D1B-856F-7C23250A2355"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0234.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0234.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2AAE9DB-2CBA-4F2D-AEB5-052137E1ED7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24680ABA-5BED-4D3C-B399-E2CA4761E26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39CEF80-EAF6-49D3-9A61-2A986B9A3683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED126FD2-0BE5-4F49-BDFC-7D9D31E9A0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16462/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=488784",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14565",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16462/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=488784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attackers to execute arbitrary commands via a filename containing \".php.rar\" or other multiple extensions that include .php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crosscom_olicom:discuz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0_rc4",
            "matchCriteriaId" : "78B4C16E-78BC-4BD8-BDDB-1C57FB636F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0440.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16433",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0440.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in session.php in EQdkp before 1.3.0 has unknown impact and attack vectors, possibly involving auto_login_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eqdkp:eqdkp:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80063F6-9902-4A93-97D5-918417A38607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eqdkp:eqdkp:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E66D9-556D-4FE5-A35C-47AE6D35DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eqdkp:eqdkp:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F2B657-FF13-48EE-87B3-1B6E84122B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eqdkp.com/?p=changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16285",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://eqdkp.com/?p=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path parameter to (1) initialize.php, (2) customize.php, (3) form.php, or (4) index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezupload:ezupload:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38C7B3A-9ED1-4451-AD1C-8BBB6C9548D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16434",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5JP0J15GKU.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14534",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5JP0J15GKU.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does not check the return value of the insert_vm_struct function, which allows local users to trigger a memory leak via a 32-bit application with crafted ELF headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fb1759a3102c26cd8f64254a7c3e532782c2bb8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=9fb1759a3102c26cd8f64254a7c3e532782c2bb8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fb1759a3102c26cd8f64254a7c3e532782c2bb8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=9fb1759a3102c26cd8f64254a7c3e532782c2bb8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-17T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194704B6-4820-4398-8906-A1E529ED65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814CAE15-78D8-4205-AC95-E07385A7B3DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-06/0158.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0858.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431139225724&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014247",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098073.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972056.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/17470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5UP0Q0UG0I.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-06/0158.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0858.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431139225724&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098073.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972056.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/17470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5UP0Q0UG0I.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2127",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the \"COM Object Instantiation Memory Corruption vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ati:catalyst_driver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E822DD-6123-4CD8-9FE4-BC8A91D94F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A927C9E-5CCC-4FC1-AE63-24B96A5FC51A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2804E22-FFF4-4301-8958-16B32CE5ECD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B33B1B47-EEA0-4B1F-AC03-CAB56AB42DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AD45BF-8A91-4C87-AF15-D38D8468A4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A82D13-513C-46FA-AF51-0582233E230A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "757EC6C1-F5E2-45CD-9F7F-7760ECEDC842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ko:*:*:*:*",
            "matchCriteriaId" : "59B1B68C-86F1-4FA4-9F82-3E8761ED1E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:zh:*:*:*:*",
            "matchCriteriaId" : "716DDA05-D094-4837-852C-0511CDDD5ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54DDAF-8D7F-4A7D-9186-6048D4C850B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "67388076-420D-4327-A436-329177EA6F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB85A3C-EFA3-485D-84C5-7976718AEAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9D02D769-061D-44A5-B019-F4E653DF615A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77BFDC2A-4AE1-4FC8-ABA7-0400D46EA587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F09162C-01F0-4056-94D3-995713F92AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE2D3E0-49E4-410E-B63A-753BDE8995BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B14AE8E-1BFF-4458-87CC-357957F18F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34EFAEFE-2BDE-4111-91F5-E9F75ADFA920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1DA2B8-C41B-4EB9-A58F-E4E63F695A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2000:sr1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B4EC96E0-8D7C-4C72-8F04-97B0B675306E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E24DF34-F4A8-4C28-9593-F019FE3E3BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "FF41DACB-D707-4ED3-BA2E-2EEABC17FC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "70D447B9-4604-447C-88FC-F5DC8F77603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:professional:*:*:*",
            "matchCriteriaId" : "F6E69C81-2894-4319-9FBD-60AE719942E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:standard:*:*:*",
            "matchCriteriaId" : "8BC60369-95D2-475B-9FDA-5D1C13FEE8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511E22C6-DB04-44A0-906D-F432DD42CA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2003:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "9BF7D109-38E6-4FEE-8F9B-9A481D50DCFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2003:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3D931561-2312-4770-B418-FB622856DF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBEFBED-72F3-447B-8164-9E5C16828484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2002:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "E17BD019-DD35-413E-ACBA-2E77C8A1247D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:*:*:*:enterprise_architect:*:*:*",
            "matchCriteriaId" : "A681100F-9DE5-4BE6-ADE9-64A3808C7CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E6C132-4F4B-4FB0-9DDC-DD9750D8552D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:gold:*:*:*:academic:*:*:*",
            "matchCriteriaId" : "AEC99110-8EC1-4FEC-9535-B27AF1965DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:gold:*:*:*:enterprise_architect:*:*:*",
            "matchCriteriaId" : "B35FE238-4380-41C7-A956-EA3F2D5F9159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:gold:*:*:*:enterprise_developer:*:*:*",
            "matchCriteriaId" : "A8E772B4-8E7D-4D35-8C59-5959123AA572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:gold:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "4AFEC24E-5FA5-4653-BBAA-AFEBCC3F149B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:gold:*:*:*:trial:*:*:*",
            "matchCriteriaId" : "D451D000-00DC-46A9-9D1E-2C715D6D1787"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.php?date=2005-08-18",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16480",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "secure@microsoft.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "secure@microsoft.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/72",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014727",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/740372",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/898241",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/906267.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/470690/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14594",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15061",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-347A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1450",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-052",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21895",
        "source" : "secure@microsoft.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34754",
        "source" : "secure@microsoft.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1155",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1454",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1464",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1468",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1535",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1538",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://isc.sans.org/diary.php?date=2005-08-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/740372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/898241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/906267.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/470690/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-347A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format (RTF) file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/435188",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/435188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/172948",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/172948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with \"Requires Authentication: No\" even when the user has selected the \"Require pairing for security\" option, which could confuse users about which setting is valid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Algorithmic complexity vulnerability in CoreFoundation in Mac OS X 10.3.9 and 10.4.2 allows attackers to cause a denial of service (CPU consumption) via crafted Gregorian dates."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/913820",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/913820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in loginwindow in Mac OS X 10.4.2 and earlier, when Fast User Switching is enabled, allows attackers to log into other accounts if they know the passwords to at least two accounts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786BB737-EA99-4EC6-B742-0C35BF2453F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Server Admin tool in servermgr_ipfilter for Mac OS X 10.4 to 10.4.2, when using multiple subnets and Address Groups, does not always properly write firewall rules to the Active Rules when certain conditions occur, which could result in firewall policies that are less restrictive than intended by the administrator."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to gain access to a root Terminal window."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mail.app in Mac OS 10.4.2 and earlier, when printing or forwarding an HTML message, loads remote images even when the user's preferences state otherwise, which could result in a privacy leak."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mail:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2F1B23-5CB1-45C5-AF97-DA82DE791400"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in HItoolbox for Mac OS X 10.4.2 allows VoiceOver services to read secure input fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a password is required."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal security checks, which allows remote attackers to execute arbitrary commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/709220",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/709220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/461412",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/461412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in traceroute in Mac OS X 10.3.9 allows local users to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/420316",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/420316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-229A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:weblog_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0ED5F9-87BA-439C-975C-EB1942A52C51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "420FCEF3-4E21-4A87-A688-87C755757B0D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "420FCEF3-4E21-4A87-A688-87C755757B0D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in ECW-Shop 6.0.2 allows remote attackers to obtain sensitive information via the (1) min or (2) max parameter with a \"'\" (single quote), which reveals the path in an error message, possibly due to a SQL injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecw-shop:ecw-shop:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4094293C-1F78-406A-94CB-981C59648F93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112421209919985&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112421209919985&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 6.0.2 allows remote attackers to inject arbitrary web script or HTML via the (1) max or (2) ctg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecw-shop:ecw-shop:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4094293C-1F78-406A-94CB-981C59648F93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112421209919985&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112421209919985&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecw-shop:ecw-shop:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4094293C-1F78-406A-94CB-981C59648F93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112421209919985&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112421209919985&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly fed into an eval statement."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:1.3_sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BE17ED-6A16-4199-B0C7-0386C7918760"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112421484419768&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112421484419768&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is not included in the blacklist."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F260CC28-01AB-450F-9A2B-1E3355DECE6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112421484419768&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112421484419768&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51C71750-2BC0-4BFD-AEF4-CD1522639917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE41A002-CA5E-4D53-B4AB-32584E42E1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E90FC6F-1C5C-4260-9371-CED73E2A3BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A968008-33D9-4E00-8AD2-AEBA638D94DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.8.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53ACEE2-9EB6-4ED8-8D38-57F814BAB4E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A31DC5-06F4-43EB-9D82-BB8DC97109A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2004-02_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF135F0-6942-48E7-AF37-93283F62EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2004-04_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A863E2-685D-4C82-BAAF-DE08C4DDC850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2004-04_r1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7539601-07EC-41C4-B03B-245EC578B225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2004-10_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90C99E3-4544-48E3-BB8D-B4BAAD7D3084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-01_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58BB0C9-73E3-4A89-833B-B74D681923D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-04_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70818CD-5947-4C28-B687-EC2501936000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-06_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC532A89-A7C7-4015-A194-2733C364E938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-07_bsd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D70D8AC-6FA9-4A44-A89C-D1DF7C0F9F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-07_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998C62C9-F5F7-4FEA-9864-1405DFC87950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-07_r1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E2EE5E-8DB3-40E5-B702-CD22B9E379C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kismetwireless.net/CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kismetwireless.net/blog/?entry=/kismet/entry-1124158146.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_20_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kismetwireless.net/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kismetwireless.net/blog/?entry=/kismet/entry-1124158146.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-19T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via (1) kernel headers in a pcap file or (2) data frame dissection, which leads to heap-based buffer overflows."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51C71750-2BC0-4BFD-AEF4-CD1522639917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE41A002-CA5E-4D53-B4AB-32584E42E1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E90FC6F-1C5C-4260-9371-CED73E2A3BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A968008-33D9-4E00-8AD2-AEBA638D94DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.8.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53ACEE2-9EB6-4ED8-8D38-57F814BAB4E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A31DC5-06F4-43EB-9D82-BB8DC97109A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2004-02_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF135F0-6942-48E7-AF37-93283F62EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2004-04_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A863E2-685D-4C82-BAAF-DE08C4DDC850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2004-04_r1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7539601-07EC-41C4-B03B-245EC578B225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2004-10_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90C99E3-4544-48E3-BB8D-B4BAAD7D3084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-01_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58BB0C9-73E3-4A89-833B-B74D681923D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-04_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70818CD-5947-4C28-B687-EC2501936000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-06_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC532A89-A7C7-4015-A194-2733C364E938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-07_bsd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D70D8AC-6FA9-4A44-A89C-D1DF7C0F9F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-07_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998C62C9-F5F7-4FEA-9864-1405DFC87950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismet:kismet:2005-07_r1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E2EE5E-8DB3-40E5-B702-CD22B9E379C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16447",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kismetwireless.net/CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kismetwireless.net/blog/?entry=/kismet/entry-1124158146.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_20_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kismetwireless.net/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kismetwireless.net/blog/?entry=/kismet/entry-1124158146.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0357",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0FC6877-29D3-49D7-AA40-CB860E5EA51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCC27A1-A233-4999-AEA8-C096079A717F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CC4877-2701-4AA1-B6CC-44FE6551D5AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2D787A-DCA0-45CE-A5C3-41850970B468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C10A84-B508-4439-A0CD-F55EBB330077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solstice_backup:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36599E72-B2A7-4D75-BD8D-CB7B7425BE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solstice_backup:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC13C5F-002B-4992-964D-035CCFE0A8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E6EB61-BE16-4575-9EFA-0FAC1C14490E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53247CF9-5E51-48AE-93D2-05CA93CC162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACB16BC-73BE-4071-9BCF-F5FFD3A196E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16464",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16470",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014713",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/606857",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18800",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14582",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21887",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/16464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/606857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0358",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0FC6877-29D3-49D7-AA40-CB860E5EA51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCC27A1-A233-4999-AEA8-C096079A717F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CC4877-2701-4AA1-B6CC-44FE6551D5AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2D787A-DCA0-45CE-A5C3-41850970B468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C10A84-B508-4439-A0CD-F55EBB330077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solstice_backup:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36599E72-B2A7-4D75-BD8D-CB7B7425BE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solstice_backup:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC13C5F-002B-4992-964D-035CCFE0A8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E6EB61-BE16-4575-9EFA-0FAC1C14490E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53247CF9-5E51-48AE-93D2-05CA93CC162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACB16BC-73BE-4071-9BCF-F5FFD3A196E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16464",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16470",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014713",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/407641",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.osvdb.org/18801",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14582",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21892",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/16464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/407641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0359",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0FC6877-29D3-49D7-AA40-CB860E5EA51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCC27A1-A233-4999-AEA8-C096079A717F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CC4877-2701-4AA1-B6CC-44FE6551D5AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2D787A-DCA0-45CE-A5C3-41850970B468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C10A84-B508-4439-A0CD-F55EBB330077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solstice_backup:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36599E72-B2A7-4D75-BD8D-CB7B7425BE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solstice_backup:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC13C5F-002B-4992-964D-035CCFE0A8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E6EB61-BE16-4575-9EFA-0FAC1C14490E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53247CF9-5E51-48AE-93D2-05CA93CC162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACB16BC-73BE-4071-9BCF-F5FFD3A196E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16464",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16470",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014713",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/801089",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_port_mapper.htm",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18802",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14582",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21893",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/16464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/801089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_port_mapper.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2098",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16355/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14521",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9638",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16355/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2099",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty, which causes the creation to fail, leading to a null dereference in the keyring destructor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16355/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014644",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14517",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9079",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16355/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The driver for compressed ISO file systems (zisofs) in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a denial of service (kernel crash) via a crafted compressed ISO file system."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16355/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16355/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service (kernel crash) via a compressed file with \"improper tables\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16355/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sources.redhat.com/ml/bug-gnu-utils/1999-06/msg00183.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0144.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16355/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sources.redhat.com/ml/bug-gnu-utils/1999-06/msg00183.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0144.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94584",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16355/",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16500",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14720",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16355/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/169-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2491",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E71EAB3-BEFE-4442-A18A-F2739DE3B0BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23E7A02-29EF-41CE-9E05-9224F832BAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC32309-4E60-4A56-808E-5494B1CD3D2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605112027335&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112606064317223&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16502",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16679",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17252",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19072",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19193",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/604",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014744",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-159.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-800",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-817",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-819",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-08.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_48_pcre.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_49_php.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_52_apache2.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-358.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-761.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0197.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427046/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14620",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1511",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0789",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1496",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A735",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605112027335&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112606064317223&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-159.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_48_pcre.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_49_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_52_apache2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-358.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-761.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0197.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427046/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Apache",
        "comment" : "Fixed in Apache 2.0.55:\nhttp://httpd.apache.org/security/vulnerabilities_20.html",
        "lastModified" : "2008-07-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2499",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory structure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slocate:slocate:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279429CA-F200-43BB-A79D-30700B4468FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slocate:slocate:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F837D07-C60B-45EF-A778-5CD3F529CA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slocate:slocate:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0874D827-3048-413A-B804-C7F2DE709C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slocate:slocate:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83BC51E-E90F-4EBD-B6AE-66DEBEB0E903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slocate:slocate:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141DDC6-29DF-46AC-8EDB-BBB16BD549EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slocate:slocate:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7BA3F6-7AAF-477B-8615-F1E857775A0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19034",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-345.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-346.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-747.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14640",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9538",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-345.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-346.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-747.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17AF7C3-3453-4343-AC57-B3BAACAD36E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D20F5D1-C28A-4D0E-B4BA-3F8A9B05933E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA3ABF2-F8D7-4D46-8862-072AD105AE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B34BF7-B96E-4C6A-B6BD-803680629300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280C9607-98C6-44CE-9017-43592EC9D013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F972C202-DEEB-49AD-BBE7-442CA0E975E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028ABC18-8944-474C-8482-2DC4F0E0B51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD764CC4-F985-4A2F-B744-0B07BE59534F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B450984-DF81-46FE-A3E2-16323D1E55A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6133BA76-655F-4023-A5C5-31919D3C45E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5D9FFC-728E-4E2A-9787-0748D0C88433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8559F336-5A94-43ED-BF2E-0126038DA3C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FE412A-DB93-41FC-85B3-38E46913BEB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63702A32-F7D3-46FF-B7B2-A845081D3AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF86C8A2-154B-49B3-B263-41826DC196BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CC77562-5C30-4DA3-AFCD-7CD63D85E298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CD71A6-724B-42C1-BBBD-456F74393909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6828C91-18F9-4E36-B496-56E559180480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2251B20D-F0AA-4FCA-8B62-B3EED16726E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D400E92-D0E4-43C2-8ECF-84352B5B2608"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16472/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14585",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16472/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login_admin_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediabox404:mediabox404:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "75AA5292-1E6F-4C65-89C4-CA2C29B852E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112431321513646&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16493/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431321513646&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16493/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phptb:topic_boards:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "E44B73D4-F8D2-4611-8118-3865A7032A25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112431407619802&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431407619802&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Log-SCR function in the \"Log to Screen\" feature in WinFtp Server 1.6.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winftp_server:winftp_server:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F74FD0F5-4740-4878-9492-DB47E1A13F7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036173.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431455512374&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16461/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/WinFtpServer1.6.8-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036173.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431455512374&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16461/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/WinFtpServer1.6.8-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via a .. (dot dot) in the (1) layerstyle parameter to adlayer.php or (2) language parameter to js-form.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "912854C0-16FF-437A-9002-9D428E557404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgads:phppgads:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "F259E01E-193F-4DC9-B342-28D4E670C1F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112431497300344&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16469/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14584",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityreason.com/adv/phpAdsnew.SR.16.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431497300344&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16469/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityreason.com/adv/phpAdsnew.SR.16.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "912854C0-16FF-437A-9002-9D428E557404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgads:phppgads:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "F259E01E-193F-4DC9-B342-28D4E670C1F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112431497300344&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16469/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14583",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431497300344&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16469/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Match or (2) CatID parameter to SearchResults.php, or (3) the password to AccessControl.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpfreenews:phpfreenews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.40",
            "matchCriteriaId" : "76F4CC7D-3AF9-4E40-ACE4-51D8999F91F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112439254700016&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16490/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14589",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112439254700016&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16490/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) NewsMode parameter to NewsCategoryForm.php, or the (2) Match or (3) NewsMode parameter to SearchResults.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpfreenews:phpfreenews:1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370D0087-9260-4B5B-ADDF-EE1E11EB642E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112439254700016&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16490/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112439254700016&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16490/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long nickname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:valusoft:chris_moneymakers_world_poker_championship:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5825D2D-03D1-4C84-981E-C7B86A18642F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/chmpokbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431235221271&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16478/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/chmpokbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112431235221271&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16478/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neoteris:instant_virtual_extranet:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A037FAA6-6D26-4496-BC67-03475B4D1155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neoteris:instant_virtual_extranet:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3831DD3-E783-4200-8986-FDBF7DD9BA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neoteris:instant_virtual_extranet:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2909C9D5-3D8F-4C41-B0E7-A0C0B432C19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neoteris:instant_virtual_extranet:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09436DF-E3C1-4C03-A3BE-73C4BC84BB7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neoteris:instant_virtual_extranet:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699764B6-0F86-4AB0-86A3-4F2E69AD820C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BB54A7-24D0-409E-8924-D212543E4AAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:1.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74187E80-0EDA-4FE7-A113-FCB723AF08B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:1.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6691BE-2591-495A-BB72-2DA9956944A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:1.66_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB79FD3-29CB-4694-9A67-C6AF2EADA89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:1.73_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92455F85-9BFA-4684-9A6D-0E52AFA7161B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:1.73_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1173EA59-AEAE-49E6-B6DD-775B28C678D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.0.1_r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6711CD61-E16E-41B8-8948-592171D73B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD0131A-D07C-4B23-8CEC-E7CF659DB55E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.1_r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2837DDC0-9F2C-4782-AA1E-5315AB12528F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.1_r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B065C9-93C6-43EB-ADD1-532FC6FBEA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D38841C-DF2D-41D8-BD15-EBBB9E9D83E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.5r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDDBDBE1-E16B-4F03-9072-8B28E9467FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.5r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E099835-7C70-44F1-9E2B-07AF5B3C0577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.5r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10CDE09-1896-4E99-B2A0-93F89164225A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3159CA4-0944-4419-9B60-E93269710377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F43896A-2EF6-4069-8B81-815E4C232C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7DFAB9-4D4D-4179-9DC4-F654D6E2DAB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EC0CE2-5A5C-44ED-A423-CC20B7FFE22F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BD48EE-C23B-412C-895D-F58CD81FC673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A6CA51-F121-44F7-80D1-CF38261D299C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5064E9A-677E-418E-91A7-2DB686B662DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB00325B-29C6-41DA-9274-C9B4C54BC53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF67517-638C-4D57-8402-F336A74C4BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07AC301B-0487-4FDB-B1F8-B225099B96FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CE0BC3-6B59-4EAB-A2BD-CF73B3BD415F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B65997-2AB7-42D1-A1D9-E999A33366CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB3F1262-141B-48E0-8EAC-97B043EBD9FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.6.1r12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214DA9E7-E8E5-4579-86E8-A5A8BC887860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE7F646-B716-47D7-84E8-CA875A85C983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.7.1r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA96638D-AD5F-4EFD-983B-181DCCF3EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.7.1r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E30F9B6-24EB-44FB-9E73-5DD480A48CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.7.1r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1648D07-823B-4BF9-87EC-DB34797B5B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D06FC50-39AE-4988-8C96-38A991CD7F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.8_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33B8346-B753-443F-BB24-74FF6C55340B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.10_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DE8E73-0F1B-42E4-9BD6-7F5066D7330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:2.10_r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057B0387-44C0-45BE-9D91-D5A01C9D8020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28EB52A7-E8EC-46AA-A3F5-81BFA01666D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.0r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25881AB-69D0-46E5-A502-C65933A457B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.0r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14314AE-812D-4654-B6CE-43917A1F0542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.0r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7E636-40E0-45CC-A39E-C8BDF9CFBE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.0r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463EC9BA-B241-45D6-AB89-53EB8156E40F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179C18B1-3731-4DBC-A942-D810671401BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.1r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53868A9-67B6-40AD-B4F0-6911F1D2FC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.1r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA52D22-A0D6-413A-9F49-0452356D2BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.1r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BF2DCD-4F61-4FA2-B82B-FB9DEB33054F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.1r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C844B2C-26BB-460D-A36E-B74F45169F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.1r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F618F5-E695-41BA-BFDB-E63A9A422F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.1r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31811D82-B28F-49CD-8C86-A4DE7CD95F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.1r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D1957D-9F30-4D66-BA14-8015E260C076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9FCB548-2488-4EBC-AA21-4A57F5F87E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4C0FC0-AB52-498B-84AE-DF2C380B079D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.3_r1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05578911-51E3-447B-98B6-083D3F35E8F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.3r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D71F4A5-7380-4E0E-9B81-7CCBECA3EFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.3r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "981D2274-9686-4F6F-83B1-F4D0DA909983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.3r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5CD9C77-891A-4E0D-9D5D-214466699044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.3r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27C7E28-915C-4ECC-A9BC-779F70905614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.3r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47206DFC-7840-4CB8-8ED4-2212C287B4DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.3r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46904E1-F2E5-45BA-8945-4FB3EF34D299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.3r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45551432-C02B-426D-89DC-16573A7C8CD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.0.3r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCFE4A9-9018-4F21-8BB4-D12AD0C33690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFC9DEB-00D5-4FC9-A608-1F7364FF21F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBA6417-9C4C-41D9-91C7-96C255EB2298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C65E89-186B-4D14-8A40-58B780731DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26637853-7036-434E-A9AC-AAC88D84D826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A890FC9-CF8B-413A-A580-2F59A42D1744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F555CCA2-95D0-4D11-A182-5A00A03403D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B50AC2-39DE-4446-A9ED-0627C4A9DC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F01ED64F-5617-412D-807D-7FAF0E45172F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B215E3-FDB1-43C6-9A7E-A98F381CB311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "058331CE-8DCF-4B8D-83F5-F23D935D9931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D3D6B3-7BB7-40AC-8FB3-F8362DA36047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2E0233-3161-4B45-9EB2-D46BE76E1520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.0r12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12B61290-20EC-4D3C-A7BF-85545F5BA5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:3.1.1_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A85A76EC-8F86-47A6-A85A-8B4216C99142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26958BB3-1484-42EC-AC3A-33A748B377F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0:*:dial:*:*:*:*:*",
            "matchCriteriaId" : "6AB0B6EE-BEDE-46AD-859E-9601297B0217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E29D5B-872A-4CD5-9A44-EBFA5A7C7554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3851B7-72BC-4DDF-A718-69068128CA15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A6D877-DF7D-4E9B-8855-2ACF97C5FC29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FBDD05-CAA6-4034-8C2D-94E965BE2132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD1CFF3-3211-43E2-858C-37142EE54490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC0306C-FDDD-4B5F-B371-17CA2231C63A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E607F4-E348-4385-9C2C-558BB0402585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35CA445F-428A-4EDB-A18A-5E626D0E04BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8885D9-20A0-443D-9650-912F360C9B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD70CC4-334A-4734-97DE-C31A6C2014AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC456F90-05EB-4C88-9650-ED71A35A80C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.0r12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEA92AE-A047-4A20-A209-B9CAC646BFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78FF0914-F907-41F4-9F2D-6ECD601C73C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.1r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48518416-3F00-4174-A0EF-57E5A614F8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.1r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACCD6F2D-642E-407E-A16D-73B97F709431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.1r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438438F8-C7C3-427A-B7AA-1E7F8DA5C014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.1r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED08E19A-67ED-47F9-B40F-B8CFF496AF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.1r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9021FD-198B-4D7D-BAF3-D83EC3D64EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.1r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E861C0-AF82-4F7C-A515-005083D7D699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.1r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AEE2-BAA4-4FDA-A627-F5A7370D2C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.1r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCB5149-8C43-42A2-A9B2-541802FBE5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.1r9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3A3552-2D77-494E-902E-9529AA2074D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.1r10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD90D085-60F7-4B3F-8C82-B9F362EFFB89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627A41F5-BE3C-41AD-B455-0D73BE5CA010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D41144E-9F64-4919-87DA-09092AA2030A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.3r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85BBA70-D185-4A84-8D66-2D3ACE336C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.3r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F6E761-1941-4B9F-98DC-1EED40B851A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.3r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3720A8-B042-4366-A4F2-2262CDD0CAF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:4.0.3r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEC6EE-F483-4156-91DB-E939B45D09E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F4B1021-40CB-4A11-9650-F1BDBD6943D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19172BCC-BFF0-4031-8AFE-B63422731B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:5.1.0r3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACCBC8E-7C9E-4C3A-8A0F-BBF4E2F92AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:netscreen_screenos:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98471F46-A271-4B0A-89A9-12D544474393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netscreen:ns-10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDFE9E5-AA71-4D17-886A-E0B493B4B833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netscreen:ns-100:3.0_.pe1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E6687D-08CF-48AC-8112-555149E57B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netscreen:ns-204:5.0.0_r6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04797E9E-60CB-40B3-BE23-6051C72A43D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netscreen:ns-204:0110.0_11_4.0_r10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871B28F0-C082-4AD1-A4DE-22B3DC00E6BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netscreen:ns-204:0110.0_11_5.1.0_r3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEABCBA-45BD-45B0-9343-68178FDCB493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netscreen:ns-500:4110.0_11_4.0_r10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F057D3-1ECB-4804-8C83-9277EFD4C322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netscreen:ns-500:4110.0_11_5.1.0_r3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D551820-CF22-4F80-A2A6-223D9CE63444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netscreen:ns-50ns25:5.0.0_r6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "877DF54F-752E-4FBC-8E00-7F5FD3AE63E0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:juniper:netscreen-5gt:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A482DFA5-4108-4B0F-BD8E-04FEB52D3537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:juniper:netscreen-idp:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B97B63E-CE45-4DF9-9838-D9CE96CECE72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:juniper:netscreen-idp:3.0r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5F6D51-15B0-449D-9418-8C4C7A1E1D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:juniper:netscreen-idp:3.0r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C696E607-0927-4087-A437-9C5459EB8BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:juniper:netscreen-idp_10:3.0.1_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142A3E18-3E20-415E-A53C-01E1C8865300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:juniper:netscreen-idp_100:3.0.1_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957172A3-6B8A-48E1-911F-28A6F055FB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:juniper:netscreen-idp_1000:3.0.1_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A9B902-09D4-4A29-9BA7-FD7898B24ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:juniper:netscreen-idp_500:3.0.1_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214A7AFF-B36F-4ABC-8C7D-93B1493ADEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netscreen:netscreen-sa_5000_series:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA34EB36-E5E9-43B6-ABB8-B292BC7B0CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netscreen:netscreen-sa_5020_series:4.2_r2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B26742-2B48-4D2A-8AA3-9E86ED482424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netscreen:netscreen-sa_5050_series:4.2_r2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9103D8-B207-4622-AA6C-8D58EB36688E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112438068426034&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16474/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nta-monitor.com/news/vpn-flaws/juniper/netscreen/index.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14595",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112438068426034&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16474/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nta-monitor.com/news/vpn-flaws/juniper/netscreen/index.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2641",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges.  NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:padl_software:pam_ldap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "build_178",
            "matchCriteriaId" : "38B65C09-D1C2-45C0-A2F7-C48D85867127"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17233",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17270",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/778916",
        "source" : "security@debian.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:190",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-767.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447859/100/200/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14649",
        "source" : "security@debian.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-680",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10370",
        "source" : "security@debian.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-test-list/2005-August/msg00170.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/778916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-767.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447859/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-test-list/2005-August/msg00170.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9C0F76-89D9-483A-8EF6-638C4B2FE1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://comments.gmane.org/gmane.mail.mutt.devel/8379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://online.securityfocus.com/archive/1/408493",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://online.securityfocus.com/archive/1/408501",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014729",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-08/0594.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-08/0600.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://comments.gmane.org/gmane.mail.mutt.devel/8379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://online.securityfocus.com/archive/1/408493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://online.securityfocus.com/archive/1/408501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-08/0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-08/0600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue did not affect the Linux versions of Mutt.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.seul.org/or/announce/Aug-2005/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112448002732443&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16424",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.seul.org/or/announce/Aug-2005/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112448002732443&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Jtext field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isemarket:jaguarcontrol:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8744EC-DAE5-4400-983C-3BE367144343"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-08/0191.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14558",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-08/0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_265:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6DAC793-6BAB-4816-849F-0450E8822161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_332:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C4FC0A-5D67-411F-A759-EEEA7FDECF4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_340:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64ECBC0D-65C3-4536-B5CA-6192DBBE4630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_420:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5D7F1E-54BE-4133-AC2B-106F6E2EC712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_490:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312C9D9D-A26E-4FAF-A598-A6D29D6BA672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_535:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945E57F1-7164-4B75-A135-E05062FF0A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_555:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A805752-05C3-4CAA-99C7-4C28EF979D67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16467",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_220:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8590CB4-6437-4198-8D91-3AC1D8E89B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_230:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E394086F-8CFD-403D-A531-0C3FFE934565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_240:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2101594-5D83-4C12-B5D5-9203FE2FD720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_255:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D2D9C0-DC09-48E6-96BB-75C2556F0B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_265:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6DAC793-6BAB-4816-849F-0450E8822161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_332:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C4FC0A-5D67-411F-A759-EEEA7FDECF4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_340:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64ECBC0D-65C3-4536-B5CA-6192DBBE4630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_420:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5D7F1E-54BE-4133-AC2B-106F6E2EC712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_425:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10F5ABC-3189-4FD8-ACB7-DA59375CB50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_426:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31341E77-3A7F-489F-AB60-F2773DD204F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_430:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56B4998-07E7-465B-8C27-1A68A9840A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_432:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A00971-F133-4AEB-B518-28779855A386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_440:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DED98FB-1A2C-45A1-A295-766326F24A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_460:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDFD7441-5745-487A-9BA0-A1E78D6AC0C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_470:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732B68E0-F4FD-41B4-8877-72A296A66547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_480:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB6AB90-FB39-465F-8AF5-7C12C2181DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_490:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312C9D9D-A26E-4FAF-A598-A6D29D6BA672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_535:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945E57F1-7164-4B75-A135-E05062FF0A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_545:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540F4384-01AA-48E2-8677-5BF444D7B0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_555:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A805752-05C3-4CAA-99C7-4C28EF979D67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16467",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitrary web script or HTML and modify web pages via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_265:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6DAC793-6BAB-4816-849F-0450E8822161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_332:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C4FC0A-5D67-411F-A759-EEEA7FDECF4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_340:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64ECBC0D-65C3-4536-B5CA-6192DBBE4630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_420:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5D7F1E-54BE-4133-AC2B-106F6E2EC712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_490:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312C9D9D-A26E-4FAF-A598-A6D29D6BA672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_535:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945E57F1-7164-4B75-A135-E05062FF0A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:document_centre_555:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A805752-05C3-4CAA-99C7-4C28EF979D67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16467",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary files via the site parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w-agora:w-agora:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8F8096-95AA-447A-9654-56D666DDF5B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0599.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://h4cky0u.org/viewtopic.php?t=2097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16497",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14597",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0599.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://h4cky0u.org/viewtopic.php?t=2097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course parameter in login.php or (2) words parameter in search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BDCA86-C4D0-49B1-A8FE-E81C9B29B04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16496",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408521",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14598",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, and (3) email parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emefa:emefa_guestbook:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC921872-C71C-4098-8F05-DAA5C0B02A1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0508-advisories/emefaGuest.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16489",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://systemsecure.org/ssforum/viewtopic.php?t=91",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.emefa.myserver.org/comp/guestview.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0508-advisories/emefaGuest.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://systemsecure.org/ssforum/viewtopic.php?t=91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.emefa.myserver.org/comp/guestview.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D1D438-86A5-4224-852F-EC1E5DB83DC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112438781604862&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/zorum.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16504/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014725",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112438781604862&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/zorum.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16504/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) attach.php, (4) blacklist.php, (5) zorum/forum.php, (6) globalstat.php, (7) gorum/trace.php, (8) gorum/badwords.php, or (9) gorum/flood.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D1D438-86A5-4224-852F-EC1E5DB83DC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112438781604862&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/zorum.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014725",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112438781604862&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/zorum.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML via e-mail data in a message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bbcaffe:bbcaffe:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D47224-414F-43AA-B18C-D3514F4E5D10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/bbcaffe.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16503",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408503",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/bbcaffe.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Whisper 32 1.16, and possibly earlier versions, stores passwords in plaintext in memory, which allows local users to obtain the password using a debugger or another mechanism to read process memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whisper32:whisper32:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FCD4C8-1428-4EDC-A550-772BE2711C79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://antilamo.skifstone.com/vuln/whisper32.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112438834310990&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://antilamo.skifstone.com/vuln/whisper32.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112438834310990&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2665",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elm_development_group:elm:2.5_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A99C38-E1E3-4562-8BA1-7F24F3B13E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elm_development_group:elm:2.5_pl6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F52F20-0536-447A-A410-49AD4B408B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elm_development_group:elm:2.5_pl7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC21A5D-2BA0-4DB3-9B93-77CA843DD8AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0688.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112472951529964&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16508",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17475",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014745",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:186",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-755.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14613",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.419306",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0688.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112472951529964&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-755.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.419306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580008AC-2667-4708-8F7E-D70416A460EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E05D8E86-EC01-4589-B372-4DEB7845C81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "764AD252-CA2F-4A87-BCAA-7747E8C410E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BB9F7-55E5-4CB3-8429-C37C7132799F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E6F639-31A0-4026-B6D4-51BA79FB1D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0211BCE3-0DED-40BA-8A21-1A97B91F71C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD7BB30-AC79-4153-852C-1053DCF4DE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9039BE91-AF0A-41E7-8F9F-15375890E120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08BCB2EA-DF9D-4853-805B-29FA6274E2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F93417F-2498-4576-9F5D-B59F77D39669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3AB42C-B614-4746-99AD-E94140D91BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458167E5-9BC2-40BE-AC8A-9761A4F19494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB9B4C7-4235-4388-8E5D-E72ECCC37A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86ACA0ED-A3D0-48A7-B06F-13709AD23B55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB9262-D05E-4610-9C79-3EDE44AC7C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8176879B-1875-4AC9-B15A-2ABCFCD04F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA26A12-F96A-4025-BBCA-72B7A3B1E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02751E9-2D38-4495-9572-8D84D71D4773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A36BEA2-DAE4-423C-8D85-0F6036351F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80DC64F6-FE28-44BA-91D1-EC2DB11B2CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44CCF5CD-B434-4392-A79A-C1945D2AE30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB456B8-9D8B-4985-858D-6A43FA5EE2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD4E0F6-4EEA-4EC7-83E7-FC6F7D2E7A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35F4ABE-1B0C-4195-8F99-BF993A17882B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC7352D-2916-47F7-A256-F897D763DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC3FC36-B246-4DCB-8984-228525D9A356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC861000-37D8-4B0F-BFA0-57E9BE125B56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nms.csail.mit.edu/projects/ssh/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eweek.com/article2/0%2C1759%2C1815795%2C00.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0257.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://nms.csail.mit.edu/projects/ssh/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eweek.com/article2/0%2C1759%2C1815795%2C00.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0257.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162681\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n",
        "lastModified" : "2006-09-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows attackers to cause a denial of service via unknown vectors, aka the \"CAM TCP port vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:advantage_data_transport:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A14CFE-F64B-478F-938F-9BFABDC1519E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:adviseit:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C841D8C5-1D71-49C8-ACE0-EED420DA4BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F206D15-FF0D-400E-9727-5DA6C07B57EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9688C248-2815-4386-AF03-13B2F000BC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC489ECB-30FB-4067-BF23-A8614FE50CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "7B328CD3-30B5-4C1F-9BC3-511E48E832EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA67A49C-688A-4B6E-8B90-BEC937FCEE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_ecm:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FE1453-0ECA-459B-8F23-776DF90617D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_olap:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50055C0C-3B7E-452D-A5FC-C618D0CC61B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE46A9BF-C703-4A90-98A4-0211E909DFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_admin:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03BEA407-27D7-4C11-9BCC-0A8F770A792F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_admin:2.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B6EDD67-A634-4B51-AF3A-B487D9CADC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_admin:2.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC0F5C8A-8B04-4234-A42E-91487EA61EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_admin:2.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3A2662-1784-4067-97A7-9B0B99133302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_admin:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03E1D5A-61EC-4B9E-96B1-69015D9210F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08594EFB-E04B-42E8-BE00-C3ACDB62BA4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:message_queuing:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838477BC-45EE-428A-BF76-1923F432E5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:message_queuing:1.07_build_220_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AEF982-9F6A-4832-8F61-DE8EF289A1F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:message_queuing:1.11_build_29_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35ED5855-D342-4C42-9ACE-17AC97ECEB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6256DDC-50D7-489F-A04D-763AC41E6711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD68320-7B1C-4651-ADA3-FD6AB599D375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9FDBE82-E553-4504-A347-9C181B9B59FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A600F40-3E4D-4976-B82B-D7005CC4605C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3696554E-AC8B-4028-81EA-A5BF9D7026EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE772B0B-9B5A-4768-B3F5-D6195ACE90AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "358E054A-2298-486B-88A4-44AB6864904E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_data_transport_option:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC742EE-03C6-4BDC-AEF8-03609D6498E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_jasmine:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFCD53C-9536-4A62-B5A5-DAA8FFCA611F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_performance_management:2.4:sp3:openvms:*:*:*:*:*",
            "matchCriteriaId" : "B46E7F96-99DF-42BA-B6D9-B625AB973850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C2C33D-8403-4C75-8A52-713393FE408F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D293FB82-D21B-4BDD-A511-B994B557032A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90FF8920-8E4E-4369-96A8-954ECC05D0A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173467CF-3871-49BA-B54A-27BA492F8433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6AE0157-B6C9-4112-A3A6-5B040B19D4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D03F79-22E5-49A3-AB05-14F8EDB04D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAB1CA3-B423-4656-9532-29D02917C2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7352EEC1-8FA1-431F-9A92-B0AA8B17F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "52933E5F-06B7-45E2-B8E5-9B25351E67A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5FFBD6-2820-43D6-B945-FBFD6F6CFD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17048CC-F3C9-47BC-87DE-4D431BC7E1C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2799F9BF-4C19-4268-AE41-03E9D1994CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA4FB17-296A-4D26-9491-B7C151C45235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5704D-3337-4351-872B-AF987DC39BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EFF2305-24CF-48F7-841E-63400CF25B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_asset_management:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "18F48B87-E943-4915-83D2-5F08BD6D1825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B42FDB59-00C8-4D6A-B6F0-C880E9C3F1D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A07DB6F-666C-4D87-9F7A-B17BE7454E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:3.5:*:websphere_mq:*:*:*:*:*",
            "matchCriteriaId" : "0FE2A55B-A89D-470E-8E9E-4B1B0FB1C4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:4.0:*:lotus_notes_domino:*:*:*:*:*",
            "matchCriteriaId" : "DA6C17EE-38A9-4E8E-92E3-14D57E4BB546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:4.0:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "A4F96A84-A69D-4017-A27D-09C7B95BA696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:4.1:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "7FAD2FF7-1878-49F7-8F44-4E7DC4471F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:5:*:web_servers:*:*:*:*:*",
            "matchCriteriaId" : "C1E3D8C0-4554-4DCE-A883-5B20E686C895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:5.0.1:*:web_servers:*:*:*:*:*",
            "matchCriteriaId" : "15726391-DF79-4EDE-AE6E-9D7B7E0EB654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_nsm:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD914D01-2432-47CD-B316-05A1F65B294D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_nsm:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BD85A7-5F9F-4230-ABF1-2076715128DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_software_delivery:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "16C98B61-52A4-4A67-BABA-B83AF6C7851C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_tng:2.2:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "24BF5923-42E7-403E-81F0-D3136C58ECE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16513",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/18915",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14621",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1482",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/18915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:advantage_data_transport:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A14CFE-F64B-478F-938F-9BFABDC1519E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:adviseit:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C841D8C5-1D71-49C8-ACE0-EED420DA4BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F206D15-FF0D-400E-9727-5DA6C07B57EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9688C248-2815-4386-AF03-13B2F000BC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC489ECB-30FB-4067-BF23-A8614FE50CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "7B328CD3-30B5-4C1F-9BC3-511E48E832EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA67A49C-688A-4B6E-8B90-BEC937FCEE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_aion:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "076561DB-925A-41BA-A444-D4484FA87227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_ecm:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FE1453-0ECA-459B-8F23-776DF90617D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_olap:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50055C0C-3B7E-452D-A5FC-C618D0CC61B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D4FBE7-1B60-49AE-B5CD-FA1783454D75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE46A9BF-C703-4A90-98A4-0211E909DFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_admin:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03E1D5A-61EC-4B9E-96B1-69015D9210F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08594EFB-E04B-42E8-BE00-C3ACDB62BA4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:messaging:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F4E5D9-52F6-4A60-95AD-B57101644039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:messaging:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD39CAF-7164-4E0E-874A-213A4CB57D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:messaging:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B5DC7A-C8E1-4E7D-8B58-7063B2F7CBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6256DDC-50D7-489F-A04D-763AC41E6711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD68320-7B1C-4651-ADA3-FD6AB599D375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9FDBE82-E553-4504-A347-9C181B9B59FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A600F40-3E4D-4976-B82B-D7005CC4605C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3696554E-AC8B-4028-81EA-A5BF9D7026EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE772B0B-9B5A-4768-B3F5-D6195ACE90AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "358E054A-2298-486B-88A4-44AB6864904E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_data_transport_option:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC742EE-03C6-4BDC-AEF8-03609D6498E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_jasmine:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFCD53C-9536-4A62-B5A5-DAA8FFCA611F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_management_portal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435570CC-A9E2-4B7C-BC6A-7AC45223ECC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_management_portal:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562569CE-C9AD-4D8C-ACCE-CAC9FF0EF8CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9C8A1C-0A55-4CA5-9BB6-2D03EFCFE699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFA39E3-A614-4A64-B29C-86D6F12F1557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_nsm_wireless_network_management_option:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB83D7E3-D798-45C5-BCC5-805B56D87CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_performance_management:2.4:sp3:openvms:*:*:*:*:*",
            "matchCriteriaId" : "B46E7F96-99DF-42BA-B6D9-B625AB973850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C2C33D-8403-4C75-8A52-713393FE408F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D293FB82-D21B-4BDD-A511-B994B557032A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90FF8920-8E4E-4369-96A8-954ECC05D0A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173467CF-3871-49BA-B54A-27BA492F8433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6AE0157-B6C9-4112-A3A6-5B040B19D4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D03F79-22E5-49A3-AB05-14F8EDB04D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAB1CA3-B423-4656-9532-29D02917C2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7352EEC1-8FA1-431F-9A92-B0AA8B17F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "52933E5F-06B7-45E2-B8E5-9B25351E67A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5FFBD6-2820-43D6-B945-FBFD6F6CFD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17048CC-F3C9-47BC-87DE-4D431BC7E1C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2799F9BF-4C19-4268-AE41-03E9D1994CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA4FB17-296A-4D26-9491-B7C151C45235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5704D-3337-4351-872B-AF987DC39BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EFF2305-24CF-48F7-841E-63400CF25B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_admin:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FE3512-D29B-4392-8DF8-B3B3A1F521BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_admin:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9798A112-CE4D-435D-B80D-E4A4C7209A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_admin:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541D4956-3E82-4FA7-B18A-37D383D987A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_admin:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E836C2F1-2E93-4D4B-B0C3-3264762B26BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_asset_management:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "18F48B87-E943-4915-83D2-5F08BD6D1825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B42FDB59-00C8-4D6A-B6F0-C880E9C3F1D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A07DB6F-666C-4D87-9F7A-B17BE7454E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:3.5:*:websphere_mq:*:*:*:*:*",
            "matchCriteriaId" : "0FE2A55B-A89D-470E-8E9E-4B1B0FB1C4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:4.0:*:lotus_notes_domino:*:*:*:*:*",
            "matchCriteriaId" : "DA6C17EE-38A9-4E8E-92E3-14D57E4BB546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:4.0:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "A4F96A84-A69D-4017-A27D-09C7B95BA696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:4.1:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "7FAD2FF7-1878-49F7-8F44-4E7DC4471F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:5.0:*:web_servers:*:*:*:*:*",
            "matchCriteriaId" : "62B98B62-F00C-4F3E-B891-18AD04A37725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:5.0.1:*:web_servers:*:*:*:*:*",
            "matchCriteriaId" : "15726391-DF79-4EDE-AE6E-9D7B7E0EB654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_software_delivery:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "16C98B61-52A4-4A67-BABA-B83AF6C7851C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_tng:2.2:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "24BF5923-42E7-403E-81F0-D3136C58ECE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16513",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/619988",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18916",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14622",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1482",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/619988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:advantage_data_transport:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A14CFE-F64B-478F-938F-9BFABDC1519E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:adviseit:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C841D8C5-1D71-49C8-ACE0-EED420DA4BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F206D15-FF0D-400E-9727-5DA6C07B57EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9688C248-2815-4386-AF03-13B2F000BC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC489ECB-30FB-4067-BF23-A8614FE50CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "7B328CD3-30B5-4C1F-9BC3-511E48E832EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA67A49C-688A-4B6E-8B90-BEC937FCEE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_aion:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "076561DB-925A-41BA-A444-D4484FA87227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_ecm:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FE1453-0ECA-459B-8F23-776DF90617D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_olap:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50055C0C-3B7E-452D-A5FC-C618D0CC61B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D4FBE7-1B60-49AE-B5CD-FA1783454D75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE46A9BF-C703-4A90-98A4-0211E909DFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_admin:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03E1D5A-61EC-4B9E-96B1-69015D9210F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08594EFB-E04B-42E8-BE00-C3ACDB62BA4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:messaging:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F4E5D9-52F6-4A60-95AD-B57101644039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:messaging:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD39CAF-7164-4E0E-874A-213A4CB57D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:messaging:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B5DC7A-C8E1-4E7D-8B58-7063B2F7CBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6256DDC-50D7-489F-A04D-763AC41E6711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD68320-7B1C-4651-ADA3-FD6AB599D375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9FDBE82-E553-4504-A347-9C181B9B59FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A600F40-3E4D-4976-B82B-D7005CC4605C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3696554E-AC8B-4028-81EA-A5BF9D7026EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE772B0B-9B5A-4768-B3F5-D6195ACE90AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "358E054A-2298-486B-88A4-44AB6864904E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_data_transport_option:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC742EE-03C6-4BDC-AEF8-03609D6498E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_jasmine:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFCD53C-9536-4A62-B5A5-DAA8FFCA611F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_management_portal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435570CC-A9E2-4B7C-BC6A-7AC45223ECC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_management_portal:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562569CE-C9AD-4D8C-ACCE-CAC9FF0EF8CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9C8A1C-0A55-4CA5-9BB6-2D03EFCFE699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFA39E3-A614-4A64-B29C-86D6F12F1557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_nsm_wireless_network_management_option:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB83D7E3-D798-45C5-BCC5-805B56D87CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_performance_management:2.4:sp3:openvms:*:*:*:*:*",
            "matchCriteriaId" : "B46E7F96-99DF-42BA-B6D9-B625AB973850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C2C33D-8403-4C75-8A52-713393FE408F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D293FB82-D21B-4BDD-A511-B994B557032A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90FF8920-8E4E-4369-96A8-954ECC05D0A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173467CF-3871-49BA-B54A-27BA492F8433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6AE0157-B6C9-4112-A3A6-5B040B19D4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_level_management:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D03F79-22E5-49A3-AB05-14F8EDB04D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAB1CA3-B423-4656-9532-29D02917C2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7352EEC1-8FA1-431F-9A92-B0AA8B17F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "52933E5F-06B7-45E2-B8E5-9B25351E67A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5FFBD6-2820-43D6-B945-FBFD6F6CFD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_software_delivery:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17048CC-F3C9-47BC-87DE-4D431BC7E1C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2799F9BF-4C19-4268-AE41-03E9D1994CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA4FB17-296A-4D26-9491-B7C151C45235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5704D-3337-4351-872B-AF987DC39BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_tng:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EFF2305-24CF-48F7-841E-63400CF25B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_admin:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FE3512-D29B-4392-8DF8-B3B3A1F521BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_admin:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9798A112-CE4D-435D-B80D-E4A4C7209A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_admin:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541D4956-3E82-4FA7-B18A-37D383D987A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_admin:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E836C2F1-2E93-4D4B-B0C3-3264762B26BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_asset_management:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "18F48B87-E943-4915-83D2-5F08BD6D1825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B42FDB59-00C8-4D6A-B6F0-C880E9C3F1D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A07DB6F-666C-4D87-9F7A-B17BE7454E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:3.5:*:websphere_mq:*:*:*:*:*",
            "matchCriteriaId" : "0FE2A55B-A89D-470E-8E9E-4B1B0FB1C4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:4.0:*:lotus_notes_domino:*:*:*:*:*",
            "matchCriteriaId" : "DA6C17EE-38A9-4E8E-92E3-14D57E4BB546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:4.0:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "A4F96A84-A69D-4017-A27D-09C7B95BA696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:4.1:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "7FAD2FF7-1878-49F7-8F44-4E7DC4471F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:5.0:*:web_servers:*:*:*:*:*",
            "matchCriteriaId" : "62B98B62-F00C-4F3E-B891-18AD04A37725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:5.0.1:*:web_servers:*:*:*:*:*",
            "matchCriteriaId" : "15726391-DF79-4EDE-AE6E-9D7B7E0EB654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_software_delivery:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "16C98B61-52A4-4A67-BABA-B83AF6C7851C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_tng:2.2:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "24BF5923-42E7-403E-81F0-D3136C58ECE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16513",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18917",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14623",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1482",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via \"..\" sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:livecall:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56296DA-A1F6-44A6-9394-FCD32ABC16C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:virobot_advanced_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A95949-84D0-461D-B864-434AA68DA501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:virobot_expert:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BE675C-5081-406A-8802-333326E8F78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:virobot_linux_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDAD7E7-135D-4EE2-8C5F-641D6647F749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15846",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-24/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014740",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.globalhauri.com/html/download/down_unixpatch.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-24/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.globalhauri.com/html/download/down_unixpatch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2023-11-07T01:57:40.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2041.  Reason: This candidate is a duplicate of CVE-2005-2041.  Notes: All CVE users should reference CVE-2005-2041 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7022ABA4-523E-4416-A601-9E3AAB3A0316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830356D2-5389-4960-8E4A-A6E76C4174C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBE9AD6-8F09-4D59-8308-149400E124ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CA80C3-E527-4389-A011-7AE16C93A272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673F66B0-3C25-4128-9916-B7BCC58B72F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDEA8EE-ECF5-4AA5-919B-0F4FCBA76DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0366C9C6-1113-4DB7-9B9C-F322090518BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD0BDE5-DDED-4558-B8AE-076C1C6FAF59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEB6CF7-17DE-4375-B865-99ACAA94862A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048D63F2-FF53-46A5-8C7A-B303493DDF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0A70A0-0A7C-4049-836F-54BEC6ABEA0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC338AB-CA3E-4EB1-81B4-7611EFC5EB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F45928F-C0C3-4AE4-B5A7-00B0BC810D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC27691-32AB-4F7C-9578-B1B8505B1D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96446EA9-55A7-42AA-95D6-7990D2C5591F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA5CFC2-87D3-4791-8ADE-D9E6AEA91675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA5EB26-218E-4D51-8A04-63521EBF19FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB74ADC3-C840-46DC-AAB2-2C559C167056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286A3AB7-2448-4658-A73B-8FF6DB3452EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946C4E11-C3D5-4148-A8A0-3CBD599C4C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8A8D40-5A2A-440F-878C-F2E7827ACDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C182A4F0-6EC9-40AD-8055-5336E81F3D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D03522F-2ABF-4FB1-AAE9-22245E4104EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288B484B-8686-40E6-A2A0-1936A06AB46E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893D901C-B093-4754-8CE0-F264BD595FDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0494E909-7125-40EC-B522-012A515C8802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66C89EE-3A5B-4A49-AD8B-C0A3842262C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD5DB74-EAB5-40EF-88EC-E779872DCFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9DD54B-6138-4FB3-950A-75944A356645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E63031-6E13-43A8-8668-91DF1524F2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C0B81E-C9C2-429C-9864-392904EA84F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B788580A-7ABD-4535-97C2-61092F5C77FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB36613C-0D0A-4695-A392-DFC0A9459D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D21B37A6-354A-47CA-8849-DA14C34C5C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5645DEA-2C2D-4748-915B-2B99D7C9DDBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1A57CA-66C4-425F-AED2-739D2C1D40B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "775FDB7D-C397-4E92-B71E-439BF37BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D25E827-906D-4911-BF53-67DCB8FBD0AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCED5C6-E00A-4C43-B731-A9C3A2BDC4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lm_sensors:lm_sensors:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE53B8-C121-4B83-B506-2410EFCAA986"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secure.netroedge.com/~lm78/cvs/lm_sensors2/CHANGES",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-825.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/172-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secure.netroedge.com/~lm78/cvs/lm_sensors2/CHANGES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-825.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/172-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the (1) x or (2) y parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B976F-2F26-497C-92A8-2F2FD4C41A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5C5A8F-E04C-413F-A9A6-62EFC221A74F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014746",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to inject arbitrary web script or HTML via the (1) c or (2) m parameters to index.php or (3) w parameter to journal.php.  NOTE: this issue has been disputed by the vendor, who says \"None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B013ADC-809F-4DFE-913B-FE3B8974404C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112456235729717&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014747",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.neocrome.net",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14619",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112456235729717&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.neocrome.net",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to execute arbitrary SQL commands via the (1) s or (2) m parameter to forums.php, (3) o, (4) w, (5) s, or (6) p parameter to list.php, (7) m parameter to journal.php, (8) x or (9) n parameter to forums.php, or (10) w parameter to links.php.  NOTE: this issue has been disputed by the vendor, who says \"None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B013ADC-809F-4DFE-913B-FE3B8974404C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112456235729717&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014747",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.neocrome.net",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14618",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112456235729717&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.neocrome.net",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3479C85-5B30-43FE-9492-5438D27B8DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E830E59A-57BE-4DE7-9AB4-E8E24359CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FCDC744-DAF3-449C-B3AE-BA420A636CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDBEDCE-787D-4523-A209-0CCFD6E41064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BBC5F9-1E40-47FF-9371-FD0C7A9458D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7292845-96FB-48BF-935F-9BD7772AFD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB182E1B-9E32-46CA-9B49-5029107955D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD2CA54-6534-4A4F-9667-8A594B7E43CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF90F7F-070C-4ABE-8F94-7192F18B1A9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=20933.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14625",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=20933.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ACNews stores the database in a file under the web document root with a db.inc extension and insufficient access control, which allows remote attackers to obtain sensitive information such as the full pathname of the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acnews:acnews:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D7A2B0A-C33F-49ED-83CD-A3D44AFA2367"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014749",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost URI, which makes it appear as if the request is coming from localhost."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C954A7-FF84-4DEB-8728-5B207F374ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "413C07EA-139F-4B7D-A58B-835BD2591FA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ingehenriksen.blogspot.com/2005/08/remote-iis-5x-and-iis-60-server-name.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112474727903399&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16548",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ingehenriksen.blogspot.com/2005/08/remote-iis-5x-and-iis-60-server-name.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112474727903399&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sysinternals:process_explorer:9.23.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473AB10D-C3B5-4817-A19D-FB13363B00B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014742",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14616",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.sysinternals.com/Forum/forum_posts.asp?TID=957&PN=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.sysinternals.com/Forum/forum_posts.asp?TID=957&PN=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via crafted URLs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C72232-7D9A-43BF-9018-6D51EA35BF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAB0CC7-DB7F-401B-8E9C-E3A33BD18F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0A3F3F-F960-4418-B520-3AECCA0DDB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA2A8E6-1BEF-430B-85FD-AFFA44B891CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "BF066EF7-82D6-42A4-97AC-C3A71A042152"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/137",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System 5.0(1) and 5.0(2) allows local users with OPERATOR or VIEWER privileges to gain additional privileges via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36B2596-ECC6-47B6-9BB6-95F903281EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:5.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CF995-082E-47CD-8673-F8F9832DA6E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16545",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050824-ips.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050824-ips.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aspell_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the dictionary parameter (aka the lang variable)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dtlink:areaedit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.2",
            "matchCriteriaId" : "F934580F-6A10-4260-B598-FF8429598300"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16511",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.formvista.com/forum.html?COMP=forum&cmd=view_thread&%28fvs%29cs_forums_threads_ref=47",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.formvista.com/otherprojects/areaedit",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.formvista.com/forum.html?COMP=forum&cmd=view_thread&%28fvs%29cs_forums_threads_ref=47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.formvista.com/otherprojects/areaedit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to login/member.php or (2) im_receiver parameter to login/imcenter.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C962F520-4E73-459D-8C5C-9E85426D9B57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112474427221031&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16531/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14629",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112474427221031&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16531/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-23T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter to a dig query."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:virtech:netquery:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0DB4A7-FB24-41D0-A737-E2CBE6C9FA78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014750",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:version_cue:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD4E1CD-8226-4308-8B6F-65B7AFB1CE32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:version_cue:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABC546A-EE59-47E3-A0F0-9210050121D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16541",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/327129.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=297&type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/327129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=297&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, allows local users to load arbitrary libraries and execute arbitrary code via the -lib command line argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:version_cue:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD4E1CD-8226-4308-8B6F-65B7AFB1CE32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:version_cue:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABC546A-EE59-47E3-A0F0-9210050121D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16541",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/327129.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=296&type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/327129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=296&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN before 2.0.1, when running with \"verb 0\" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to the server and causes the error to be processed by the wrong client, which allows remote attackers to cause a denial of service (client disconnection) via a large number of failed authentication attempts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6457C946-123B-4B85-9253-D284A7A16A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0ECEAF-401A-434E-9B0A-1A234BAEFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E751FA0E-0DF4-4F81-912A-1A132640246D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F61AC6-EDF6-4818-BA51-3EAA299680B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32984D8-9631-407B-834E-303B9405A425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB44A872-3FE2-47E9-BA84-B6E1015E1973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F020080D-7181-400D-988E-6844D1653464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D08038-9815-4222-9CD3-1211FE5954A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDEBEDA-437A-4942-8A71-7B25DD558BCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB8A78E-DAB9-4A72-BC54-58230E1E9B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D74ED1-34C5-4F95-A941-83664AFFF2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0747C1A9-C404-4FBD-AA8F-9DBB70FEB4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3B1AD4-9EA0-4D86-90E1-3366FBC5629D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E483BD0-CAB9-4DA0-AAA4-A934B8318FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F04FAB1-A558-4F93-9FBF-043DE259A813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A189A733-3130-41B4-94DD-E99E294D0FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEE5695-DC49-445D-864A-4739E16DF762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBF146F-2CFA-4F14-BFBC-E01B58F9F72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D263CA-8B2C-4B66-8990-6224BAF52A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C9FCE-AD76-4E32-8FEC-EEFA0662BC04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7519FA-831A-41D7-AFC3-B9457E6DFB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB79AFD-493F-41F1-9EC1-8BCC0D28A914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C8F091B-194A-4FC5-87F4-A76CB490F3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11716B49-A920-4A1B-BEA5-4105213B9731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756A7AF5-E502-4EDC-9693-4041C993E3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9885BC3E-1854-4561-9906-FFAEECA5B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B7759F-F228-436D-BC86-7317B0109C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB9BD19-1BF9-42D0-9E43-7D95EE010347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0A6E23-6456-4305-A7DA-8CA1D506D4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D985B9F0-5B4F-4120-8ECF-506C5F6179FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7E6096-58BF-47F1-982B-27A9ED735AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62362541-FE20-47ED-9E03-94216A3D43CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BD7019-BBA5-4D08-85C8-571D2EC03FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1D56A4-A03C-445C-993B-1AA12024D4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F563B1FD-FC1F-4304-8141-A1188A190835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4269ED1A-3031-4572-B134-62C6E533D176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140999A7-E9BB-4459-B3F8-48DF8F5DFE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD75B0-24D0-40BA-A4FB-925BD5414298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED8F3C5-8E43-4B07-8224-38BF4774F4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC88614-E782-447B-B854-955498FAAA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C1B8EE-3C12-452F-986E-6FD8A230685A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC6851-F63E-47D7-BDEF-3BFF39E94D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685F5555-793D-4FAA-8CF4-578490CFAC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E688CF0C-134B-49E2-AEB3-45ECACB8B5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D385327-D1FF-4A22-A0C0-0C5AA53590C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51329755-1DBF-40E1-960C-E924CDC4B22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE65AC5-C218-456F-86FB-1C8BEC3C4598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1412133F-3B44-43B6-A4FF-FF80E7B564E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55EE355-28A1-4955-9ADD-A8E02376C9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E942C13E-6B54-465F-8026-ED49BD7EA2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AADF30CF-AD36-45EB-AF50-EB0533B20B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD078F82-361C-4B38-86E8-85E129F41A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9831C92-7717-4650-8689-3C41B773C5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3521E7-572E-4ADD-AAF6-F1AE505B4BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73290B2-384B-4B0F-8763-EF4D5D7C39FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4728B3CD-5B54-4B0B-8967-DE7D9E1474F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F353B495-D69A-4831-9E5B-F15F8F749C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16647409-3ADD-4E86-A053-4A7B8365700E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5CA9F6-68FE-4412-8CD5-F85E970249F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A74354-1EAB-4A4F-A79C-C04E9BCDF594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A016A3-CAA9-4FCB-B909-F4163CE1E19E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A53B7C-8E9D-4DD6-8B00-628F7796A365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5AADA5-05DA-4660-9636-A3B737916A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2778FEDE-063B-4454-9FA7-F526334CF9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989D471D-3F81-4018-A124-7FBEB3F4AB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EA97AE-B2DD-40F8-81E1-467E895CE736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C82A6A-4548-4508-B337-1061E57D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A972BC-6956-4195-933C-F3694BFEFB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF5187-C008-4927-B5CB-A491768E9822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A39ECE-7C8D-4BB8-A408-08EA0879F03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C67474C-3274-4F62-AF98-6953F9744522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D799CAF5-BFC3-4A80-8AE2-D292B7F9D9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D3B905-FCD7-4136-A94C-76A95994CD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE172A1-D9A5-4FF7-B316-4E0BD639B35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_20_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service (client disconnection) via a large number of packets that can not be decrypted."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6457C946-123B-4B85-9253-D284A7A16A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0ECEAF-401A-434E-9B0A-1A234BAEFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E751FA0E-0DF4-4F81-912A-1A132640246D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F61AC6-EDF6-4818-BA51-3EAA299680B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32984D8-9631-407B-834E-303B9405A425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB44A872-3FE2-47E9-BA84-B6E1015E1973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F020080D-7181-400D-988E-6844D1653464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D08038-9815-4222-9CD3-1211FE5954A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDEBEDA-437A-4942-8A71-7B25DD558BCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB8A78E-DAB9-4A72-BC54-58230E1E9B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D74ED1-34C5-4F95-A941-83664AFFF2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0747C1A9-C404-4FBD-AA8F-9DBB70FEB4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3B1AD4-9EA0-4D86-90E1-3366FBC5629D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E483BD0-CAB9-4DA0-AAA4-A934B8318FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F04FAB1-A558-4F93-9FBF-043DE259A813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A189A733-3130-41B4-94DD-E99E294D0FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEE5695-DC49-445D-864A-4739E16DF762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBF146F-2CFA-4F14-BFBC-E01B58F9F72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D263CA-8B2C-4B66-8990-6224BAF52A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C9FCE-AD76-4E32-8FEC-EEFA0662BC04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7519FA-831A-41D7-AFC3-B9457E6DFB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB79AFD-493F-41F1-9EC1-8BCC0D28A914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C8F091B-194A-4FC5-87F4-A76CB490F3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11716B49-A920-4A1B-BEA5-4105213B9731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756A7AF5-E502-4EDC-9693-4041C993E3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9885BC3E-1854-4561-9906-FFAEECA5B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B7759F-F228-436D-BC86-7317B0109C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB9BD19-1BF9-42D0-9E43-7D95EE010347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0A6E23-6456-4305-A7DA-8CA1D506D4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D985B9F0-5B4F-4120-8ECF-506C5F6179FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7E6096-58BF-47F1-982B-27A9ED735AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62362541-FE20-47ED-9E03-94216A3D43CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BD7019-BBA5-4D08-85C8-571D2EC03FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1D56A4-A03C-445C-993B-1AA12024D4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F563B1FD-FC1F-4304-8141-A1188A190835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4269ED1A-3031-4572-B134-62C6E533D176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140999A7-E9BB-4459-B3F8-48DF8F5DFE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD75B0-24D0-40BA-A4FB-925BD5414298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED8F3C5-8E43-4B07-8224-38BF4774F4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC88614-E782-447B-B854-955498FAAA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C1B8EE-3C12-452F-986E-6FD8A230685A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC6851-F63E-47D7-BDEF-3BFF39E94D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685F5555-793D-4FAA-8CF4-578490CFAC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E688CF0C-134B-49E2-AEB3-45ECACB8B5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D385327-D1FF-4A22-A0C0-0C5AA53590C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51329755-1DBF-40E1-960C-E924CDC4B22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE65AC5-C218-456F-86FB-1C8BEC3C4598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1412133F-3B44-43B6-A4FF-FF80E7B564E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55EE355-28A1-4955-9ADD-A8E02376C9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E942C13E-6B54-465F-8026-ED49BD7EA2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AADF30CF-AD36-45EB-AF50-EB0533B20B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD078F82-361C-4B38-86E8-85E129F41A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9831C92-7717-4650-8689-3C41B773C5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3521E7-572E-4ADD-AAF6-F1AE505B4BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73290B2-384B-4B0F-8763-EF4D5D7C39FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4728B3CD-5B54-4B0B-8967-DE7D9E1474F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F353B495-D69A-4831-9E5B-F15F8F749C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16647409-3ADD-4E86-A053-4A7B8365700E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5CA9F6-68FE-4412-8CD5-F85E970249F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A74354-1EAB-4A4F-A79C-C04E9BCDF594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A016A3-CAA9-4FCB-B909-F4163CE1E19E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A53B7C-8E9D-4DD6-8B00-628F7796A365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5AADA5-05DA-4660-9636-A3B737916A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2778FEDE-063B-4454-9FA7-F526334CF9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989D471D-3F81-4018-A124-7FBEB3F4AB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EA97AE-B2DD-40F8-81E1-467E895CE736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C82A6A-4548-4508-B337-1061E57D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A972BC-6956-4195-933C-F3694BFEFB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF5187-C008-4927-B5CB-A491768E9822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A39ECE-7C8D-4BB8-A408-08EA0879F03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C67474C-3274-4F62-AF98-6953F9744522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D799CAF5-BFC3-4A80-8AE2-D292B7F9D9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D3B905-FCD7-4136-A94C-76A95994CD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE172A1-D9A5-4FF7-B316-4E0BD639B35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN before 2.0.1, when running in \"dev tap\" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6457C946-123B-4B85-9253-D284A7A16A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0ECEAF-401A-434E-9B0A-1A234BAEFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E751FA0E-0DF4-4F81-912A-1A132640246D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F61AC6-EDF6-4818-BA51-3EAA299680B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32984D8-9631-407B-834E-303B9405A425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB44A872-3FE2-47E9-BA84-B6E1015E1973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F020080D-7181-400D-988E-6844D1653464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D08038-9815-4222-9CD3-1211FE5954A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDEBEDA-437A-4942-8A71-7B25DD558BCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB8A78E-DAB9-4A72-BC54-58230E1E9B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D74ED1-34C5-4F95-A941-83664AFFF2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0747C1A9-C404-4FBD-AA8F-9DBB70FEB4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3B1AD4-9EA0-4D86-90E1-3366FBC5629D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E483BD0-CAB9-4DA0-AAA4-A934B8318FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F04FAB1-A558-4F93-9FBF-043DE259A813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A189A733-3130-41B4-94DD-E99E294D0FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEE5695-DC49-445D-864A-4739E16DF762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBF146F-2CFA-4F14-BFBC-E01B58F9F72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D263CA-8B2C-4B66-8990-6224BAF52A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C9FCE-AD76-4E32-8FEC-EEFA0662BC04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7519FA-831A-41D7-AFC3-B9457E6DFB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB79AFD-493F-41F1-9EC1-8BCC0D28A914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C8F091B-194A-4FC5-87F4-A76CB490F3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11716B49-A920-4A1B-BEA5-4105213B9731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756A7AF5-E502-4EDC-9693-4041C993E3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9885BC3E-1854-4561-9906-FFAEECA5B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B7759F-F228-436D-BC86-7317B0109C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB9BD19-1BF9-42D0-9E43-7D95EE010347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0A6E23-6456-4305-A7DA-8CA1D506D4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D985B9F0-5B4F-4120-8ECF-506C5F6179FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7E6096-58BF-47F1-982B-27A9ED735AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62362541-FE20-47ED-9E03-94216A3D43CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BD7019-BBA5-4D08-85C8-571D2EC03FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1D56A4-A03C-445C-993B-1AA12024D4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F563B1FD-FC1F-4304-8141-A1188A190835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4269ED1A-3031-4572-B134-62C6E533D176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140999A7-E9BB-4459-B3F8-48DF8F5DFE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD75B0-24D0-40BA-A4FB-925BD5414298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED8F3C5-8E43-4B07-8224-38BF4774F4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC88614-E782-447B-B854-955498FAAA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C1B8EE-3C12-452F-986E-6FD8A230685A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC6851-F63E-47D7-BDEF-3BFF39E94D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685F5555-793D-4FAA-8CF4-578490CFAC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E688CF0C-134B-49E2-AEB3-45ECACB8B5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D385327-D1FF-4A22-A0C0-0C5AA53590C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51329755-1DBF-40E1-960C-E924CDC4B22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE65AC5-C218-456F-86FB-1C8BEC3C4598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1412133F-3B44-43B6-A4FF-FF80E7B564E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55EE355-28A1-4955-9ADD-A8E02376C9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E942C13E-6B54-465F-8026-ED49BD7EA2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AADF30CF-AD36-45EB-AF50-EB0533B20B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD078F82-361C-4B38-86E8-85E129F41A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9831C92-7717-4650-8689-3C41B773C5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3521E7-572E-4ADD-AAF6-F1AE505B4BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73290B2-384B-4B0F-8763-EF4D5D7C39FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4728B3CD-5B54-4B0B-8967-DE7D9E1474F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F353B495-D69A-4831-9E5B-F15F8F749C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16647409-3ADD-4E86-A053-4A7B8365700E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5CA9F6-68FE-4412-8CD5-F85E970249F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A74354-1EAB-4A4F-A79C-C04E9BCDF594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A016A3-CAA9-4FCB-B909-F4163CE1E19E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A53B7C-8E9D-4DD6-8B00-628F7796A365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5AADA5-05DA-4660-9636-A3B737916A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2778FEDE-063B-4454-9FA7-F526334CF9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989D471D-3F81-4018-A124-7FBEB3F4AB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EA97AE-B2DD-40F8-81E1-467E895CE736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C82A6A-4548-4508-B337-1061E57D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A972BC-6956-4195-933C-F3694BFEFB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF5187-C008-4927-B5CB-A491768E9822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A39ECE-7C8D-4BB8-A408-08EA0879F03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C67474C-3274-4F62-AF98-6953F9744522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D799CAF5-BFC3-4A80-8AE2-D292B7F9D9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D3B905-FCD7-4136-A94C-76A95994CD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE172A1-D9A5-4FF7-B316-4E0BD639B35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6457C946-123B-4B85-9253-D284A7A16A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0ECEAF-401A-434E-9B0A-1A234BAEFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E751FA0E-0DF4-4F81-912A-1A132640246D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F61AC6-EDF6-4818-BA51-3EAA299680B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32984D8-9631-407B-834E-303B9405A425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB44A872-3FE2-47E9-BA84-B6E1015E1973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F020080D-7181-400D-988E-6844D1653464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D08038-9815-4222-9CD3-1211FE5954A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDEBEDA-437A-4942-8A71-7B25DD558BCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB8A78E-DAB9-4A72-BC54-58230E1E9B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D74ED1-34C5-4F95-A941-83664AFFF2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0747C1A9-C404-4FBD-AA8F-9DBB70FEB4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3B1AD4-9EA0-4D86-90E1-3366FBC5629D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E483BD0-CAB9-4DA0-AAA4-A934B8318FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F04FAB1-A558-4F93-9FBF-043DE259A813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A189A733-3130-41B4-94DD-E99E294D0FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEE5695-DC49-445D-864A-4739E16DF762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBF146F-2CFA-4F14-BFBC-E01B58F9F72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D263CA-8B2C-4B66-8990-6224BAF52A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C9FCE-AD76-4E32-8FEC-EEFA0662BC04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7519FA-831A-41D7-AFC3-B9457E6DFB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB79AFD-493F-41F1-9EC1-8BCC0D28A914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C8F091B-194A-4FC5-87F4-A76CB490F3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11716B49-A920-4A1B-BEA5-4105213B9731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756A7AF5-E502-4EDC-9693-4041C993E3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9885BC3E-1854-4561-9906-FFAEECA5B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B7759F-F228-436D-BC86-7317B0109C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB9BD19-1BF9-42D0-9E43-7D95EE010347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0A6E23-6456-4305-A7DA-8CA1D506D4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D985B9F0-5B4F-4120-8ECF-506C5F6179FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7E6096-58BF-47F1-982B-27A9ED735AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62362541-FE20-47ED-9E03-94216A3D43CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BD7019-BBA5-4D08-85C8-571D2EC03FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1D56A4-A03C-445C-993B-1AA12024D4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F563B1FD-FC1F-4304-8141-A1188A190835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4269ED1A-3031-4572-B134-62C6E533D176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140999A7-E9BB-4459-B3F8-48DF8F5DFE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD75B0-24D0-40BA-A4FB-925BD5414298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED8F3C5-8E43-4B07-8224-38BF4774F4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC88614-E782-447B-B854-955498FAAA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C1B8EE-3C12-452F-986E-6FD8A230685A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC6851-F63E-47D7-BDEF-3BFF39E94D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685F5555-793D-4FAA-8CF4-578490CFAC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E688CF0C-134B-49E2-AEB3-45ECACB8B5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D385327-D1FF-4A22-A0C0-0C5AA53590C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51329755-1DBF-40E1-960C-E924CDC4B22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE65AC5-C218-456F-86FB-1C8BEC3C4598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1412133F-3B44-43B6-A4FF-FF80E7B564E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55EE355-28A1-4955-9ADD-A8E02376C9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E942C13E-6B54-465F-8026-ED49BD7EA2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AADF30CF-AD36-45EB-AF50-EB0533B20B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD078F82-361C-4B38-86E8-85E129F41A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9831C92-7717-4650-8689-3C41B773C5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3521E7-572E-4ADD-AAF6-F1AE505B4BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73290B2-384B-4B0F-8763-EF4D5D7C39FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4728B3CD-5B54-4B0B-8967-DE7D9E1474F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F353B495-D69A-4831-9E5B-F15F8F749C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16647409-3ADD-4E86-A053-4A7B8365700E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5CA9F6-68FE-4412-8CD5-F85E970249F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A74354-1EAB-4A4F-A79C-C04E9BCDF594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A016A3-CAA9-4FCB-B909-F4163CE1E19E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A53B7C-8E9D-4DD6-8B00-628F7796A365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5AADA5-05DA-4660-9636-A3B737916A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2778FEDE-063B-4454-9FA7-F526334CF9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989D471D-3F81-4018-A124-7FBEB3F4AB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EA97AE-B2DD-40F8-81E1-467E895CE736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C82A6A-4548-4508-B337-1061E57D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A972BC-6956-4195-933C-F3694BFEFB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF5187-C008-4927-B5CB-A491768E9822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A39ECE-7C8D-4BB8-A408-08EA0879F03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C67474C-3274-4F62-AF98-6953F9744522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D799CAF5-BFC3-4A80-8AE2-D292B7F9D9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D3B905-FCD7-4136-A94C-76A95994CD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE172A1-D9A5-4FF7-B316-4E0BD639B35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2556",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "core/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows remote attackers to connect to internal databases by modifying the g_db_type variable and monitoring the speed of responses, as identified by bug#0005956."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112786017426276&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-778",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-16.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14604",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112786017426276&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then editing the desired file to contain the PHP code, as demonstrated using header.php in the fichier parameter.  NOTE: it is possible that this vulnerability stems from PhpMyExplorer, which is a separate package."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:savewebportal:savewebportal:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC3F35F-30F3-4178-AADA-6D2DBF653756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/save_yourself_from_savewebportal34.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/save_yourself_from_savewebportal34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via \"..\" sequences in the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:savewebportal:savewebportal:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC3F35F-30F3-4178-AADA-6D2DBF653756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/save_yourself_from_savewebportal34.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/save_yourself_from_savewebportal34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:savewebportal:savewebportal:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC3F35F-30F3-4178-AADA-6D2DBF653756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/save_yourself_from_savewebportal34.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/save_yourself_from_savewebportal34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a large number of parameters to (1) footer.php, (2) header.php, (3) menu_dx.php, or (4) menu_sx.php, or Javascript code in the (5) HTTP_REFERER (referer) or (6) HTTP_USER_AGENT (user agent) fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:savewebportal:savewebportal:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC3F35F-30F3-4178-AADA-6D2DBF653756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/save_yourself_from_savewebportal34.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16522",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/save_yourself_from_savewebportal34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary web script or HTML via (1) the moderate parameter to the Comments module or (2) htmltext parameter to html/user.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.76_rc4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A09B4-83C0-47DE-A199-F2A490527263"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/408818",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14635",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arbitrary SQL commands via the show parameter to dl-viewdownload.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.76_rc4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A09B4-83C0-47DE-A199-F2A490527263"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/408818",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14636",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTR_OVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA5EE4F-F255-456D-9C23-EA00F77838B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52D52A0-BA4A-424F-8A13-566E55F637B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DC85FB-F2DE-493A-B134-ED386CCEB253"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16514",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00094-08192005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00094-08192005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-24T04:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addquery and (2) subquery parameters to the newbb plus module, the forum parameter to (3) newtopic.php, (4) edit.php, or (5) reply.php in the newbb plus module, or (6) the msg_id parameter to print.php in the messages module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA5EE4F-F255-456D-9C23-EA00F77838B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52D52A0-BA4A-424F-8A13-566E55F637B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DC85FB-F2DE-493A-B134-ED386CCEB253"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16514",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00094-08192005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00094-08192005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2693",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-08-26T15:50:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvs:cvs:1.12.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "172E2DD8-4493-486E-AE72-A19ED2BE5EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:20.cvsbug.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16765",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014857",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-802",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-806",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-756.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1667",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166366",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10835",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:20.cvsbug.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-756.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-26T15:50:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows remote attackers to execute arbitrary code via a temporary (.tmp) file that contains an entry with a long file name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winace:winace:2.6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65352B0F-D752-4814-92E9-CB0769E66EAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112447630109392&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112447630109392&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-26T15:50:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors (IDSMC) 2.0 and 2.1, and Monitoring Center for Security (Security Monitor or Secmon) 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco Intrusion Detection Sensor (IDS) or Intrusion Prevention System (IPS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_management_center_for_ids_sensors:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EB51B4-A164-42AB-A22F-7C8A1B7120DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_management_center_for_ids_sensors:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8AA4E05-5723-4347-87D3-67F1CA9A3599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_monitoring_center_for_security:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF0E187-739B-4BF9-AEFD-1111A0B6C193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_monitoring_center_for_security:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8CA331E-7234-476B-AB52-99DD917CA6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_monitoring_center_for_security:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48751A6-FE1A-483F-A38E-2446A42B8789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16544/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050824-idsmc.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16544/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050824-idsmc.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-26T15:50:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive information via the (1) password digest field in the Administration tab of a Lotus Notes client, (2) \"PasswordDigest\" and \"HTTPPassword\" fields in the document properties in the NAB, or (3) a direct query to the Domino LDAP server, a different vulnerability than CVE-2005-2428."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99CADAC9-376A-430B-B228-84F0FA401154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112456040418543&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.venera.com/downloads/Lotus_password_disclosures.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112456040418543&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.venera.com/downloads/Lotus_password_disclosures.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-26T15:50:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter.  NOTE: this issue might overlap CVE-2005-0282."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2F2E0F-94E6-4D63-903F-0090E9D90BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC63F97-643C-43B9-83E5-E43928CB1CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43876FE9-F002-4524-B6C2-5DE4992E0A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE10B8B4-167D-430D-9C7D-6CF934F17D68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112448791006470&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13722/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112448791006470&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13722/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-26T15:50:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in browse.php in Nephp Publisher Enterprise 3.04 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded keywords parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nelogic_technologies:nephp_publisher_enterprise:3.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF565E4-F441-4208-99A7-6FBAFC220221"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112472773629251&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112472773629251&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-26T15:50:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in admin/admin.php in PHPKit 1.6.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a .php file to the content/images/ directory using images.php.  NOTE: if a PHPKit administrator must already have access to the end system to install or modify configuration of the product, then this issue might not cross privilege boundaries, and should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C962F520-4E73-459D-8C5C-9E85426D9B57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112474427221031&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112474427221031&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-29T20:14:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The event_pin_code_request function in the btsrv daemon (btsrv.c) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a Bluetooth device name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53EDC5B-8B67-4F93-90C8-17721F02A1CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:affix:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15F9E16-A1B4-4B5B-975E-E9969C41B5E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://affix.sourceforge.net/patch_btsrv_affix_2_1_2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://affix.sourceforge.net/patch_btsrv_affix_3_2_0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511370326063&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16574/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0826a%5D.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://affix.sourceforge.net/patch_btsrv_affix_2_1_2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://affix.sourceforge.net/patch_btsrv_affix_3_2_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511370326063&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16574/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-0826a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2717",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-29T20:14:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via send_reminders.php or other scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4B3D85-86AC-4346-9073-BB2CD26A8C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8261B9D7-505A-48BB-9987-ED0B7F21630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0045C00A-1F7E-4533-AA56-6175AA916ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA6D93A-2064-48EB-B0EC-B26F7A9C1591"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16528",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16675",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1014849",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=350336",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-799",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14651",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1513",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22136",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=350336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-29T20:14:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format (strf) chunk."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_pre7",
            "matchCriteriaId" : "AF75D01A-06AA-4947-9DCC-E1A23532B7E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=112484733122809&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sven-tantau.de/public_files/mplayer/mplayer_20050824.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=103555",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112484733122809&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sven-tantau.de/public_files/mplayer/mplayer_20050824.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=103555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1855",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sukria:backup_manager:0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4458EA73-7FD2-437F-B66D-67328703D30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sukria:backup_manager:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAF893C-F927-4850-A154-9EA0B5C8D542"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15615",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014124",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-787",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13892",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sukria.net/packages/backup-manager/",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.usenetlinux.com/archive/index.php/t-411815.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/15615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sukria.net/packages/backup-manager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.usenetlinux.com/archive/index.php/t-411815.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1856",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sukria:backup_manager:0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4458EA73-7FD2-437F-B66D-67328703D30D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sukria:backup_manager:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAF893C-F927-4850-A154-9EA0B5C8D542"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-787",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the \"Scan for viruses\" option, which launches a help window with raised privileges, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2002-1540."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.1.1000:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "018D1F3B-BAFC-461E-B833-9E0F98A6533D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=298&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.08.24.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=298&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.08.24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ventrilo 2.1.2 through 2.3.0 allows remote attackers to cause a denial of service (application crash) via a status packet that contains less data than specified in the packet header sent to UDP port 3784."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flagship_industries:ventrilo:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD449C35-6329-4B4B-82A1-A2DEBDEBB069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flagship_industries:ventrilo:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661639F3-8875-41DB-8BCF-9569681632E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flagship_industries:ventrilo:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44347E50-1B1E-43FA-8B72-3C942C9BBE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flagship_industries:ventrilo:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BE24F8-B859-41CA-9EF3-2358A33F6491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flagship_industries:ventrilo:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A1EF7-0462-4EDB-9D78-6BDA5D978F9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036407.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112483407515020&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16551/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14644",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036407.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112483407515020&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16551/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall, when compressed file scanning is enabled, allows remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:livecall:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56296DA-A1F6-44A6-9394-FCD32ABC16C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:virobot_advanced_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A95949-84D0-461D-B864-434AA68DA501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:virobot_expert:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BE675C-5081-406A-8802-333326E8F78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:virobot_linux_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDAD7E7-135D-4EE2-8C5F-641D6647F749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112490854126619&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16488/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-33/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14647",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112490854126619&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16488/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-33/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote attackers to inject arbitrary web script or HTML via the Referer field in the HTTP header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foojan:php_weblog:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4D6F5C-5D59-49FB-ABA6-1F30E6D22B3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112491140712884&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16565/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14658",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112491140712884&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16565/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foojan:php_weblog:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4D6F5C-5D59-49FB-ABA6-1F30E6D22B3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112491140712884&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112491140712884&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EB588E-FC2B-4E10-86F5-33C2758BEED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112490781927680&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16566/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-project.org/projects/board/showthread.php?t=947",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14654",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112490781927680&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16566/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-project.org/projects/board/showthread.php?t=947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display feature.  NOTE: the severity of this issue has been disputed by the developer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F35F0F1-B742-4782-A699-FA90A36D0B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DCA47-E367-42A3-BDFE-DA7CFC38663F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "329602D7-8D1B-4A1A-B321-84D663F7B0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EFBDF5-A875-41D9-B5D7-8DF6E699D879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242D2FE6-501F-41A0-BC73-5DFD4BE57C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2436AAC-E418-4ABB-8A1E-2C0FBFAA284D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949C40-048C-4B4A-AB7C-E40DF6DE2E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:4.0.4_2004-05-24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC75CB96-B75D-4A5F-AACC-4106CB5ADE58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D128BAA3-AD52-4140-A416-ABB84309BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978088B8-1624-4249-B0A4-0AA55C83B537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8B974B-1EA8-452C-809D-8B9EEE4D265E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE65F80-18E1-44AD-A8B8-F38FBCE56F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68CF566-EE75-4D3D-A5FF-38A44D4E64EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A152202-423E-4C55-B5C8-0904C1B5BA95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112490698219531&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=courier-users&m=112488135424849&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16539/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-35/advisory/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-201-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112490698219531&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=courier-users&m=112488135424849&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16539/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-35/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-201-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37EB0A5-8A16-42A1-B229-BB223AAF9AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F795DA5-84CB-4772-BC54-91B1DB760BEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112490406301882&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16569/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rfdslabs.com.br/advisories/qnx-advs-01-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14656",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112490406301882&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16569/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rfdslabs.com.br/advisories/qnx-advs-01-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files via \"C:\\\" (Windows drive letter) sequences in commands such as (1) LIST or (2) RETR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ari_pikivirta:home_ftp_server:1.0.7_b45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFF3F94-5C05-485B-81B3-85DEF383B290"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112490496918102&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16556/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/HomeFtpServer1.0.7-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112490496918102&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16556/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/HomeFtpServer1.0.7-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home directory, which allows remote authenticated users to obtain sensitive information by obtaining ftpmembers.lst and ftpsettings.lst."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ari_pikivirta:home_ftp_server:1.0.7_b45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFF3F94-5C05-485B-81B3-85DEF383B290"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112490496918102&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/HomeFtpServer1.0.7-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112490496918102&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.autistici.org/fdonato/advisory/HomeFtpServer1.0.7-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "154566FB-0D1A-4DC2-AFE6-49DE93850951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB477AFB-EA39-4892-B772-586CF6D2D235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4962BB-0E61-4788-B582-21F05CD33AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35906CD-038E-4243-8A95-F0A3A43F06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B940BB85-03F5-46D7-8DC9-2E1E228D3D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82139FFA-2779-4732-AFA5-4E6E19775899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AB120B-2FEC-4EB3-9777-135D81E809AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7FF669-12E0-4A73-BBA7-250D109148C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB7EE53-187E-40A9-9865-0F3EDA2B5A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D06AE8A-9BA8-4AA8-ACEA-326CD001E879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC1A04B-0466-48AD-89F3-1F2EF1DEBE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F34D08-430E-4331-A27D-667149425176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248BDF2C-3E78-49D1-BD9C-60C09A441724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0FDE3D-1509-4375-8703-0D174D70B22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE732B5-00C9-4443-97E0-1DF21475C26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79C41D3-6894-4F2D-B8F8-82AB4780A824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "449A5647-CEA6-4314-9DB8-D086F388E1C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A407B7-F432-48F0-916A-A49952F85CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5AC769-D07D-43C7-B252-A5A812E7D58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF4DBF6-DAF0-47E7-863B-C48DB7149A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F19D71-0A58-4B03-B351-596EB67ECF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=29962",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16559/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-15.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_51_apache2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_52_apache2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-608.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14660",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-177-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=29962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16559/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200508-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_51_apache2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_52_apache2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428138/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-177-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Apache",
        "comment" : "Fixed in Apache HTTP Server 2.0.55:\nhttp://httpd.apache.org/security/vulnerabilities_20.html",
        "lastModified" : "2008-07-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:astaro:security_linux:6.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290BEAF7-4B5C-43F0-B35B-46B34459822A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112501186602731&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16578/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112501186602731&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16578/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an invalid request, which reveals a Proxy-authorization string in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:astaro:security_linux:6.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290BEAF7-4B5C-43F0-B35B-46B34459822A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112501186602731&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112501186602731&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a ..  (dot dot) in the wfe_download parameter to index.fpl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:astaro:security_linux:6.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290BEAF7-4B5C-43F0-B35B-46B34459822A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112501186602731&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112501186602731&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the config parameter, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4",
            "matchCriteriaId" : "72B26DE8-DB65-4D9D-8C74-4BCDB83B0A76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112510261425888&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112510261425888&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5484A9DD-01B6-42AC-AF93-F2B4CA33DB4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112511159821143&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16598/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511159821143&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16598/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B821AEB0-7C0C-407E-9CCB-EEB16E1A2719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F517D6BA-9793-4A4D-BDC6-2F5349F0B354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E876B0F6-8363-43E0-8E00-E55B04A05F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4131E313-CB18-45D7-9F4C-096EB0337B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.3_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2D7CE2-1461-4D01-A4B1-9E6F7A68FB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA0436A-8294-44B4-B7D1-62A73BE4DFAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9125286-5A7D-4A1B-B5C4-888581B9798C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54143C9E-0EB0-4137-A01A-3E8C8A7412F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89382A13-8E5D-44DC-8D6B-8FD8DCAFE525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C999044-00FE-4DE1-A235-F036FC9AE09A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A59F6E-A44B-4949-8487-CB089BF1CE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6B3525-BD38-47CF-B60A-F392FABDA357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD453B4B-75B9-476D-B1A6-65AB8E09107E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFCAB08-BADA-4231-96E2-B73462A803D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511025414488&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16594/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=352576",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511025414488&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16594/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=352576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgraphy:phpgraphy:0.9.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83775BB-7D82-4E5F-9501-EF405F246BDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cedri.cc/advisories/EXIF_XSS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511025414488&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16595/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14669",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cedri.cc/advisories/EXIF_XSS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511025414488&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16595/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1395410C-F729-4095-BC00-C15D61509A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.93u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FA4A81-65AD-4888-9F06-15C8E21D4907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.94u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2286772D-80C5-496F-8052-596AF41E7E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035E0872-E690-4827-9B7D-9BB1E0C5B49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.95b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8377F5-3C14-45FC-86F3-EB918687D2F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cedri.cc/advisories/EXIF_XSS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511025414488&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16596/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cedri.cc/advisories/EXIF_XSS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511025414488&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16596/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-08-30T11:45:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98B71D9-51F7-4770-B5F4-234F3A6A73DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cedri.cc/advisories/EXIF_XSS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511025414488&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16597/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cedri.cc/advisories/EXIF_XSS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511025414488&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16597/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2654",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-30T17:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpldapadmin_project:phpldapadmin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.6c",
            "matchCriteriaId" : "BA4FF6B9-F198-4CA9-90AD-41F364DBE14E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=322423",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-790",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-04.xml",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=322423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2655",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-30T17:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87199D7B-F9AA-4F5E-840B-7A4967ED0EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C83336C-A264-420D-ACEB-BE1BCC47741B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.51b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC7B35D-183B-403C-A00E-1306A3421794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.51c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A82E451-02A1-40B8-B9F6-5E6E87A3D5B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA65307-7797-4C6D-92FF-BB26FBCD20A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.54a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA22CD95-F4A8-4B93-AC4C-72EA4DF70494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.54b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D28E2AC-0B4F-4E8B-8BC0-117B1114E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BCF600A-1A8F-4A2B-B018-AD08F454EC1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.55a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F1A162-1ACD-403E-8397-BAFDEE267248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.55b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C07AE1-9101-4BC8-A606-2BB3D6350C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.55c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79AFE29-692E-4E4B-9CBA-324AE09FC797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF022F1A-30D4-4080-82E3-1FC17D61E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F144A46-C84F-43BE-A6C1-C10D582C766E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F48AD3-C45A-4FC0-A4E0-F2DDEDDA7D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A798F46-215D-41B8-8C54-DCF6DA816EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC150BF9-A63A-4178-873D-8C34D71A66FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701CE9B9-62B7-41FF-93AF-0C3E2962A7A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1FB221-64D1-4B0D-99D5-CE2A1C14DAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EFC266-1184-4449-A5EA-398A41670E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "471898BA-640E-4A02-98B1-259F008CB72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE45DC8-4EF9-42C9-9D5C-38F9A373A9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16B4E79-3FE3-40DF-A543-50B323951C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06124AEA-F3E3-4586-AA28-418FB79A9402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D1E65D-5E79-4F0C-9E6C-426BACACC34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02348D9E-D0BB-40F6-96ED-CF2066DE00F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3945570-C13A-4A3B-AC3E-7E31A100BF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C18F57-D4FB-4F3D-8197-62EF9A8E6356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26736677-0096-4923-8869-6DE6ED1DF00A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D8E199-217B-42EA-B9BE-C7E9CBE3C56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09663166-7ECB-4275-BAD4-DC57F6A70773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47475313-3B87-424F-A77A-A83FD51C44C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F56283-450A-4006-B6D7-DDF3E898968F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAF6245-CFB7-4E1B-B481-B956F8A18E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1E4C5B-CDFF-4C6C-9012-DEDFACAFFC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18935216-B1A2-4E62-83B4-F11DE0135505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BD7E7A-4FBA-4477-904A-2318F74A8BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC1803A-2656-4C05-B3FB-F7F2AC296BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F180BCAD-432C-4795-BF91-4E2D01409E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934CDE7E-EEC8-4CE8-B3DA-92AA5CD7D35B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF5209C5-3773-4AE4-8145-B11FF7FFA75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7376FEF5-9D05-43C3-B8A5-D96E0309B034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF3F8F6-BD5B-411E-9F65-C6D9481FC60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A336437-F857-4B7D-AC29-70A453A97D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maildrop:maildrop:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF97C89-2163-4233-B367-BE72F40C74FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-791",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2761",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-08-31T17:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpGroupWare 0.9.16.000 allows administrators to inject arbitrary web script or HTML by modifying the main screen message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C011E73-A072-421D-8500-C414A5B67BF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://savannah.gnu.org/bugs/?func=detailitem&item_id=13863",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16558",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014832",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-798",
        "source" : "security@debian.org"
      }, {
        "url" : "http://savannah.gnu.org/bugs/?func=detailitem&item_id=13863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0403",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-01T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service (crash) and possibly gain tty access via unknown attack vectors that trigger an access of a pointer to a freed structure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*",
            "matchCriteriaId" : "81B543F9-C209-46C2-B0AE-E14818A6992E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "DB89C970-DE94-4E09-A90A-077DB83AD156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=144059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=144059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-01T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The user interface in the Windows Firewall does not properly display certain malformed entries in the Windows Registry, which makes it easier for attackers with administrator privileges to hide activities if the administrator only uses the Windows Firewall interface to monitor exceptions.  NOTE: the vendor disputes this issue, saying that since administrative privileges are already required, it is not a vulnerability.  CVE has not yet formally decided if such \"information hiding\" issues should be included."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.microsoft.com/technet/security/advisory/897663.mspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/897663.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in cleartext in the Log.Liveupdate log file, which allows attackers to obtain the username and password to the internal LiveUpdate server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.1.1.1000:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EDF0DA40-1AC4-4610-AEAC-F431E23BAEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.4:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "56D54011-9B09-4C63-8301-609C03E51099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112552401413998&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112552401413998&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1915",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-02T17:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:log4sh:log4sh:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA3E370-B3A1-4E11-8AF9-AFE19B31329F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:log4sh:log4sh:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B75D40-AC2A-4852-8324-4F7C69DEAEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:log4sh:log4sh:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5AE370-E2F8-4A19-863B-3F5272943036"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q3/0001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94069",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/034873.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15899",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14140",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0957",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.zataz.net/adviso/log4sh-06092005.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q3/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/034873.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/log4sh-06092005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2496",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-02T17:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_mills:ntpd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.0.a.2004-06-17_4.fc3",
            "matchCriteriaId" : "15B98E7B-989D-4677-90A2-0314EFBCB45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16602",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21464",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016679",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-801",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:156",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0393.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14673",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityspace.com/smysecure/catid.html?id=55155",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1561",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22035",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9669",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0393.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityspace.com/smysecure/catid.html?id=55155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1857",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-09-02T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simpleproxy:simpleproxy:2.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86D31EB-EDD0-4160-8ED6-FD68CAEA10E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simpleproxy:simpleproxy:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6266431-B372-46D5-BCBC-D65F795966EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simpleproxy:simpleproxy:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "254BE71A-1B14-48BC-A114-D32F699599E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simpleproxy:simpleproxy:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99ECA1AE-919D-4E3C-B6AB-E9A74BDCF379"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16567/",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=604&release_id=351847",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-786",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/139421",
        "source" : "security@debian.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14666",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22016",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16567/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=604&release_id=351847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/139421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in LeapFTP allows remote attackers to execute arbitrary code via a long Host string in a Site Queue (.lsq) file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leapware:leapftp:2.7.3.600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F8DD51-8451-4EF0-9557-8C3BC27BB1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leapware:leapftp:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A29F16-7789-44E3-854E-2FDC905F0A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leapware:leapftp:2.7.4.602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042A380D-5285-460F-AB29-17019928A830"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112491089723070&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16552/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secway.org/advisory/AD20050824.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.leapware.com/security/2005082301.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112491089723070&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16552/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/AD20050824.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.leapware.com/security/2005082301.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A1739A-B77D-4CD6-9943-52B336EC2F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D4EB83-A8A4-48F2-A835-FA192ADB3BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.78d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1609D51F-41D1-441C-9EA8-3F0510D8ED8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABBFB36-0A7C-45ED-9907-867F31884113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23543D87-E4B6-4B74-A490-378D45AA3481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4DBC8E3-0344-413A-8C4A-F48CBAAFAB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C3AD19-26F4-4AFF-8207-86017509EECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFC7217-88A6-4241-8FD9-4B7E2683F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC8C9FC-9D35-455D-9597-3B2E63845B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07255F9-5726-4FDB-81A3-D0D55AD1F709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1A8D69-0A33-4F47-B1BA-8BC898A3E7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06164FCF-CC47-406D-8561-DDA797B29673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A323A588-59DD-4D89-A224-A6FF7BBD7B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CDEAF9-0769-4570-8191-DA368938FDFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0A4880-4C6D-45F4-A9E3-45F89565A70E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0756438F-DD69-4213-9069-FA613A5D729E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0FB0CD9-91CB-43C5-9CB5-1B3BC665D134"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112511873420953&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16245/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rem0te.com/public/images/sophos.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sophos.com/support/knowledgebase/article/3409.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112511873420953&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16245/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rem0te.com/public/images/sophos.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sophos.com/support/knowledgebase/article/3409.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail containing tags with strings that contain \">\" or other special characters, which is not properly sanitized by SqWebMail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A152202-423E-4C55-B5C8-0904C1B5BA95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112534112715638&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2005/Aug/975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16600/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-39/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-201-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534112715638&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2005/Aug/975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16600/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-39/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-201-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not properly handle when the Windows Administrator or Guest accounts are renamed after SSH key authentication has been configured, which allows remote attackers to use the original names during login."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wrq:wrq_reflection_for_secure_it_windows_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C286A86C-A95A-4AAC-A83F-D144D881849F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16649/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.wrq.com/techdocs/1910.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/902110",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/16649/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.wrq.com/techdocs/1910.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/902110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which might allow remote attackers to bypass intended restrictions and login to accounts that should be denied."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "953197F8-7F7E-4644-8A26-7504B29D3F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA610B2A-CBC7-4BF7-AB4F-21D48D158004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72004113-164E-4392-9E2D-4365EF4C0055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wrq:wrq_reflection_for_secure_it_windows_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C286A86C-A95A-4AAC-A83F-D144D881849F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16649/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.wrq.com/techdocs/1910.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/758054",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/16649/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.wrq.com/techdocs/1910.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/758054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long \"+VIEWS:\" reply, which is not properly handled in the VIfromLine function, and (2) certain arguments when launching third party programs such as a web browser from a web link, which is not properly handled in the FIOgetargv function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_minnesota:gopher:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E26451-1092-42D2-A153-BB13B82069AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112559902931614&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16614/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/619812",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14693",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112559902931614&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16614/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/619812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-10-22T01:15:32.007",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-25",
      "cisaActionDue" : "2022-04-15",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "HP OpenView Network Node Manager Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndIncluding" : "7.50",
            "matchCriteriaId" : "15973175-E70A-41C5-AFF2-4F22CB4520E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112499121725662&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/16555/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14662",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21999",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112499121725662&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/16555/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the nickname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lithium_software:lithium_ii_mod:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.24",
            "matchCriteriaId" : "AFF5DB38-12FE-4E59-966B-5F3427952CFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112500372617684&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16585/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112500372617684&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16585/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "php_api.php in phpWebNotes 2.0.0 uses the extract function to modify key variables such as $t_path_core, which leads to a PHP file inclusion vulnerability that allows remote attackers to execute arbitrary PHP code via the t_path_core parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebnotes:phpwebnotes:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E1B84E-1C80-4709-BFF7-BB3D35F9C157"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112516693300371&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14679",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Aug/1014807.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112516693300371&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Aug/1014807.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the (1) version[fullname], (2) version[homepage], or (3) version[no] parameter to footer.php, or the (4) version[fullname], (5) version[no], (6) version[author], (7) version[email] parameter to header.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:looking_glass:looking_glass:2004-04-27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A024DC-3A16-43D3-801D-E7F7B04B737F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://de-neef.net/articles.php?id=2&page=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112516327607001&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/lookingglass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16607/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14680",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://de-neef.net/articles.php?id=2&page=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112516327607001&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/lookingglass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16607/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:looking_glass:looking_glass:2004-04-27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A024DC-3A16-43D3-801D-E7F7B04B737F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://de-neef.net/articles.php?id=2&page=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112516327607001&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/lookingglass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16607/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14682",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://de-neef.net/articles.php?id=2&page=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112516327607001&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/lookingglass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16607/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL statements via the fid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B59C3-0318-49F5-A409-E258E4D322C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F3D49D-C89A-44FB-B254-4F8BAA20BFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCAC700-1448-4BD4-97F4-8CC06F518524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE181AB-C597-48A3-A5DA-135E601968AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112535137320050&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14684",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112535137320050&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iTAN Online-Banking Security System allows remote attackers to obtain TAN numbers via a man-in-the-middle (MITM) attack while the transaction is taking place, which facilitates a \"phishing\" attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:itan_online-banking_security_system:itan_online-banking_security_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B6B113-5A1C-4C6D-A3AD-356BC96280C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112498693231687&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-014.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112498693231687&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-014.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) allows remote attackers to inject arbitrary web script or HTML via a signature."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B013ADC-809F-4DFE-913B-FE3B8974404C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112534018805818&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534018805818&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed by PHP code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E66CD67-55D1-48A0-9A19-D3153B7DC787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21D4EA6-C739-4BA0-ABBD-1E95CDD5E808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68DB291-A958-4296-855A-B3CF19704E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A9D296-6C54-4436-AE77-0D5291415DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81684C0A-B31D-46F5-998F-21F1FDDFBBEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A41890E-4C88-4161-9DE3-C273272176E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB8AF21-93A9-4756-B2E8-313FA6638158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14E676F-8A71-4607-80DC-F538F697E674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C42CAF4-3936-455F-AE02-312278C84FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB1238-BD1C-4A5E-9491-8AC343868FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07DA566-0075-4297-8531-A5E7C03877FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5428C3B-997C-417E-932D-CD2E9139891D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B49C1DE2-FE7A-4AE0-AFB4-15C323C47817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E5AFE9-C5FC-448D-B3FB-411C0CAB2174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA28579-5406-471B-A015-00DE3283B8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC947E3-E98A-4673-B6A4-22C63BDAADBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF1BF48-11AE-4737-9F65-E01A3F8D5EA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D94B04F-E6E4-452E-883A-B88DDDDF6AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253560E-D233-43B0-86E6-F41690BEEDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB63A18-0C81-4C18-91CE-E9FC1497CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A0F3EF-9345-407B-8110-C6F8E44861CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6480F8-D5AF-418F-BBB7-E09941EAA56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20EC310-AF18-4001-913C-849D60C86047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C5A8FE4-FD41-4FB5-B0FA-C3C4669E42C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699C28AF-95BD-44EA-BD50-F9616B53FBF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A60D274-69FA-4C37-A472-FEB1D18DA6C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4219A0-F0EA-4303-B46F-D170EB6B05B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9837B11A-A3AA-4CE7-A0BE-E9709D42ECD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590709E-FD1E-4BF4-8158-09B243B87648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA4DAE8A-8F53-4A66-9A42-BC468569D31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4331016-C28D-4C17-B6A2-11A7E45873E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFADD332-B80D-4D04-AA20-147F00F3CB0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A60EFEB-036F-4828-8D17-069C0CF448D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51906E70-8317-4B8A-A384-13F62B0D24B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A53ED7-CB9B-4D83-8C67-BF14DDD5A081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2D688C-2A06-4381-A2FF-27CA81606A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F035957A-5FF8-43AA-8DF9-C132051FF1E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D1C9D-E8C2-43D1-A87E-89DA4CBDE4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilia_alshanetsky:fudforum:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A616B2B6-49D7-42D2-8FFE-7D9B3B7FE13B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fudforum.org/forum/index.php?t=msg&th=5470&start=0&",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534235403406&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16627/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500406/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fudforum.org/forum/index.php?t=msg&th=5470&start=0&",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534235403406&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16627/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500406/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an \"ftp://\" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for \"http\" and \"https\" URLs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autolinks:autolinks:2.1:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "595FF1C2-C1E9-4BBA-9626-C806394817F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112535379716486&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16620/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14686",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112535379716486&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16620/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DC9F38-3CAD-4B5F-8DC9-0183A92F640F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0EDB22-A7E0-44C0-903C-02EE07BC9675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1040A11C-5F39-4045-9E7B-A9FFC0D119ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:5.01_service_pack:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6D6B0C-920B-4547-A42A-6463BE84A3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F2384D-1E17-4DA8-A797-7E4729C2720F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21F2030-F535-49A4-8E6E-FD1CBE689AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06B0846-7C58-44D0-AAF9-E3CAA4050EBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112533836103267&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16632/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112533836103267&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16632/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the login function for the administration login panel in cosmoshop 8.10.78 allows remote attackers to execute arbitrary SQL commands and bypass authentication via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cosmoshop:cosmoshop:8.10.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0E1DC4-D6AD-49F5-8F6D-901F3D9A888A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112534390600093&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16625/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534390600093&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16625/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cosmoshop 8.10.78 and earlier stores passwords in plaintext in the database, which allows local users to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cosmoshop:cosmoshop:8.10.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0E1DC4-D6AD-49F5-8F6D-901F3D9A888A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112534390600093&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16625/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534390600093&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16625/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via \"..\" sequences in the file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cosmoshop:cosmoshop:8.10.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0E1DC4-D6AD-49F5-8F6D-901F3D9A888A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112534390600093&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16625/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534390600093&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16625/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5484A9DD-01B6-42AC-AF93-F2B4CA33DB4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112534658510762&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16616/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ftusecurity.com/pub/sphpblog_vulns",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14681",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534658510762&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16616/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ftusecurity.com/pub/sphpblog_vulns",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBE0C14-CC8B-41FE-ABD9-C9C02813C7AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6B6217-DD6C-41C5-AB0C-DE7B989C79D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61969A06-96C3-4142-9065-6A8C2EFD557C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9B3FBC-54DB-4D21-B1AB-BC7721FD138E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B7E614-0CB5-4AAF-B274-150DA5B85463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D278AA-9952-4117-B789-0E597D0E5599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B013ADC-809F-4DFE-913B-FE3B8974404C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:801:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A05DCF-C183-434B-BF4C-8F2228060EF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112534574505945&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14685",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534574505945&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bfcommand_and_control_software:bfcc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.22_a",
            "matchCriteriaId" : "BC7C83D4-B2FA-4031-8A73-8F50E7DD918D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bfcommand_and_control_software:bfvcc:2.00_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE862A6-4322-49DE-8AA6-A667C85B88D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bfcommand_and_control_software:bfvcc:2.14_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E41762C-62DE-4EDA-AB02-70A0361AE6CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/bfccown-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534155318828&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16629/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14690",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/bfccown-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534155318828&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16629/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bfcommand_and_control_software:bfcc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.22_a",
            "matchCriteriaId" : "BC7C83D4-B2FA-4031-8A73-8F50E7DD918D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bfcommand_and_control_software:bfvcc:2.00_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE862A6-4322-49DE-8AA6-A667C85B88D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bfcommand_and_control_software:bfvcc:2.14_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E41762C-62DE-4EDA-AB02-70A0361AE6CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/bfccown-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534155318828&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16629/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14690",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/bfccown-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534155318828&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16629/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to cause a denial of service (refused new connections) via a series of connections and disconnections without sending the login command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bfcommand_and_control_software:bfcc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.22_a",
            "matchCriteriaId" : "BC7C83D4-B2FA-4031-8A73-8F50E7DD918D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bfcommand_and_control_software:bfvcc:2.00_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE862A6-4322-49DE-8AA6-A667C85B88D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bfcommand_and_control_software:bfvcc:2.14_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E41762C-62DE-4EDA-AB02-70A0361AE6CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/bfccown-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534155318828&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16629/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14690",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/bfccown-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534155318828&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16629/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpldapadmin_project:phpldapadmin:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88760DAB-D59C-4633-8D8B-920834D3745C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpldapadmin_project:phpldapadmin:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21D801F8-03E6-4D44-B885-3088656F00DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112542447219235&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16617/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.rgod.altervista.org/phpldap.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14695",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22103",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112542447219235&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16617/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.rgod.altervista.org/phpldap.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-02T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the custom_welcome_page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpldapadmin_project:phpldapadmin:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88760DAB-D59C-4633-8D8B-920834D3745C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpldapadmin_project:phpldapadmin:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21D801F8-03E6-4D44-B885-3088656F00DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112542447219235&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16617/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.rgod.altervista.org/phpldap.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14695",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22103",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112542447219235&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16617/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.rgod.altervista.org/phpldap.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2797",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-06T17:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding (\"-D\" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E003AB3C-8DF3-4AE8-82A3-984F30E5599B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605977304049&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16686",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18661",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014845",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19142",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14727",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605977304049&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of OpenSSH as shipped with Red Hat Enterprise Linux 2.1, 3 or 4.",
        "lastModified" : "2009-11-25T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2798",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-06T17:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580008AC-2667-4708-8F7E-D70416A460EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E05D8E86-EC01-4589-B372-4DEB7845C81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "764AD252-CA2F-4A87-BCAA-7747E8C410E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BB9F7-55E5-4CB3-8429-C37C7132799F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E6F639-31A0-4026-B6D4-51BA79FB1D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0211BCE3-0DED-40BA-8A21-1A97B91F71C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD7BB30-AC79-4153-852C-1053DCF4DE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9039BE91-AF0A-41E7-8F9F-15375890E120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08BCB2EA-DF9D-4853-805B-29FA6274E2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F93417F-2498-4576-9F5D-B59F77D39669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3AB42C-B614-4746-99AD-E94140D91BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458167E5-9BC2-40BE-AC8A-9761A4F19494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB9B4C7-4235-4388-8E5D-E72ECCC37A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86ACA0ED-A3D0-48A7-B06F-13709AD23B55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB9262-D05E-4610-9C79-3EDE44AC7C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8176879B-1875-4AC9-B15A-2ABCFCD04F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA26A12-F96A-4025-BBCA-72B7A3B1E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02751E9-2D38-4495-9572-8D84D71D4773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A36BEA2-DAE4-423C-8D85-0F6036351F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80DC64F6-FE28-44BA-91D1-EC2DB11B2CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44CCF5CD-B434-4392-A79A-C1945D2AE30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB456B8-9D8B-4985-858D-6A43FA5EE2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD4E0F6-4EEA-4EC7-83E7-FC6F7D2E7A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35F4ABE-1B0C-4195-8F99-BF993A17882B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC7352D-2916-47F7-A256-F897D763DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC3FC36-B246-4DCB-8984-228525D9A356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC861000-37D8-4B0F-BFA0-57E9BE125B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.0p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBE75FE-DDE2-43BA-80EF-15A6698EABC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683B26F0-5EA2-455A-8948-27C100BBA3AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16686",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17245",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18406",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18507",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18661",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18717",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014845",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:172",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-527.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421411/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421411/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0144",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24064",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1345",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1566",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9717",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/209-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-527.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421411/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421411/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/209-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue does not affect Red Hat Enterprise Linux 2.1 and 3.\n\nThis flaw was fixed in Red Hat Enterprise Linux 4 via errata RHSA-2005:527:\nhttp://rhn.redhat.com/errata/RHSA-2005-527.html",
        "lastModified" : "2006-11-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-06T17:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=729d70f5dfd663b44bca68a4479c96bde7e535d6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14790",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=729d70f5dfd663b44bca68a4479c96bde7e535d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-06T17:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-697"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acl.bestbits.at/pipermail/acl-devel/2005-February/001848.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://lists.debian.org/debian-kernel/2005/08/msg00238.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19252",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0144.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14793",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10495",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://acl.bestbits.at/pipermail/acl-devel/2005-February/001848.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://lists.debian.org/debian-kernel/2005/08/msg00238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0144.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-06T17:03:00.000",
      "lastModified" : "2023-11-07T01:57:42.677",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2872, CVE-2005-2873.  Reason: this candidate's description originally combined two separate issues.  Notes: All CVE users should consult CVE-2005-2872 and CVE-2005-2873 to determine the appropriate identifier for the issue"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2336",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-09-06T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via \"missing pages\" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki:hiki:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A025628-6766-4402-A9B5-EE8983BC0283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki:hiki:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAEBA2F7-AA11-448B-AB89-77A2B51426C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki:hiki:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F760D12-A498-4E19-8D54-A7D46709B757"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hikiwiki.org/en/advisory20050804.html",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN38138980/index.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/17075",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15021",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://hikiwiki.org/en/advisory20050804.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN38138980/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-06T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via a page name in a Login link, a different vulnerability than CVE-2005-2336."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki:hiki:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A025628-6766-4402-A9B5-EE8983BC0283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki:hiki:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAEBA2F7-AA11-448B-AB89-77A2B51426C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki:hiki:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F760D12-A498-4E19-8D54-A7D46709B757"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hikiwiki.org/en/advisory20050804.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2338138980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hikiwiki.org/en/advisory20050804.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2338138980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-06T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "forum_post.php in e107 0.6 allows remote attackers to post to non-existent forums by modifying the forum number."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8692341-8DF2-4943-853A-4AAF1F313914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB33E9-9AB8-482A-A196-768A2085A49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BD5CAD-0EB8-48F2-AF80-510584A83446"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112544896117131&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112544896117131&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-06T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a denial of service (application hang) via an HTTP header containing only a \":\" (colon), possibly leading to an integer signedness error due to a missing field name or value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trevor_hogan:bnbt:7.5_beta_release2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE628BC-61AB-4B71-9357-E9DACB75B70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trevor_hogan:bnbt:7.5_beta_release3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5241F90-9E03-4218-9158-A21082B256DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trevor_hogan:bnbt:7.7_2004-10-27_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C14CE3-3A38-47C8-8E0F-89740EFFE7ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112542080127451&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16613/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secway.org/advisory/AD20050830.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14700",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112542080127451&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16613/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/AD20050830.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2494",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-06T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B53A48-E222-46D9-B84C-AC26DF6AB400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE0AED-7918-41E9-A902-AC4070E03132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E19472-47B4-4398-A188-CA5A5D3E7060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17407A2-089E-43A5-9BD5-EFF966F5CC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AB7C9F-48E2-4ACD-80CB-9559DE4C2BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E26B353-4985-4116-B97A-5767CDC732F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7180B3-03AC-427C-8CAD-FE06F81C4FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D600E27F-A1D6-42C7-8ED1-FD508F5B3AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7036AE90-C7E0-48CE-805D-3F1E04852675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D49AE92-BA00-4A8E-BBFE-1BE994CFA3CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.2-kdebase-kcheckpass.diff",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112603999215453&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112611555928169&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18139",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21481",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-815",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050905-1.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:160",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0582.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14736",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.suresec.org/advisories/adv6.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-176-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9388",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.2-kdebase-kcheckpass.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112603999215453&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112611555928169&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20050905-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0582.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.suresec.org/advisories/adv6.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-176-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2656",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-09-06T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service (disk consumption) and possibly perform other unauthorized activities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polygen:polygen:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89C3C08-9E9B-49C0-B150-B1BB33CDCE06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-794",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14722",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2700",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-06T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ssl_engine_kernel.c in mod_ssl before 2.8.24, when using \"SSLVerifyClient optional\" in the global virtual host configuration, does not properly enforce \"SSLVerifyClient require\" in a per-location context, which allows remote attackers to bypass intended access restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.35",
            "versionEndExcluding" : "2.0.55",
            "matchCriteriaId" : "7B627099-D2E2-4E43-84B7-0C921FAD4156"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=apache-modssl&m=112569517603897&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112604765028607&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870296926652&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870296926652&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://people.apache.org/~jorton/CAN-2005-2700.diff",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16700",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16705",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16743",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16748",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16753",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16754",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16769",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16771",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16864",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16956",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17088",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17288",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17311",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19072",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19073",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21848",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22523",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102197-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-805",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-807",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/744929",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:161",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_51_apache2.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_52_apache2.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/19188",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-608.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-773.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-816.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-177-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1625",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=167195",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/117bc3f09847ebf020b1bb70301ebcc105ddc446856150b63f37f8eb%40%3Cdev.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/5b1e7d66c5adf286f14f6cc0f857b6fca107444f68aed9e70eedab47%40%3Cdev.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2006-09/msg00016.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10416",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=apache-modssl&m=112569517603897&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112604765028607&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870296926652&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870296926652&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://people.apache.org/~jorton/CAN-2005-2700.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/16956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102197-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/744929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_51_apache2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_52_apache2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/19188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-773.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-816.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-177-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=167195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/117bc3f09847ebf020b1bb70301ebcc105ddc446856150b63f37f8eb%40%3Cdev.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5b1e7d66c5adf286f14f6cc0f857b6fca107444f68aed9e70eedab47%40%3Cdev.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2006-09/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Apache",
        "comment" : "Fixed in Apache HTTP server 2.0.55:\nhttp://httpd.apache.org/security/vulnerabilities_20.html",
        "lastModified" : "2008-07-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-06T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499EFCAE-9309-4C26-A846-10396CBC628D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6908E44D-3553-430D-B870-266971DC0D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEBDEF33-48E4-42F4-A725-838DA9191334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422B0D3E-503C-4CA6-83B9-4FC58BA898C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46557BD6-66A0-4892-9468-687A4B63F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A186C5E-ACAA-47C8-9FA0-133E9D7F2900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24094775-BAF9-4C2E-8C38-86916E22B5A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CF73FA-09F6-4CE5-932E-BA6B43D66F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E87583-5769-4114-94F7-043897DA0FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718E8C39-A59C-4576-B00D-31A8F0C1762C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B1A7D7-D920-41F3-8DE9-D39007DDDEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327B826F-0F4E-420D-8C93-4551A4B9F190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE12C455-5CA0-4581-A3F3-CC8867CCEEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC5E23E-3A14-49B4-A676-AAA96F25D01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65EA852-3C46-47D6-8D6B-DC3546165CC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=102631",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-03.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=102631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2794",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-07T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0771FC-F8FB-4065-B6E1-EA21ECE77AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B81A56D-3F2E-455B-A960-69728437B31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7799D4-7B04-463B-BA19-AE36CD9DD694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8093EE-AA6A-4E2C-A891-163A42EA89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3655286B-D44A-4DCB-8DF4-D45A36398933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDCE5E-6D74-4E13-B830-E412C33EF337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E71F3AC2-E633-41D2-B49B-A92E5FB974F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87284115-14F4-4FB6-A8D9-7C7A3B5151E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB618BD-9C6D-458D-A521-FE436C428A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8717751-A250-49F6-97E9-C14C8A44E550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D360F838-C65C-4E76-B460-ADE1AB7657C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67618D3A-9C74-4701-B42F-385E0221D75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C501D54D-5294-4BFD-9858-BE70C411B928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CB5358-7833-4D1E-8F22-CB2714E36F3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2265D309-4E50-45A3-A884-9F1FA361D453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45663027-1EFD-415A-8AB3-BCE544F4AD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EAAEE-BAB5-42EC-B171-93D9E32AC6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9E1D6A-2C46-4062-87B2-726FCC5967B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D24DCC-6C2A-466A-B59F-3D07F62175D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC7B751-34D9-4BBB-8608-97823E5F5F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADF48B4-C9DA-41B7-9124-882ADF625F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446879FE-02A7-4576-A726-6E7C918C4E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F495D6-7734-411D-B527-14C74A345E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EFA76EB-C5A5-4652-8EF1-66E2B061BE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB6D7E3-697C-4AA9-9925-371AB99CA395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DD635-BB74-4311-9E62-0DFAEB8DC121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E006EBC-5624-4AEE-85A8-10E33FCB20A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8DC1BE-EA6C-41B8-9D50-AACE2F2BA424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155CB225-3F1B-4841-90F7-49C4CF90B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21905542-2429-4695-B253-AEC648B0BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317FED1B-9C39-40E5-980D-C5ED808D8FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48242DB9-5EB2-4C95-A944-C52B798A32A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3969B3-02F1-480A-8E72-CC50CD14B573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD64CE0-686A-44F2-B537-6D41E47A8BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4233D036-BBD8-48AA-AD1C-403AF262B192"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-809",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:162",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_53_squid.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-766.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14761",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE10-STORE_PENDING",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10276",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_53_squid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-766.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE10-STORE_PENDING",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2796",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-07T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0771FC-F8FB-4065-B6E1-EA21ECE77AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B81A56D-3F2E-455B-A960-69728437B31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7799D4-7B04-463B-BA19-AE36CD9DD694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8093EE-AA6A-4E2C-A891-163A42EA89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AA7680-E004-44AC-9AE9-C0186459C4B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3655286B-D44A-4DCB-8DF4-D45A36398933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDCE5E-6D74-4E13-B830-E412C33EF337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E71F3AC2-E633-41D2-B49B-A92E5FB974F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87284115-14F4-4FB6-A8D9-7C7A3B5151E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB618BD-9C6D-458D-A521-FE436C428A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8717751-A250-49F6-97E9-C14C8A44E550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A4829D-4DC1-4CD2-B136-48719A254EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D360F838-C65C-4E76-B460-ADE1AB7657C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67618D3A-9C74-4701-B42F-385E0221D75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C501D54D-5294-4BFD-9858-BE70C411B928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CB5358-7833-4D1E-8F22-CB2714E36F3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2265D309-4E50-45A3-A884-9F1FA361D453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45663027-1EFD-415A-8AB3-BCE544F4AD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EAAEE-BAB5-42EC-B171-93D9E32AC6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9E1D6A-2C46-4062-87B2-726FCC5967B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D24DCC-6C2A-466A-B59F-3D07F62175D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC7B751-34D9-4BBB-8608-97823E5F5F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADF48B4-C9DA-41B7-9124-882ADF625F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446879FE-02A7-4576-A726-6E7C918C4E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F495D6-7734-411D-B527-14C74A345E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EFA76EB-C5A5-4652-8EF1-66E2B061BE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB6D7E3-697C-4AA9-9925-371AB99CA395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DD635-BB74-4311-9E62-0DFAEB8DC121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6BFB6A-0AFC-4E52-AD48-252E741B683B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9797A37-FD26-4527-B2FA-E458F7A88D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC6CCDC-237A-408E-9CAF-D41EC3A9D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540AA8A9-A4AB-4DB2-B37E-11876348DF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E006EBC-5624-4AEE-85A8-10E33FCB20A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8DC1BE-EA6C-41B8-9D50-AACE2F2BA424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155CB225-3F1B-4841-90F7-49C4CF90B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21905542-2429-4695-B253-AEC648B0BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317FED1B-9C39-40E5-980D-C5ED808D8FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48242DB9-5EB2-4C95-A944-C52B798A32A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F697BB-5C94-42CD-AD9E-72C3D3675D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE764CDC-1018-4502-8F41-8A48E38E7AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBAAC5B-6012-410F-B765-689A8D55B095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885123F3-346F-451E-B72A-D0405F0B72E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF792263-D6ED-4AD1-98C1-0E22670EF91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3969B3-02F1-480A-8E72-CC50CD14B573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD64CE0-686A-44F2-B537-6D41E47A8BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4233D036-BBD8-48AA-AD1C-403AF262B192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C66D46-D3C7-4FCC-B80D-EBA542E77C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B6C02F-D194-4CA7-9DEC-A436A4E8C99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D86CB-EEAD-4C40-855D-E98E4ED8B58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F59C3E7-0AC0-4886-B4B4-56904AC93C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5207FB50-946A-4AB2-AED9-9BA78B88F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8096AB-99B9-4D08-AA13-6AFF0DD65BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A356D04A-7882-4A14-AD5F-2079EA0E79C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C4F43-0807-400C-890B-D13BF5B9BF72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014846",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-809",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:162",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_53_squid.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-766.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14731",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE10-sslConnectTimeout",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_53_squid.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-766.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE10-sslConnectTimeout",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to read portions of arbitrary files via the -f command line option."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frox:frox:0.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5250AEA3-5FDA-4E14-AA62-8B7F554D796B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/409667",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14711",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/409667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "frox 0.7.16 and 0.7.17 does not properly parse certain Deny ACLs, which might allow attackers to bypass intended restrictions and access blocked hosts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frox:frox:0.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF1F50C-FA43-4346-B92B-ADB163F6A778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frox:frox:0.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44E42AB-710D-4470-9560-0B99E6634763"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/14182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=6492850&forum_id=1822",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1013089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=6492850&forum_id=1822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/13615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B817C7B-DE89-40CF-AFED-384A69E5FEB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB65C90E-7029-494D-861E-20DA363A292D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D7FA8F-42A5-4829-8A4B-FA163EC9480E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F73B08-85B6-45C2-85FA-DA76C025AAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD6750DD-E5CD-477A-AD7C-E45562EB0B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C2E1CE-9898-4059-A57A-B376D62EF017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:0.9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97D4F26-572D-4EA7-BE91-8F3ED2738C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:0.9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57015BCC-CA92-4A32-AD18-44EB5AE5496C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:0.9.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5832694-08AC-41D1-84B3-F979EBB017E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:0.9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9AD8BC-4AFD-47E8-A53C-2D5E637453A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:0.9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC6292B-4BFD-4118-8FF6-63D101E97076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silc:secure_internet_live_conferencing:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C53D9CF-424C-4892-9511-FC87EB16B612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94587",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16659/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/409672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/silc-server-toolkit-06152005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=94587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16659/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/409672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/silc-server-toolkit-06152005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in urban before 1.5.3 allow local users to gain privileges via a long HOME environment variable to (1) config.cc, (2) game.cc, (3) highscor.cc, or (4) meny.cc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urban:urban:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "EE648694-6CB5-4C91-8F66-85EBEFEE1CBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112604855119036&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014848",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freebsd.org/cgi/cvsweb.cgi/ports/games/urban/files/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/08df5d46-1baf-11da-8038-0040f42d58c6.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112604855119036&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freebsd.org/cgi/cvsweb.cgi/ports/games/urban/files/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vuxml.org/freebsd/08df5d46-1baf-11da-8038-0040f42d58c6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure DT_RPATH, which could allow local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.1.2_r1",
            "matchCriteriaId" : "38F6C98B-4759-43BB-9C6C-B8176C11642B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B4FDFF-9E09-4AB9-9196-6A01903473B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E8FC05-D498-4D5D-B5A3-3F16749B7491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD964F4-9196-4641-A854-09DA86BCC890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A07BEF-C759-459E-A144-D37C1A55A9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.4_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D95BAC-CCF3-4E8B-BF31-E277B03C0FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97B7D0D-68CC-463D-A14B-3651D8DD4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCF39FC-D220-4F4A-8CBF-B993C65671FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5512FA-8B74-4585-ADEF-F710C0DF83A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AAC2EA-8AA7-4303-BD64-74CFC7938D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C872A9B0-0B3C-47B2-82F5-344BEBA221CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE816EA-2CDF-440A-9B7A-D772F38A3A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88517EE-17E2-4128-8355-FAAC815718CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089CEC52-73AC-41B0-BB7F-F24C42DD16E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2BAAA8-313D-41F2-A98D-3557331E35B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88260A4F-4707-4B79-939A-F1EB2CD4D57B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-05.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "man2web allows remote attackers to execute arbitrary commands via -P arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:man2web:man2web:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E15494-8BBF-454B-8E56-F3C6D2DCB166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:man2web:man2web:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130F7853-8F59-4A7F-ABAA-C64C899E08C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/14747",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files via \"..\" sequences and \"%00\" (trailing null byte) characters in the id parameter to the read mod in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Aug/0440.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16650/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014824",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419107/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14702",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Aug/0440.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16650/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419107/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter in a vis_reg operation to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Aug/0440.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014824",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14704",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Aug/0440.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "print.php in FlatNuke 2.5.6 allows remote attackers to obtain sensitive information (path disclosure on error) or cause a denial of service (resource consumption) via an MS-DOS device name in the news parameter to print.php, such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Aug/0440.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014824",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Aug/0440.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T19:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Greymatter allows remote attackers to inject arbitrary web script or HTML via a post comment, which is recorded in a log file but not properly handled when the administrator uses \"View Control Panel Log\" to read the log file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:greymatter:greymatter_forum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E276FB-800B-444D-905C-9A6FA1D6532B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112551307528929&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112551307528929&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T19:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549FC613-BB72-42FD-AD04-0FAC2FC2A942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/smf105.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Aug/0438.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/smf105.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Aug/0438.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T19:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in DownFile 1.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter to (1) email.php,(2) index.php, (3) del.php, or (4) add_form.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eric_fichot:downfile:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E4F8EB-D0A4-46C6-AE73-0D7183690868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16630",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T19:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DownFile 1.3 allows remote attackers to gain administrator privileges via a direct request to (1) update.php, (2) del.php, and (3) add_form.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eric_fichot:downfile:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E4F8EB-D0A4-46C6-AE73-0D7183690868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16630",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T19:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer \"Conditional Comments\" such as \"[if]\" and \"[endif]\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:sqwebmail:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A152202-423E-4C55-B5C8-0904C1B5BA95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112607033030475&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16704/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-44/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5RP0220GUS.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-201-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112607033030475&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16704/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-44/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/unixfocus/5RP0220GUS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-201-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a signature of a logged-in user in \"My Control Center,\" which is not properly handled by control.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D7E47E-10F5-4F50-8940-951B2C0011CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16042FAE-7370-425C-8810-4F9363B7CAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A25A6F-62CA-4C76-9D4C-821B1E15FB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6247DB0C-37B6-44EF-8B92-8CFCDA537039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C46298C-2492-4102-A264-E2A1D45AD423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2AD59F-42DF-407A-8FCA-E6E0067A2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E1044B-2101-4719-8749-17DD22F46055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E17261-A010-4929-99E5-A2511F205B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A461E2EB-9964-44DE-9C25-562D239201F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB6A4EC-D351-4EF8-8C6A-294A47DDCCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B10230A-7D72-418E-8A29-E9F20762C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368C8142-836A-4FDB-9CD8-385FE06B9A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1470761E-DA6E-4D2A-B226-1ED782FB3654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB3ED23-821D-42FA-A24F-F2EDDA43D7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88BA8736-5998-42E0-81E4-76E3669F8112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9811C9-EE92-4115-B81F-7A3030390BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A196AD2-7E48-40F4-923E-437FA76C97D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D147F0-FF83-4FF4-AEF1-71366E874876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D87C46-D9EC-418B-9C8C-71E7149C72D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F6BE0A-7E2F-457D-B4BA-6BAE1B44E7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C990B390-4768-41B0-BB8B-A56C2524623F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6650BE9D-5F4B-4B22-BD7E-ABCC067D5455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8E0CA9-F6D4-4DD3-A3EA-F3A40965261B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F67B233-3087-43E6-94F2-5DF39FAA36B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7725AEF3-1C47-46B4-A35E-97152A84E731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F6C52C-F602-4C2A-8C8F-4A19DA41186F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F290E5-6508-4F62-8572-31B33750D341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D941B5F-B704-4596-8739-BFE34225DBA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF13359B-162A-41DF-BB4F-DDD6CA2752F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1AE057-A85C-49D9-981A-3314BD945D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E532A66-A12D-48DD-B405-2345E5B715C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A31EA2D-2B01-4928-9B3E-9D666FD2758B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CFDB0B-6FBD-49F3-8238-81E92661297E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1655572D-7D56-4D9D-9E0F-A67DF23FC934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387E0B83-B240-4922-8C57-CE0CDB000888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5B09FF-92DF-4F8D-9A7B-E5086E2B954D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02321D7-2F3E-40F9-9A76-CFF339C93199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF0655C-7C83-4363-A444-993B35D7A7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D0F7C4-902D-4186-8EFF-3876D6D6633E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F87C476-6A55-4B19-97B0-24204E96A63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACC6DD4-384B-44DE-9BC7-6F1DD374E6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D0AC3E-97F7-4A13-8E65-7E424D055E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0048.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16667",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via (1) Help.pm, (2) International.pm, or (3) WebGUI.pm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plainblack:webgui:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.3",
            "matchCriteriaId" : "B9EDB4D2-DC25-41D4-813A-DBE685F8D87F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.plainblack.com/getwebgui/advisories/security-exploit-found-in-6.x-versions",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14732",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.plainblack.com/getwebgui/advisories/security-exploit-found-in-6.x-versions",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE6763A-BD4B-4A6B-8AF3-04B4BCEC4FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3897412E-B35E-44CE-91C6-6BBA9EB5B047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E0FF8C-1AEA-46C0-A867-F2728AA5E069"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112607358831963&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mywebland.com/forums/showtopic.php?t=399",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16699",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112607358831963&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mywebland.com/forums/showtopic.php?t=399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML via (1) dl-search.php or (2) wl-search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:1.0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99020306-8FD3-4544-B64E-79CBBBD052EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014847",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-07T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors, in one or more of the (1) Download, (2) Search, (3) Web links, (4) Blocks, (5) Messages, (6) News, (7) Comments, (8) Settings, (9) Stats or (10) subjects modules."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.72",
            "matchCriteriaId" : "69262F2C-BE08-4C34-B6D0-8EE1EDEF955B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.maxdev.com/index.php?module=News&catid=&topic=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.maxdev.com/index.php?module=News&catid=&topic=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the web server for 3Com Network Supervisor 5.0.2 allows remote attackers to read arbitrary files via \"..\" sequences in the URL to TCP port 21700."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3com:3c15100d:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342BE0EF-989C-40A7-BE08-729825F51B13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16639",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014836",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=300&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=300&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted user authentication credentials."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050907-auth_proxy.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/236045",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050907-auth_proxy.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/236045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8A0D9C-CC8C-419E-8985-49BF866527B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control_server:4.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A259414E-16E7-460D-8C06-5427B3BC4A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control_server:4.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C87D20-F2FB-49D4-9CC9-64F84169F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dameware_development:mini_remote_control_server:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00548409-4AFD-46EB-B7DE-07AAF03715A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/1074.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014830",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/170905",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14707",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42703/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-08/1074.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/170905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42703/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a direct request to admin_main.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_software:hesk:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47728858-FDC6-4DA7-B5C0-BD00EAE55A06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112534893423213&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112545306117124&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16623/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112534893423213&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112545306117124&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16623/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long group name argument to the RenameGroup function in the MMClient.MunduMessenger.1 ActiveX object."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:indiatimes_messenger:indiatimes_messenger:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C217190E-0E67-4060-A22E-253233AC0A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112550635826169&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16633/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014842",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14705",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112550635826169&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16633/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ariba:ariba_spend_management_solutions:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0ECDF9-EB27-4766-B3B2-290E169015F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112552683829473&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112559982413287&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112552683829473&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112559982413287&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nls[file][vx][vxsfx] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87A7B4D-FB2C-4896-BF22-76F5D16A995E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.cmsmadesimple.org/index.php/topic%2C1549.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112552342004406&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16654/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14709",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://forum.cmsmadesimple.org/index.php/topic%2C1549.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112552342004406&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16654/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4584BC-B194-4848-8539-9A39D696C8C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9DC6C5-D228-43AC-8ED1-5A7E5315E275"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112560044813390&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16683/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14712",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014837.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112560044813390&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16683/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014837.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4584BC-B194-4848-8539-9A39D696C8C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9DC6C5-D228-43AC-8ED1-5A7E5315E275"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112560044813390&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16683/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14710",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014837.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112560044813390&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16683/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014837.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4584BC-B194-4848-8539-9A39D696C8C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9DC6C5-D228-43AC-8ED1-5A7E5315E275"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112560044813390&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16683/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014837.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112560044813390&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16683/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014837.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, possibly due to a buffer overflow or off-by-one error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whitsoft_development:slimftpd:3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E1927-940F-433C-84D5-CAE22481FE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014831",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.critical.lt/?vulnerabilities/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.critical.lt/research/slimftpd_dos2.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.critical.lt/?vulnerabilities/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.critical.lt/research/slimftpd_dos2.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smb4k:smb4k:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAA1F65-4E7C-4D07-84C5-E104D6B680A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smb4k:smb4k:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117FD513-0BA4-4B76-B865-7DCD2D8C3CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smb4k:smb4k:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC98527-69EE-425C-B563-320F5A731FB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://smb4k.berlios.de/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:157",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14756",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://smb4k.berlios.de/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as exploited by the \"worm.rbot.ccc\" worm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455ED4E4-8033-4043-BF10-20188BF0B8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9F2EF1-D7CB-4D76-BAC0-EA28E5F9D82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8E031C-CE1F-410F-8F32-B3E33719C498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "87F80FDC-7851-4EA8-BC7D-87B85C6BB93C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971821.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971822.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971832.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971821.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971822.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971832.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pg parameter to printfaq.php, or the (2) Referer or (3) User-Agent HTTP headers, which are not properly handled by error.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB6ACA7-793A-4F98-921F-980F13AEA4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63705B10-5468-4004-AE5F-3540ADBB8BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05FA6C5C-F354-4F1A-B716-791CBEF75A99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16707",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freeguppy.org/download.php?lng=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.freeguppy.org/thread.php?lng=en&pg=81882&fid=1&cat=200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14753",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freeguppy.org/download.php?lng=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.freeguppy.org/thread.php?lng=en&pg=81882&fid=1&cat=200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay (spam proxy) via CRLF sequences in the (1) name or (2) email fields, which are injected into mail headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thesitewizard.com:chfeedback.pl_feedback_form_perl_script:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B290306C-242C-474A-8627-2C3F5765E8A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0094.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14749",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0094.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web script or HTML via the description field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unclassified_newsboard:unclassified_newsboard:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116B875B-A829-43B7-87F0-59B774458706"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112605049014473&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0509-exploits/unb153.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16726",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14748",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605049014473&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0509-exploits/unb153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winace:winace:2.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D2B1B2-B49D-4F22-B4C6-CE0FAF0FDF35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112621008228458&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16479",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19454",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19458",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19581",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19834",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19890",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19938",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19967",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19975",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19977",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20009",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-41/advisory/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-24/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-25/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-27/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-28/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-29/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-30/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-32/advisory/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-33/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-36/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-38/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-46/advisory/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-50/advisory/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/49",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432357/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432579/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433258/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433352/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433693/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434011/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434234/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434279/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436639/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440303/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112621008228458&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-41/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-24/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-25/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-27/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-28/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-29/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-30/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-32/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-33/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-36/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-38/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-46/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-50/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432357/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432579/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433258/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433352/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433693/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434011/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434234/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434279/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436639/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440303/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softstack:free_smtp_server:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB99435-E95B-4AF7-959E-948C4E7421BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=87",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16698",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Fetch.FetchContact.1 ActiveX control (Fetch.dll) for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:rediff:bol:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55647CF1-6480-4E48-A6B7-69A0A56BEA1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infogreg.com/security/im/rediff-bol-7-exposes-wab.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/16685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infogreg.com/security/im/rediff-bol-7-exposes-wab.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Savant Web Server stores user credentials in plaintext in the Savant\\Users registry key, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:savant:savant_webserver:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6A595E-2779-46A2-A091-E01B5EA12CE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=84",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16666",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=84",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikto:nikto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35",
            "matchCriteriaId" : "A0A02611-1E29-4FCA-9C1B-5F3397716FE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112561344400914&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/vulnwatch/2005/Jul-Sep/0032.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cybsec.com/vuln/010905-multiple_webscanner_script_injection.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112561344400914&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/vulnwatch/2005/Jul-Sep/0032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cybsec.com/vuln/010905-multiple_webscanner_script_injection.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in N-Stealth Commercial Edition before 5.8.0.38 and Free Edition before 5.8.1.03 allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-stalker:n-stealth:commercial_5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F11DBE-93FD-40F2-9619-0F2AD6BFBF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-stalker:n-stealth:free_5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB0E6E5-2EDF-4E99-A16F-1F3CF84BF758"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/vulnwatch/2005/Jul-Sep/0032.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cybsec.com/vuln/010905-multiple_webscanner_script_injection.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seclists.org/lists/vulnwatch/2005/Jul-Sep/0032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cybsec.com/vuln/010905-multiple_webscanner_script_injection.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login to the modem with a blank password and gain unauthorized access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:road_runner:adsl_road_runner_modem:annex_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E5DF4F-6991-4F34-A3D5-AE0540957453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112607274800750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112607274800750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C718757-E831-4C17-A9E6-BB31A20AC8EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112603902716918&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16734/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112603902716918&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16734/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "URBAN 1.5.3_1 allows local users to overwrite arbitrary files via a symlink attack on the (1) high score or (2) save game files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:urban:urban:1.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3ABF7A-6270-4430-AE93-DC0BD637C367"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112604855119036&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16680/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112604855119036&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16680/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in aMember Pro 2.3.4 allow remote attackers to execute arbitrary PHP code via the config[root_dir] parameter to (1) mysql.inc.php, (2) efsnet.inc.php, (3) theinternetcommerce.inc.php, (4) cdg.inc.php, (5) compuworld.inc.php, (6) directone.inc.php, (7) authorize_aim.inc.php, (8) beanstream.inc.php, (9) config.inc.php, (10) eprocessingnetwork.inc.php, (11) eway.inc.php, (12) linkpoint.inc.php, (13) logiccommerce.inc.php, (14) netbilling.inc.php, (15) payflow_pro.inc.php, (16) paymentsgateway.inc.php, (17) payos.inc.php, (18) payready.inc.php, or (19) plugnplay.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amember:amember:2.3.4:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "E8594803-99CC-461A-A7D4-5A927DF5261A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112605375926801&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605375926801&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\\Profiles registry key, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mercora:imradio:4.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A07EF1B-C765-41F8-B8BB-51DB8BC876D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014780",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in BlueWhaleCRM allows remote attackers to execute arbitrary SQL commands via the Account ID field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluewhalecrm:bluewhalecrm:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE80E87C-680C-48B0-8A7C-30030205A589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluewhalecrm:bluewhalecrm:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D88A01E-5A37-458F-AF3A-693C11D6F04E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16615",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows local users to obtain sensitive information such as proxy server information and passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ziptorrent:ziptorrent:1.3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035B1AAF-72E5-4315-85E0-7C073995FD0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16542",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.spyinstructors.com/show.php?name=Advisories&pa=showpage&pid=65",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/16542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.spyinstructors.com/show.php?name=Advisories&pa=showpage&pid=65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php or (2) the error parameter to error.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59384A5A-F530-4417-8AFB-005EE4A54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CFC048-C7C5-47E6-A7E9-E1ED99142493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120A58AE-69B7-426D-947D-9C0D9D9CE1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980AC0DB-2759-49D3-8347-C119AFFF8DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CABC8407-173D-466B-B366-5F7F5D9F2F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B0D6C2-AF9E-4395-861D-64502D82589A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666B78D-5DC9-4256-8A23-A4021AE7044A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096B01B4-3CD4-4CB4-8528-D1DB0D0BFB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229DE8B7-489B-4848-B1BE-2339CB771573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BC58E6-CA26-4760-A6A4-D65184A50539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE7C97E-60C6-417F-86F7-963ADE52A895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF189AE-9485-4F8C-AAAE-25088DF6F964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643C7F9B-B8C5-4C76-B706-F8CB5A800936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560BC57D-BDCE-4479-9847-6DB53A89FFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4859644F-E5FF-4AE4-B16D-CC2243964D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DE653E-E7FF-4DE0-A7C8-CC86C95550F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48888218-B238-4F0D-A4C2-E9877D3F3A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A393256A-A5BE-4467-8058-E9CA5D626D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9C4839-2356-4630-BDB3-4A0171F3A785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C55462-6370-45B3-8F00-50F4502981F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BBE005-1FEC-4178-A6A0-CAAB148948F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E7577-5F89-4B2C-9C28-A5268B539968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929F5CD6-51F3-42CF-8BA8-579120DD835D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B58A87-7A30-494D-9A9A-AF9FE6E59600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF345665-3C1D-4F44-B648-B695D88267BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C3F2E1-FEFC-4C04-B337-7AC3E38AE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C525B9-636F-49B9-B528-50AEB0E98F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74632C65-6711-4425-A43F-CCF1664C8542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD740315-190A-43B7-8399-9B72FA592AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794AE77E-843C-4CB4-9462-E4FE8C4C2896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E291BCAA-E2B5-4127-92DA-0BD48EACB6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B51601C-EDDC-41B7-82E9-EA4E7745F935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE1E983-6EA4-4E0F-B7F8-B0070F8A3752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAB33AF-D8A9-444F-AC69-FACCFA0EEB6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600D28-5583-4FA2-835F-BCE10813DB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16605",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1240880&group_id=23067&atid=377408",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1265740&group_id=23067&atid=377408",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1240880&group_id=23067&atid=377408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1265740&group_id=23067&atid=377408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-08T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via certain DHCP responses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101897-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101897-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2871",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-09T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all \"soft\" hyphens (character 0xAD), which is not properly handled by the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0316.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112624614008387&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16764",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16766",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16767",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/83",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014877",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-303.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-837",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/573857",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-57.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19255",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-768.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-769.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5RP0B0UGVW.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.security-protocols.com/advisory/sp-x17-advisory.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-protocols.com/firefox-death.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14784",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-181-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1690",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1691",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=307259",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22207",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1287",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A584",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9608",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0316.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112624614008387&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-303.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/573857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-57.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-768.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-769.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5RP0B0UGVW.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-protocols.com/advisory/sp-x17-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-protocols.com/firefox-death.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-181-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=307259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-09T19:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service (kernel panic) via certain attacks such as SSH brute force, which leads to memset calls using a length based on the u_int32_t type, acting on an array of unsigned long elements, a different vulnerability than CVE-2005-2873."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=322237",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/lsm-2.6.git%3Ba=commit%3Bh=bcfff0b471a60df350338bcd727fc9b8a6aa54b2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=322237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/lsm-2.6.git%3Ba=commit%3Bh=bcfff0b471a60df350338bcd727fc9b8a6aa54b2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-09T19:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONG_MAX, which can cause ipt_recent netfilter rules to block too early, a different vulnerability than CVE-2005-2872."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.blackdown.de/2005/05/09/fixing-the-ipt_recent-netfilter-module/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHBA-2007-0304.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.blackdown.de/2005/05/09/fixing-the-ipt_recent-netfilter-module/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHBA-2007-0304.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2874",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-13T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a \"..\\..\" URL in an HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40BA21C-4F77-4BB3-A75C-A84FD0A752C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF4C8D0-3030-4DD5-800B-76A582A4CD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DE26A5-D9EB-4C89-944D-D1C69C6E7FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E747A07-0E8C-494F-BF0C-5B18EC0AC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734D0C2C-F71F-461A-87EE-202C6B706753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C5DDB0-335F-454F-A672-038E2E095B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.5_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8C59BA-5D45-44D6-BFA4-0609EC6B19DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.5_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291C3E28-19C2-4C01-B52A-AB6A674822AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1741CC9D-C4A8-48F9-86CF-EC20AE2A6BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.6_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F87630-EF23-4F24-AB07-61A8933DE273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.6_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6ECE2C-C09C-435B-A856-4A097CFFEFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.6_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87643004-E24E-494E-A56D-95D1DA05C97B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35E65857-12C7-49DE-AD27-3CACD456231C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B86105-0B9B-459D-9742-EBA7E02BC3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3BE0A1-C73E-4572-9FCF-F069354F9803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.9_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E128DAF6-FB24-4F3E-8462-1B751B2F21C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CEF035-57A6-470B-916A-E5562C28E866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.10_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE113D7-9680-4E60-A9D1-AF531F82A35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F338B2C9-167B-4F2E-883A-2315660B24E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E26BB15-4CF8-4496-A7F7-EB34C444EF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D414984E-4F6B-4278-8346-968587E4B18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C36DCB-2FDD-44E6-85E8-875575AAE69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4B7C23-0C54-4FBA-A774-9CC1E148376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA0EF14-33E6-4D44-B86E-F04014EA3C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5428EE6-F90A-4BB6-9D8C-8B99E80AB6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A786A770-919E-4E23-949D-D836F316618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A2249C-73DE-434E-A41F-4EDB0ADC0845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.19_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176617A7-C4B8-4411-BF53-8F1224166490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.19_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC31855-304C-423F-B186-9BFACDE9E34B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.19_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A80DC4-6443-4204-B297-EB208A12EA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.19_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A74F20-FE2D-42B1-86C6-0D030CA16CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.19_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73AB4D3D-FF35-4A50-A144-3AD41F6F2E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB7653F1-70E2-423F-A6A9-30333644B506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.20_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274916CC-03CC-4E8C-9CF3-8B3A5F630604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.20_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE0846C-B97E-428E-B1F8-E336BDAEFC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.20_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22AE1B0-257F-4B2C-B280-1A1AE1DCE0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.20_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E17EC9-047F-4644-B839-F01C109D3CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.20_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C3628B-2272-4D39-BDF5-7D785933A71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.20_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F27B48-A422-462E-BD61-561347870B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2406EA53-15E7-4CFE-850B-D3CF3FA8560A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.21_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2D30B5-C9A5-4549-B8F0-AD541C9CDFA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.21_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9644EB8E-66D0-4D2F-9FCE-9F226E4FE70E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1512A96-B8E7-4DB7-A4CB-8FD3773BFC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787B918D-9CCC-44FE-92AF-E8DF1E91A3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.22_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F875BE5-7F09-4AAC-AA84-3F88106E4E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lwn.net/Alerts/152835/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1012811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cups.org/relnotes.php#010123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cups.org/str.php?L1042+P0+S-1+C0+I0+E0+Q1042",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-772.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168072",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9774",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/152835/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cups.org/relnotes.php#010123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cups.org/str.php?L1042+P0+S-1+C0+I0+E0+Q1042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-772.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-13T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:py2play:py2play:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58F9F-E12B-49A2-9961-2676AC9676F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=326976",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://soya.literati.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=103524",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=326976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://soya.literati.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=103524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2876",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-13T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.8.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33EBEAFD-9506-4F5D-B145-97A998752D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.8_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCE2B16-1699-4998-8AB9-CD6BD66D4EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.9i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8473B1B6-F64B-4A94-A436-AAB7C10912A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.9w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8996CAE7-3CFE-4481-B4F8-944A3B1B748A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.10f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CBB57F-72BC-4899-A1F5-82A8BAF26B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.10m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED60F9-A0E5-4049-8E3F-B7DC2A2F7D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.10p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D64FC4-EE57-4C5A-ABC1-B8C6351585FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.11f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE56638F-4097-4754-80A8-88EC5DAB132A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.11n:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5373C2C3-A866-4DF4-96D9-D00F5BF07D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.11q:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4DD2A16-D7AA-45DC-8B19-C51BBEEE3AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.11r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A57348A8-EA3B-4D7A-9156-94AFC9818EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.11w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86899B54-F091-4D70-9297-3F3C027EDDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.11x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664298E8-22D1-4080-8C5C-F66D0B00B5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.11y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3B84FF0-B48C-4373-B697-214FF6A74989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.11z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4519C9-569D-4466-B010-CCE9B1744323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.12a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A0D9EB-8FB6-41EB-9ED2-94B5C397430B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.12b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923880C5-C499-4F64-BA8E-F8388E03CF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.12i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1575911-8617-400C-BDFD-1F230C366A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.12j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823F2832-A2FC-4443-898E-207EB2D560E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.12k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE5A6BC-B02A-4A9E-941A-6EDE3B96F5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.12o:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81ECE3B-93A6-4A8E-92F8-3AE6DA1E4EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.12p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA7F4D3-1B94-46F0-B0BA-03B166823789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.12q:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07AB6672-CA16-4ACE-8939-AE833359FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.13_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33AB7B0C-56BE-4B72-B413-05779FF3261E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_brouwer:util-linux:2.13_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59EED347-3CB1-4F51-86E2-5350EDEC186E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112656096125857&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112690609622266&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16785",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16988",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17133",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17154",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18502",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101960-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-825",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19369",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419774/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14816",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-184-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22241",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10921",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112656096125857&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112690609622266&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101960-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419774/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-184-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-13T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailutils:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D061351-9F01-4F19-A323-60DC9CD2C915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112785181316043&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rosiello.org/archivio/imap4d_FreeBSD_exploit.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112785181316043&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rosiello.org/archivio/imap4d_FreeBSD_exploit.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1913",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-14T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-leader thread executing a different program than was pending in itimer, which causes the signal to be delivered to the old group-leader task, which does not exist."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/15786/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-178-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21138",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15786/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-178-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2490",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-14T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users to execute arbitrary code by calling sendmsg and modifying the message contents in another thread."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112690609622266&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16747/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14785",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-178-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166248",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22217",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10481",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112690609622266&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16747/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-178-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2492",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-14T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6172AF57-B26D-45F8-BE3A-F75ABDF28F49"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112690609622266&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/16747/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14787",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-178-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166830",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22218",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11031",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112690609622266&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/16747/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-178-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advansysperu Software USB Lock Auto-Protect (AP) 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain sensitive information and bypass USB interface protection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advansysperu_software:usb_lock_auto-protect:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E14E3C3-2B57-48FC-8664-57D1A6B2445E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112606328118852&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.shadock.net/secubox/.data/adv_usblock/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112606328118852&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.shadock.net/secubox/.data/adv_usblock/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the (1) login field in login.php or (2) LocationID parameter to week.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D155C94-4DA8-438C-9707-6DC47969650A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3FE5-E74A-4E09-9329-BC808A9145C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA34851-6B34-4555-8988-D377EA20F3A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112605610624004&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpccal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16721/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14763",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605610624004&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpccal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16721/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized access via a direct request to the admin directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA34851-6B34-4555-8988-D377EA20F3A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112605610624004&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpccal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605610624004&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpccal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the LocationID parameter to (1) thankyou.php or (2) day.php, font parameter to (3) calDaily.php, (4) calMonthly.php, (5) calMonthlyP.php, (6) calWeekly.php, (7) calWeeklyP.php, (8) calYearly.php, (9) calYearlyP.php, (10) day.php, or (11) week.php, or (12) CeTi, (13) Contact, (14) Description, (15) ShowAddress parameter to event.php, and other attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D155C94-4DA8-438C-9707-6DC47969650A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3FE5-E74A-4E09-9329-BC808A9145C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA34851-6B34-4555-8988-D377EA20F3A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112605610624004&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpccal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16721/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14767",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605610624004&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpccal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16721/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2023-11-07T01:57:43.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2855.  Reason: This candidate is a duplicate of CVE-2005-2855.  Notes: All CVE users should reference CVE-2005-2855 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD6B4B4-B7A5-4D40-A592-F560A0D51C2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AFAA03-3EE3-4903-8D6B-01D752C04716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBE0C14-CC8B-41FE-ABD9-C9C02813C7AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6B6217-DD6C-41C5-AB0C-DE7B989C79D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61969A06-96C3-4142-9065-6A8C2EFD557C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9B3FBC-54DB-4D21-B1AB-BC7721FD138E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B7E614-0CB5-4AAF-B274-150DA5B85463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D278AA-9952-4117-B789-0E597D0E5599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B013ADC-809F-4DFE-913B-FE3B8974404C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:801:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A05DCF-C183-434B-BF4C-8F2228060EF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112604873103252&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16710/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14746",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112604873103252&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16710/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which could allow remote attackers to bypass file extension checks and execute arbitrary commands by uploading a file with a different extension, as demonstrated using .inc files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:1.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D8CEF6-E28C-4F21-B71D-F82272AA7A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112603835317458&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16731/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14750",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112603835317458&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16731/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via (1) the print parameter to the print module, the sitename parameter to (2) bb_smilies or (3) bbcode_ref module, or (4) the hlpfile parameter to openwindow.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:1.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D8CEF6-E28C-4F21-B71D-F82272AA7A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112603835317458&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/maxdev1073.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16731/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14751",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112603835317458&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/maxdev1073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16731/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) wiki.php, (2) AutoTheme directory, (3) Blocks directory, (4) admin.php, (5) pnadmin.php, or (6) Topics directory, which reveal the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:1.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D8CEF6-E28C-4F21-B71D-F82272AA7A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112603835317458&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/maxdev1073.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16731/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112603835317458&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/maxdev1073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16731/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2BF5B5-6364-44D5-9CB0-4C9070B88CB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112611068702781&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16738/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112611068702781&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16738/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Check Point NGX R60 does not properly verify packets against the predefined service group \"CIFS\" rule, which allows remote attackers to bypass intended restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:connectra_ngx:r60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E427D5-F42E-4781-A933-B6AE3A84AB7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112611529724821&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/508209",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112611529724821&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/508209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SecureOL VE2 1.05.1008 does not properly restrict public access to physical memory, which allows local users to bypass intended restrictions and gain access to the secured environment via direct access to the PhysicalMemory device."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secureol:ve2:1.05.1008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652CD56D-686B-4250-B59F-0A2CE301E3BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cybermessageboard.xeran.com/secureol/viewtopic.php?t=26",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112610983428771&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16739/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14768",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cybermessageboard.xeran.com/secureol/viewtopic.php?t=26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112610983428771&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16739/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read or write to arbitrary files via the (1) MakeArchive or (2) MakeArchiveStr methods."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:csystems:webarchivex:5.5.0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DA9255-15D1-4967-B9FA-70BC643E445F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112611388014937&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16722/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security-assessment.com/Advisories/WebArchiveX_-_Unsafe_Methods_Vulnerability.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014867.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112611388014937&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16722/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security-assessment.com/Advisories/WebArchiveX_-_Unsafe_Methods_Vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014867.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to read arbitrary files via \"..\" sequences and \"%00\" (trailing null byte) in the u parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8178A159-1008-4DC9-A7EC-17C051D21896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112611338417979&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16711/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014861.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14765",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112611338417979&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16711/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014861.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via the username (u parameter), which is directly injected into a file that is later executed upon login."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8178A159-1008-4DC9-A7EC-17C051D21896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112611338417979&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16711/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014861.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112611338417979&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16711/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014861.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary web script or PHP via the location field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8178A159-1008-4DC9-A7EC-17C051D21896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112611338417979&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112611338417979&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive information via a %00 (a null byte) in the u parameter, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8178A159-1008-4DC9-A7EC-17C051D21896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112611338417979&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014861.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112611338417979&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014861.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_userpw parameter to startup.php, (2) cat, (3) id, or (4) stof parameter to news.php, or (5) id parameter to print.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stylemotion:web_news:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852E3E97-B791-4878-8C32-48027A2D6AEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112611504519410&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16727/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14776",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112611504519410&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16727/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error message, as demonstrated using cat.add.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stylemotion:web_news:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852E3E97-B791-4878-8C32-48027A2D6AEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112611504519410&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16727/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112611504519410&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16727/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOTE: this issue has been disputed by the vendor.  FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when \"Use secure mode\" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive information.  NOTE: the vendor has disputed the issue, stating that \"the problem is not a vulnerability at all, but in fact a fundamental issue of every single program that can store passwords transparently."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filezilla:filezilla:2.2.14b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3192F9E2-D38E-4563-B148-3F0B5C3FBB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filezilla:filezilla:2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC390AF-5CEB-4201-B719-3A1132CBC05C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://filezilla.sourceforge.net/forum/viewtopic.php?t=1328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112577523810442&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605448327521&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14730",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://filezilla.sourceforge.net/forum/viewtopic.php?t=1328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112577523810442&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112605448327521&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in details.php in CjTagBoard 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date, (2) time, (3) name, (4) ip, (5) agent, or (6) msg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cj_design:cj_tag_board:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFC4925-A3D8-440D-BEAF-358AA94BB22E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112629507412619&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112629507412619&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in top.php in CjLinkOut 1.0 allows remote attackers to inject arbitrary web script or HTML via the 123 parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cj_desing:cjlinkout:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2781D647-FC3E-4F7D-B508-44F467214DAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112629507412619&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112629507412619&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-site scripting (XSS) vulnerabilities in CjWeb2Mail 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) message, or (3) ip parameter to thankyou.php or (4) emsg parameter to web2mail.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cj_desing:cjweb2mail:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B010DF2-1DCD-47ED-9813-125B6C8ABF73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112629507412619&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112629507412619&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute arbitrary SQL commands and bypass the file extension check via SQL code in the file extension of an uploaded file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:class-1:class-1_forum:0.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A9B91F-6D3C-4D7E-BEFA-623BF5E8F980"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112629627512785&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16762/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rgod.altervista.org/class1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14774",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112629627512785&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16762/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rgod.altervista.org/class1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning enabled, allows remote attackers to execute arbitrary code via an ARJ archive containing a file with a long filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eset_software:nod32_antivirus:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1997DD1E-C6D2-441D-B5C6-1FC9F1D8B04E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112621063025054&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16604/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-40/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112621063025054&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16604/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-40/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zebedee 2.4.1, when \"allowed redirection port\" is not set, allows remote attackers to cause a denial of service (application crash) via a zero in the port number of the protocol option header, which triggers an assert error in the makeConnection function in zebedee.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zebedee:zebedee:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC5850F-3F81-4348-A09A-8DAC53DE7ECF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112629543605488&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16788/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-14.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14796",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112629543605488&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16788/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTTP POST request with a negative Content-Length value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2930D914-EBA6-48D7-8D61-A7B0C3A140BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.03.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9F2EDC-30F5-480E-8E6E-4D0C553AE281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:4.00.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D095E4-B0FC-4BFF-9E72-DFDE308A9062"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=308&type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=308&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T21:03:00.000",
      "lastModified" : "2023-11-07T01:57:43.727",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2799.  Reason: This candidate is a duplicate of CVE-2005-2799.  Notes: All CVE users should reference CVE-2005-2799 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, does not use an authentication initialization function, which allows remote attackers to obtain encrypted configuration information and, if the key is known, modify the configuration."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:2.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E807422-77F7-4B91-9397-D974F339801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2930D914-EBA6-48D7-8D61-A7B0C3A140BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.03.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9F2EDC-30F5-480E-8E6E-4D0C553AE281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=304&type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=304&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, uses weak encryption (XOR encoding with a fixed byte mask) for configuration information, which could allow attackers to decrypt the information and possibly re-encrypt it in conjunction with CVE-2005-2914."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:2.04.4_non_default:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EF028B3-314E-4F04-8CBB-87314907AB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2930D914-EBA6-48D7-8D61-A7B0C3A140BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.03.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9F2EDC-30F5-480E-8E6E-4D0C553AE281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=304&type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=304&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-14T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2930D914-EBA6-48D7-8D61-A7B0C3A140BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.03.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9F2EDC-30F5-480E-8E6E-4D0C553AE281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:4.00.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D095E4-B0FC-4BFF-9E72-DFDE308A9062"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=306&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=307&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=306&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=307&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2495",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-15T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:xfree86:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6D4B1E-5950-4AE9-A6C7-C53E4BC2EB83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:xfree86:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37AEA57-46E9-4311-B6BA-946AD177F0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:xfree86:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0548CC0F-9218-46C2-AB29-C9747973FF4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:xfree86:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE78110-ED1B-48DA-9230-AA29C09D309A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:xfree86:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB0F0D7-44DE-42F3-A998-05E87BA93707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:xfree86:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E1B896-1C7B-431A-953A-DAFF992743BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:xfree86:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2687DEE-9643-4B8E-BF12-990711F88A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:xfree86:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F9477A-7DDA-4E9D-ADE8-5A3A7CADBA2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.22/SCOSA-2006.22.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112690609622266&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16777",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17044",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17215",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17258",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17278",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19624",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19796",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21318",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014887",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101926-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101953-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-218.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-226.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-816",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/102441",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:164",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_23_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_56_xserver.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19352",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-396.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-501.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9285",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9286",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427045/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442163/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442163/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14807",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3140",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22244",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9615",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-182-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.22/SCOSA-2006.22.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112690609622266&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101926-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101953-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-218.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-226.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/102441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_56_xserver.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-396.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427045/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442163/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442163/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-182-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2658",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-09-15T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwolves_software:turquoise_superstat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "067BB79F-B66F-4ED9-A044-42D9916E8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwolves_software:turquoise_superstat:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400F4892-E6B1-435A-8100-6CE700AD8B18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.alioth.debian.org/cgi-bin/cvsweb.cgi/turqstat/utility.cpp.diff?cvsroot=turqstat&r2=1.41&r1=1.40&f=u",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-812",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14852",
        "source" : "security@debian.org"
      }, {
        "url" : "http://cvs.alioth.debian.org/cgi-bin/cvsweb.cgi/turqstat/utility.cpp.diff?cvsroot=turqstat&r2=1.41&r1=1.40&f=u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-15T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2930D914-EBA6-48D7-8D61-A7B0C3A140BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.03.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9F2EDC-30F5-480E-8E6E-4D0C553AE281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.idefense.com/application/poi/display?id=305&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=305&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-15T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The open_cmd_tube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the gtkdiskfree temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gtkdiskfree:gtkdiskfree:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.3",
            "matchCriteriaId" : "61ECBF8D-090D-4968-986B-6F01B7507161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=104565",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680706715109&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/gtkdiskfree-09052005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=104565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680706715109&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/gtkdiskfree-09052005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-15T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malicious c:\\program.exe file, which is run by AntiSpywareMain.exe when it attempts to execute gsasDtServ.exe.  NOTE: it is not clear whether this overlaps CVE-2005-2940."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:antispyware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9881409-D7DA-4798-AC87-E07FE489E890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033909.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033910.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033909.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033910.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2000-12-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89599BC3-E1D8-4670-9321-F63A788096A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2001-12-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CC3B43-A77A-471E-A0ED-E91E53C2400C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2003-02-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374ADC0F-0EE2-4DEC-8A37-5F5F15C8137A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2004-09-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC5965A-BFC8-42B3-AF13-28E097381E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2004-09-02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94AFFF9-5951-43A9-8018-B10C3F097CE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112680475417550&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithRev",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/757181",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14834",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680475417550&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithRev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/757181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwcc_out.txt temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brent_ely:gnome_workstation_command_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.6",
            "matchCriteriaId" : "C22164D6-BF31-4055-847D-AAFD416E8681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brent_ely:gnome_workstation_command_center:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB351CBF-5ACF-4FE4-9B89-79E9FB4720FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=104566",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/gwcc-09052005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=104566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/gwcc-09052005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arc:arc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.21j",
            "matchCriteriaId" : "0BD70602-CD91-42E5-96B2-3580D6E13A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112689596714383&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16805",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/arc-09052005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112689596714383&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/arc-09052005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2657",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the cache directory, which is executed by another user if the user has not run Common Lisp before."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:common-lisp-controller:common-lisp-controller:4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD357A83-5979-44BD-B96B-E53736808F15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16822/",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-811",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14829",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22275",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16822/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authority signature."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.8",
            "matchCriteriaId" : "725D1BFE-7122-43F8-A9EC-E1737C7AD73C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cits.rub.de/MD5Collisions/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-179-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=13593",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cits.rub.de/MD5Collisions/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-179-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=13593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169803\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n",
        "lastModified" : "2006-09-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDescription in the version resource."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:killprocess:killprocess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "7C224881-03AB-436A-945E-997D7FC49A85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112629480300071&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112629550418406&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14795",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112629480300071&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112629550418406&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which are not all killed by KillProcess."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:killprocess:killprocess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "7C224881-03AB-436A-945E-997D7FC49A85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112629480300071&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112629480300071&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pam_per_user before 0.4 does not verify if the user name changes between authentication attempts and uses the same subrequest handle, which allows remote attackers or local users to login as other users by using certain applications that allow the username to be changed during authentication, such as /bin/login."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mark_d._roth:pam_per_user:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E588550D-DDEE-4BA4-B6A0-22DD1C25081E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mark_d._roth:pam_per_user:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D22CC9-42EE-4A69-9E5F-E90303907CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mark_d._roth:pam_per_user:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A114B6-1631-46BB-A09D-8333B99FE4E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112654636915661&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16781/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14813",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112654636915661&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16781/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F60FCBD-D8B1-4E69-B8C3-32659106B636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44518027-BCA4-45E5-8416-75FE36AD6D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21913F12-4790-487D-84F4-48EB09AB042A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6CC4EE-265E-47D2-B820-ACB4EF100953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDC8E37-ADF0-452D-A344-8A93ACB89D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78385D9-4652-48ED-A5E7-F50340D70F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6E5F4-73AF-4BDB-A2B4-2F24064F1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD29FBC-959E-4EBA-9C5A-7B6BCF53A2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C91865B-6527-466D-A88D-17E1CC8A1B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAAFA876-B95A-40E5-9E42-8B37315BDE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3D5C1E-80B7-413B-B49D-8DE6CC919770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D5321E-DE25-4FC4-81EC-E6C9EC7BA836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B790CF30-97C7-46A2-A300-E4D417870DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A328FB8-ECC3-47D8-82B4-89372DD9A324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC7D8F1-454E-43A5-A886-3EA91E05F3DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1916BD3D-51AF-4A25-8EAA-018C84B58B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1DB0AB-5BC6-4C26-8223-E6F11FDC8293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD07081-4460-4633-AE01-36BEE03193A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8B60B1-DA99-46BC-AA84-0D5D620D6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2979BD-01B9-4BF3-9C24-E529D11F435C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF43285-C448-436D-9089-C6D97802DCDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.0.10k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65814DFE-6E73-4C78-BAAA-B7FBA9FBF526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A088B4E4-9A13-4F39-9708-40529410AB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F21B42F-56C2-422C-BFC8-701EDDCBE9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A84B18-C5EA-4038-8123-1C9C2511BBCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68176849-3128-4112-BCF0-577253552456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE9E422E-7EB8-407D-9DC4-4CCB83FAC834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7887413C-0F1B-4EBC-8E97-8ECC9EB8336D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F909B4-62F6-4FD4-A0FB-F0BE918A2553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F95EF53-7961-42A8-9BC5-0C53D6E81925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1737B143-D96E-4B6F-9623-E5F41EB70074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF662B3-B127-4EB4-AD53-E528E626356C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830F3AE5-B93F-48E4-B6EB-A5D2974274E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF0A754-420A-483E-BCD4-A46FC034D587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF319AD0-BEEB-4348-A0BE-EAB4DB1D7F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C200EAB1-5F45-408D-BF1B-BEDAD2B1C06B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA5873ED-6E24-414A-92E9-01CE03C83284"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112654659400488&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16744/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nta-monitor.com/news/xss/sawmill/index.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sawmill.net/version_history.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112654659400488&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16744/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nta-monitor.com/news/xss/sawmill/index.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sawmill.net/version_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP commands via \"..\" sequences and \"%00\" (trailing null byte) characters in the l parameter, which is used in an include_once statement."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azerbaijan_development_group:azdgdating:2.1.3:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "07FE764A-E594-4FF3-A514-51D64E2083E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112662698511403&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/azdg.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16814/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14819",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112662698511403&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/azdg.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16814/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subscribe_me_pro:subscribe_me_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.44.09p",
            "matchCriteriaId" : "462A9238-36B1-410D-A415-B2573B3996D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112662785418368&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16796/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYA-2005-007-subscribe-me-pro.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14817",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112662785418368&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16796/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYA-2005-007-subscribe-me-pro.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the Customer_Login parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miva:miva_merchant:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2CEC79-B233-4A90-9295-11D6825FD75A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112684680903655&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16829/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14828",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112684680903655&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16829/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands via the email field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BDCA86-C4D0-49B1-A8FE-E81C9B29B04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112671176100432&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/atutor151.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16813/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.atutor.ca/news.php#150905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14831",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112671176100432&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/atutor151.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16813/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.atutor.ca/news.php#150905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which allows authenticated administrators or educators to execute arbitrary code by uploading files with other executable extensions such as .inc, .php4, or others."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BDCA86-C4D0-49B1-A8FE-E81C9B29B04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112671176100432&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/atutor151.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112671176100432&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/atutor151.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain user chat conversations via direct requests to those files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BDCA86-C4D0-49B1-A8FE-E81C9B29B04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112671176100432&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/atutor151.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14832",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112671176100432&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/atutor151.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-16T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows remote attackers to execute arbitrary code via a long filename in an ACE archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:desktop:1.00.00.68:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "77ACD1B5-5B42-43B0-89BC-218501A375F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112671128224841&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16691/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-43/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.avira.com/en/news/avira_desktop_for_windows_patched_against_vulnerability.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14824",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112671128224841&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16691/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-43/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.avira.com/en/news/avira_desktop_for_windows_patched_against_vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitrary SQL commands via the rollid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79C54F6-77EA-4F4E-985F-42197AF3C242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069849DD-B4E3-44FC-9084-0251B7C21266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112680539610442&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16826/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irannetjob.com/index.php?option=com_content&task=view&id=122&Itemid=28",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14833",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680539610442&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16826/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irannetjob.com/index.php?option=com_content&task=view&id=122&Itemid=28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers to inject arbitrary web script or HTML via the rollid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069849DD-B4E3-44FC-9084-0251B7C21266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112680539610442&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16826/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irannetjob.com/index.php?option=com_content&task=view&id=122&Itemid=28",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14835",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680539610442&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16826/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irannetjob.com/index.php?option=com_content&task=view&id=122&Itemid=28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting 404 error page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orionserver:orion_application_server:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D4A424-804A-45DE-9CAE-10A158A280B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orionserver:orion_application_server:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5CA04A-BEE3-490F-B41B-6175A319FBAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112680922318639&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680922318639&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CompaqHTTPServer 2.1 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting 404 error page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compaq:compaqhttpserver:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BAA59BE-3665-459C-81B7-CB3539405176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112680922318639&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680922318639&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Oracle Reports that use Lexical References allows remote attackers to execute arbitrary SQL commands via the values in the parameter form that appears when the paramform parameter is set to yes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:reports:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE97CE2B-61B8-4DB3-A91E-8F5E1A6860F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037156.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112681849113948&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/wp/sql_injection_reports_us.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112681849113948&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/wp/sql_injection_reports_us.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to the server via SSH and using the connect command to access the serial port."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:data_center_resources:avocent:ccm4850_2.1_firmware:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE7177C-4C14-43EC-8C31-54733A5B7133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drwetter.org/cs-probs/avocent-sshbug.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680615103315&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16836/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14853",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drwetter.org/cs-probs/avocent-sshbug.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680615103315&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16836/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aewebworks:aedating:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5538E8-12A8-47B2-B6A5-5E18D2716812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aewebworks:aedating:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0D4220-1B34-4189-8755-3338E5C4CC69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112681800009262&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16831/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14847",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112681800009262&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16831/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, V3Net for Windows Server 6.0 Build 6.0.0.383 does not properly validate the source of the DeviceIoControl commands, which allows remote attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:v3_virusblock_2005:6.0.0.383:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CA7FD9-0821-4659-A417-D777B30B99F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:v3net:6.0.0.383:*:win_server:*:*:*:*:*",
            "matchCriteriaId" : "14FB3E59-C46A-4A06-9394-583ED5A33E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:v3pro_2004:6.0.0.383:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C916FC5-2E7D-434B-BA6F-6BF69667543C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://info.ahnlab.com/english/advisory/01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680062609377&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15674/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://info.ahnlab.com/english/advisory/01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680062609377&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15674/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digital_scribe:digital_scribe:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC4DD44-AF5F-4146-A714-0103191CB4C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112680124115325&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/dscribe14.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16841/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14843",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680124115325&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/dscribe14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16841/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed documents without proper protection, which could allow remote attackers to obtain sensitive information via SNMP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2430:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F804968D-0241-4C20-BAAC-684BA46B67F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112684965506652&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112684965506652&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter to topic.php, the uid parameter to (2) misc.php or (3) pm.php, or the fid parameter to (3) forums.php or (4) newpost.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3543354-4CC9-4C62-ACCE-6B646F797245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A65D83C-FB89-46C8-8ABA-D9F66ACE8B88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16819",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14851",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AuthInfo.java in LineContol Java Client (jlc) before 0.8.1 stores sensitive information such as user passwords in log files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linecontrol:java_client:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D405C78D-A04A-4541-B74F-8825C2F23F1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16817",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=356248",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14830",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=356248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2991",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-20T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using (1) zdiff or (2) zcmp, a different vulnerability than CVE-2004-0970."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncompress:ncompress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.4_r1",
            "matchCriteriaId" : "2B6EBAF3-A0BB-4E0B-9D26-80E824594F2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112689772732098&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112688098630314&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/12",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.zataz.net/adviso/ncompress-09052005.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112689772732098&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112688098630314&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/ncompress-09052005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue did not affect the ncompress packages as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru64 UNIX 5.1B-3, and HP-UX B.11.00, B.11.04, B.11.11, and B.11.23, allows remote authenticated users to cause a denial of service (hang)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1b3",
            "matchCriteriaId" : "A1F3E736-9290-419D-A858-08715798D453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:4.0f:pk8:*:*:*:*:*:*",
            "matchCriteriaId" : "884D55C0-F5EB-484E-8886-1C6C12320BCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18543",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18569",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-018.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422391/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422391/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16316",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1801",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0264",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-018.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422391/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422391/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2968",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.10:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5BCA46FD-F3CB-44E5-A383-B6D3800B7BBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16869",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/914681",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14888",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-186-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-186-2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=307185",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11105",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/914681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-186-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-186-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=307185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. These issues did not affect the versions of Mozilla and Firefox as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before SR5, allows remote attackers to execute XML Style Sheets (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:5.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CA0764-1ACB-4173-8396-36DD513CD538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66343779-B8F9-4338-B949-3838AC7471B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:6.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A02B2A2-7D88-47AB-95C8-E38A0C174A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5E8200-BB7C-48DE-B946-27535E6F5D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C470CD7-AD2F-450A-BDD2-97328BCD3375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B751150-4AA5-4D2A-992D-5183402F5B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F41B74B7-3941-4B02-A2E5-43A506A593E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "741D5574-B635-46F5-BAC5-5427E0B305CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16717",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21216901&loc=en_US&cs=utf-8&cc=us&lang=all",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21216901&loc=en_US&cs=utf-8&cc=us&lang=all",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary file used by autoconf/randpass when openssl is not available, or (2) the mtx.[PID] temporary file in mtx-changer.in."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacula:bacula:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.36.3",
            "matchCriteriaId" : "4E22C1AF-AAD5-4CAB-AB5D-C0F3BD4ABBD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=104986",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112721654126735&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.zataz.net/adviso/bacula-09192005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=104986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112721654126735&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.zataz.net/adviso/bacula-09192005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_exec:5.3_rev._2190r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFDD6F7-B59E-45EA-9D69-9019A0287971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storagecentral:5.2_rev._2190r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941EC206-C34C-4B8F-BF74-960868378CC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16871",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.09.19.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/620497",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/927793",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/16871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.09.19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/620497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/927793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in PHP Advanced Transfer Manager 1.30 allow remote attackers to read arbitrary files via \"..\" sequences in (1) the currentdir parameter to txt.php, or the current_dir parameter to (2) htm.php or (3) html.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926377DC-6623-4DBF-A962-5D371737C749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/phpatm130.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpatm130.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926377DC-6623-4DBF-A962-5D371737C749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/phpatm130.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://rgod.altervista.org/phpatm130.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Advanced Transfer Manager 1.30 allows remote attackers to obtain sensitive PHP configuration information via a direct request to test.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926377DC-6623-4DBF-A962-5D371737C749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/phpatm130.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpatm130.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in viewers/txt.php in PHP Advanced Transfer Manager 1.30 allow remote attackers to inject arbitrary web script or HTML via the (1) font, (2) normalfontcolor, or (3) mess[31] parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926377DC-6623-4DBF-A962-5D371737C749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/phpatm130.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16867",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/phpatm130.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial of service (infinite loop) via a crafted FSG packed executable."
      }, {
        "lang" : "es",
        "value" : "libclamav/fsg.c en Clam AntiVirus (ClamAV) en versiones anteriores a 0.87 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un ejecutable empaquetado FSG ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-17"
        }, {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508C140C-2F87-4270-85B0-00EA6678A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3033A4A2-47E9-434F-BA0A-0F2476A67899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1EDFB4-B0C8-4832-BCA1-C35D28877581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330A535-A376-4BFF-BB1B-31E83370FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E2884A-615F-4063-8FB7-EC157C3EC07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BC41B7-272F-44BB-BD48-6C9231402526"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=356974",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_55_clamav.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=356974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_55_clamav.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508C140C-2F87-4270-85B0-00EA6678A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3033A4A2-47E9-434F-BA0A-0F2476A67899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1EDFB4-B0C8-4832-BCA1-C35D28877581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330A535-A376-4BFF-BB1B-31E83370FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E2884A-615F-4063-8FB7-EC157C3EC07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BC41B7-272F-44BB-BD48-6C9231402526"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=356974",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/363713",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_55_clamav.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=356974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/363713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_55_clamav.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the \"tl\" driver in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16874",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101899-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101899-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-20T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multi-Computer Control System (MCCS) 1.0 allows remote attackers to cause a denial of service via a malformed UDP packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xclusive-software:mccs:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "481F58E0-BF80-4325-BE92-93C69BC9EB1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=93",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2662",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-09-21T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A68123-4DD9-4830-AB08-22158B165D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3185B6E3-8461-433F-B99D-6317760BA39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5BC49C-C86C-4DBB-8853-8838AF64C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A365F9D-D1F5-4809-94F5-CCE99ACBBC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DF3F37-A462-4765-AC57-86A012FB2BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA5F557-B379-4817-8641-52166BF377BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22543A3-50D9-40EE-8E38-DEB689979C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57643AB3-E146-406B-9181-A1884154215B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E7934-3F5C-47F4-BBD9-8F28D15F77DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45284864-C048-47CB-8605-D65F53573112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4215BBC-2BF0-442E-BDCB-470A3BE41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C4DAE9-CF55-459A-8832-C83488617A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624F1C66-698D-4DCD-82CC-737C41C8675D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA15EFE5-4CE4-4013-BB28-2D30A51170A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E25178-EA89-451C-84A2-0328190481F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09AEBFD-021A-48E7-BC2F-4E2195D94BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459FEC27-B87B-470A-944C-8B4DA453E8FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB11DE09-1622-4566-A1F8-0634F3D4CA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ED9745-5B8D-4F2E-8904-00B8118CFEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0623ADEA-8131-4BFD-9442-5837EE3C0C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFECA71-AC24-48DA-9449-F1490AFC05A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2FD795-09DB-46A1-87DD-6CA4D0865950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B01E23-DD31-4786-9A03-67FD786681E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894C3774-9ABD-4D66-840C-8599EB3B8889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C5624-FF26-4AA9-B4B1-A4C397FDA67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA05A312-AC06-455F-8B7A-C5970FB84622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3BD137-DEB0-4088-A4FF-25EF783E4D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7402381F-E2D9-45C5-98D6-F2AF95495A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D93C9-1B1A-498D-BE8C-E8503E087804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BAE956-6452-4F0F-9F0B-0DA07D8804A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01E033C-58E9-4CBE-AD52-6B93B74BA613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE57A1ED-6E75-40E5-87CD-07AE9169483D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727764E6-1304-4A82-9DF4-1B3EFAB42E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBBCAB4E-1352-4E16-8233-0AB95165F717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78F4E9D-17C9-4350-8864-B38FA4678F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6924D84E-4A77-4B43-A9DB-63DCDB5F675C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263988ED-6403-4C94-9F19-E703347F7159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A8D48D-3F8A-414E-8E5E-5DCF17934392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA37BC96-D623-4EB4-9C40-6C9A1CB4EFE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C15571-BCB7-474A-8063-C59FABA29A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9A0F39-BFC5-4D2A-B000-787BCC5FEAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E6A806-929A-4198-9859-A65E32055A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE6FA46-A8B1-4D0C-9E40-192E0231DC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16883",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17109",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-848",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:168",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=19583",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14890",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1807",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22346",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=19583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2663",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-09-21T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A68123-4DD9-4830-AB08-22158B165D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3185B6E3-8461-433F-B99D-6317760BA39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5BC49C-C86C-4DBB-8853-8838AF64C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A365F9D-D1F5-4809-94F5-CCE99ACBBC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DF3F37-A462-4765-AC57-86A012FB2BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA5F557-B379-4817-8641-52166BF377BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22543A3-50D9-40EE-8E38-DEB689979C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57643AB3-E146-406B-9181-A1884154215B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E7934-3F5C-47F4-BBD9-8F28D15F77DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45284864-C048-47CB-8605-D65F53573112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4215BBC-2BF0-442E-BDCB-470A3BE41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C4DAE9-CF55-459A-8832-C83488617A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624F1C66-698D-4DCD-82CC-737C41C8675D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA15EFE5-4CE4-4013-BB28-2D30A51170A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E25178-EA89-451C-84A2-0328190481F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09AEBFD-021A-48E7-BC2F-4E2195D94BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459FEC27-B87B-470A-944C-8B4DA453E8FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB11DE09-1622-4566-A1F8-0634F3D4CA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ED9745-5B8D-4F2E-8904-00B8118CFEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0623ADEA-8131-4BFD-9442-5837EE3C0C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFECA71-AC24-48DA-9449-F1490AFC05A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2FD795-09DB-46A1-87DD-6CA4D0865950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B01E23-DD31-4786-9A03-67FD786681E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894C3774-9ABD-4D66-840C-8599EB3B8889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C5624-FF26-4AA9-B4B1-A4C397FDA67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA05A312-AC06-455F-8B7A-C5970FB84622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3BD137-DEB0-4088-A4FF-25EF783E4D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7402381F-E2D9-45C5-98D6-F2AF95495A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D93C9-1B1A-498D-BE8C-E8503E087804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BAE956-6452-4F0F-9F0B-0DA07D8804A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01E033C-58E9-4CBE-AD52-6B93B74BA613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE57A1ED-6E75-40E5-87CD-07AE9169483D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727764E6-1304-4A82-9DF4-1B3EFAB42E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBBCAB4E-1352-4E16-8233-0AB95165F717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78F4E9D-17C9-4350-8864-B38FA4678F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6924D84E-4A77-4B43-A9DB-63DCDB5F675C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263988ED-6403-4C94-9F19-E703347F7159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A8D48D-3F8A-414E-8E5E-5DCF17934392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA37BC96-D623-4EB4-9C40-6C9A1CB4EFE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C15571-BCB7-474A-8063-C59FABA29A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9A0F39-BFC5-4D2A-B000-787BCC5FEAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E6A806-929A-4198-9859-A65E32055A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:masqmail:masqmail:0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE6FA46-A8B1-4D0C-9E40-192E0231DC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16883",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17109",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-848",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:168",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=19584",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14890",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1807",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22347",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=19584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined.  NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability."
      }, {
        "lang" : "es",
        "value" : "rpc.mountd en SGI IRIX 6.5.25, 6.5.26 y 6.5.27 no permiten correctamente el acceso a clientes anónimos que conectan desde un sistema cuyo nombre de host no puede ser determinado. NOTA: mientras que este problema ocurre en un mecanismo de seguridad, no hay un rol de atacante aparente y probablemente no satisface la definición de CVE de una vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-17"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5F652E-F7FB-4CA5-8434-B65F02C94976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3A67E-826B-4588-8500-85454AC91AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B3C8DD-1108-452F-8D88-E4C3DBAC3462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050601-01-U",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-214.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050601-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-214.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly exports, which allows attackers to conduct unauthorized activities."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en rpc.mountd en SGI IRIX 6.5.25, 6.5.26 y 6.5.27 no restringe el derecho de acceso suficientemente para leer la mayoría de las exportaciones, lo que permite a atacantes llevar a cabo actividades no autorizadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5F652E-F7FB-4CA5-8434-B65F02C94976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3A67E-826B-4588-8500-85454AC91AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B3C8DD-1108-452F-8D88-E4C3DBAC3462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050601-01-U",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-214.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050601-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-214.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in OpenTTD before 0.4.0.1 allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4441B6D-1A48-4DD4-AAAB-FC3B5F00DE4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=102631",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=102631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQL commands via the (1) o or (2) sort parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:noosoftware:nootoplist:1.0.0_release_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF65C4AB-8DA1-4744-ABC6-D61963CC24C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014931",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.systemsecure.org/ssforum/viewtopic.php?t=249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.systemsecure.org/ssforum/viewtopic.php?t=249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_prd parameters to the pages module in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interakt:mx_shop:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB48AC7-22BF-4C9D-AA33-C57A64F2273C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.systemsecure.org/ssforum/viewtopic.php?t=250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.systemsecure.org/ssforum/viewtopic.php?t=250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Helpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2) admin_main.php by modifying the PHPSESSID session ID parameter or cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_software:hesk:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47728858-FDC6-4DA7-B5C0-BD00EAE55A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_software:hesk:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "591E8484-5DCC-4323-BEC9-03D49E33AA50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112724743530521&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16859",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpjunkyard.com/extras/hesk_0931_patch.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14879",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112724743530521&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpjunkyard.com/extras/hesk_0931_patch.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.02",
            "matchCriteriaId" : "F23E47CD-F20D-4070-9AA0-9B08DF02E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F892EEF-54EC-4EC0-84B3-BD5C216AED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089BEFE3-24B2-4C73-BA25-7C905ED68A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76AECDD0-C14D-4A68-AF2E-1C41A51089EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D888C22C-41F9-427D-9249-F010891DA48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FAD06C-830A-4CB6-B9AF-7E093B64B69B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5366D587-7E77-4288-AB31-48108D04E0B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFFC44-A329-4FA5-B57C-FA8892F8226B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9241CFD0-9E61-487F-B076-2D7B8ACEA381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB49750B-DAA1-4417-8384-1F4D47F2227D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1099D38B-82EC-43C9-9DF5-D5EDC19834DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D64030-1877-4F29-8340-93DB6E0F1F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "85184E8A-C42D-4CBD-ACB4-B58752C305D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DA682571-536B-4CD9-A820-47E897B01480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "298457B8-051B-46D0-81B4-C5B63B69EB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D4BC07-C37E-4F99-8DEA-54A45250050A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFBC71-7814-4A24-A918-C593673727B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "57824075-E3F7-4B23-B4D6-8417C3147085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FE078F27-6FC1-466C-8331-A89F8B6FE0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "5839EB88-DF5E-4AB0-899B-DF9F72F5F442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1865A4-E038-4A1C-877D-5A3CFA9576BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "93966A66-4332-4E76-9B1A-2BBF10AF0ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA91E77-301C-48F6-9A57-D5FDCEF743BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49DDEF-681C-4A34-9FF8-17249C42842D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF365891-F3FA-4740-94B2-01F85254A2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42B4261-C511-4F3A-8596-6BD4E343DC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F38FE-7E98-48B2-B0B2-35312368B21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63687D75-860D-4A36-B6BB-45BD4268B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD500741-CF39-4F0C-9F96-6CBDFF8973D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*",
            "matchCriteriaId" : "359941FD-A5CE-43C1-AA76-C1B79BCB08C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9AC78A-CA47-476D-935E-67932BAB98A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E9662C-441F-4AB2-AC4C-30F31C32949A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D681B3-73E6-4257-84B4-DE83F6D659B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5F2A5-F50F-4085-AB7D-8C91121A429A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E90912E-0CF8-404B-9E86-461497C65A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E19DD71-9447-4946-931F-4866537C8BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54075890-6E0C-4AB7-8BD5-2023419CC251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABC3435-77CD-4591-8282-7ADA60225CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "50B797C8-3290-4278-9D4B-A15A14FB8D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEC078C-A8F4-471B-A367-59A86B78590D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E10F658D-D2E4-4789-8172-F8842C3EEA05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81687D99-7444-4205-A7BE-992CC758675F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C4301-68E9-4A10-B9C5-711252BF629B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC690371-3326-421E-8BAC-14F48840671B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E20418A7-1FA7-45EF-99B5-12D283EA6CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE50982-8026-466C-9F51-867425C9986F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD889EC7-E5D2-4137-B85C-86D7DB5CED27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "97452A26-7231-43BE-B70E-B8D05365CAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DBA733-467C-4505-8199-DD25A5FFBF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B332FF1C-731D-454C-AA9E-3534040F09E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBAA39D-01A0-4B6B-926B-C36C238E5258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9754B270-E01D-415E-9A91-09ECB9B82B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D4682E92-E5E7-4351-959E-25A79CA4271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112724692219695&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16645",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-42/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/850/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/850/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19508",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112724692219695&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-42/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/850/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/850/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing \".\" (dot), which might allow remote attackers to trick users into processing dangerous content."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.50",
            "matchCriteriaId" : "C71D0061-0003-42D7-BE3B-C85C6D3F7A62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112724692219695&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16645",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-42/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/850/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/850/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/19509",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9339",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14880",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1789",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22337",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112724692219695&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-42/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/850/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/850/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/19509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amar_sagoo:tofu:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0110A0D6-9E9C-4F24-887F-FDCD62089B1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://soya.literati.org/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://soya.literati.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CuteNews allows remote attackers to inject arbitrary web script or HTML via the mod parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6226A5-06A3-4590-BA74-1DAE013F789B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BB2223-5238-4E3D-895A-BE6793AE3A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4254A63A-3202-4D06-90B3-12D10511BC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A2D600-BEA7-4936-B210-91629B2EFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "674CC558-E3B7-4120-879A-0408A595C5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7BF20D-34F9-453A-A54A-3A0B39EAAD58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aria-security.net/advisory/portals/cutenews.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aria-security.net/advisory/portals/cutenews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote attackers to execute arbitrary PHP code via the HTTP_CLIENT_IP header (Client-Ip), which is injected into data/flood.db.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "79E0694F-9C99-4DC3-90A3-3957ABBBBF57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/411057",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14869",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/411057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:texinfo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8",
            "matchCriteriaId" : "7CB7D599-0C64-422A-AE4A-3E8762C7CE46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:01.texindex.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328365",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16816",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17070",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17076",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17093",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17211",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17215",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18401",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23112",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24788",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25402",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_23_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0727.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464745/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-194-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-1121906-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1267",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1939",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:01.texindex.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-194-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-1121906-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Updated packages to correct this issue are available along with our advisory:\nhttp://rhn.redhat.com/errata/CVE-2005-3011.html\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory with insecure permissions, which allows local users to read sensitive ISO images."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplecdr-x:simplecdr-x:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55347A74-D5C6-4EB2-A7B0-6F62BE6C43CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037174.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037174.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in liby2util in Yet another Setup Tool (YaST) for SuSE Linux 9.3 allows local users to execute arbitrary code via a long Loc entry."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "4F1B4D15-0562-44D6-B80B-35A8F432BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D84ABF78-0D85-4E15-907E-B5ACE86EB8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9C7018E7-F90C-435D-A07A-05A294EA2827"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14861",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Ensim webplliance allows remote attackers to inject arbitrary web script or HTML via the Login (OCW_login_username) field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ensim:webppliance:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9982338-C119-4721-9825-47875BE800E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ensim:webppliance:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84DE37ED-E98A-47BC-8A80-52426F35ABF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ensim:webppliance:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D4448B-DFE3-4DD2-851C-C6296F6A4AC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://membres.lycos.fr/newnst/exploit/Ensim_Autentification_XSS_By_ConcorDHacK.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.com/forum/viewtopic.php?id=113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://membres.lycos.fr/newnst/exploit/Ensim_Autentification_XSS_By_ConcorDHacK.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.com/forum/viewtopic.php?id=113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) BaseTarget or (2) Src parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFA5487-2D61-4E61-98A3-51882A8CE0C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40882B15-23A7-456C-B4DB-B1C7246BBC28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg1LO07849&loc=en_US&cs=utf-8&cc=us&lang=all",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO07850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14845",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14846",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg1LO07849&loc=en_US&cs=utf-8&cc=us&lang=all",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO07850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8",
            "matchCriteriaId" : "92A23537-F479-48D1-BA44-5A3DAFA39B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23264211-2992-4222-9B96-5ABEE1332C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13CCAA-839F-406D-A7F3-975B4780425A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D375197-0087-479C-991B-964FB83644F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA65A3E-1789-4D45-839C-B459ED4FA2AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F6320E-314D-4A8F-BC9A-29F730035C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5037564-574E-4321-9CD1-4230FB331503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE2D63C-75BC-4936-88BE-9F22D193EF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1BC17-2A99-495A-B462-D02B66F00D92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16843",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.phpnuke.org/modules.php?name=News&file=article&sid=7435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.phpnuke.org/modules.php?name=News&file=article&sid=7435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show parameter, which can lead to resultant errors such as path disclosure, SQL error messages, and cross-site scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:content2web:content2web:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A842E13D-8CAB-43E5-B76F-199FFE355F3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014900",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A419AE8-F5A2-4E25-9004-AAAB325E201A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857C92E2-6870-409A-9457-75F8C5C7B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3112AFEB-7893-467C-8B45-A44D5697BB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC83309-3A97-4619-B5C1-574610838BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891514D5-50C8-4EDC-81C5-24ABF8BCC022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112715234411672&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16875/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19569",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14868",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112715234411672&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16875/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL commands via the (1) request parameter to joinrequests.php, (2) limitnumber or (3) limitstart to user.php, (4) usertitle.php, or (5) usertools.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "70BC7FDF-AEAD-4BCA-AB0B-36F62D3D92A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC28EB5-343A-4B55-8ECE-8C46D304A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3499B6-7DC8-4DE5-80EB-1EEA3307ABA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53F61D2-5FD2-4625-A9FB-8E0258924BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306C6BDF-C687-4B63-998B-B520DF1D1B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF18ED7C-80BB-4A78-8809-9AAE817876A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D731A35-E0DB-4F40-A981-C38229A2EB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4053C8E5-5510-4814-A46E-89B81266C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6753AB-DFCF-4D40-8267-645810F7967E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B3772-A566-4A51-8B51-68E78C86CB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFBBAA9-BD46-44E3-9618-D87384E959A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E594B0-05D5-46C2-8F06-F58E3F8BBD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E0702A-9235-45BE-82A8-BFD57A0DCC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799F983E-908D-4B9F-9C99-6422863E7807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0914B4-24A9-438F-9B44-A6809D755168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1A0EF6-1267-463E-B4F7-83D2ACB64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74013F50-0677-454E-8E6C-101CF210E989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC951B-860E-4AF1-8908-71C7099FB19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87198098-906E-4C39-B293-34BBB1779011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD10C2CD-DEDA-4CC7-B5E9-B9218E1A5851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E9C82-64CF-4487-8947-ED745C41945A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D099410F-AD78-4EF1-879E-BEED838B90E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B411D271-87B5-4A82-8E05-5277E8E205E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FD2B80-AEB5-444D-AEC3-F59E6727BCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA6003D-1E93-472E-B037-8D0922C4247C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B366723-3598-4B4A-AFB9-E4A9616D033B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFD7266-0E3B-44B3-AC8E-DE0BFC5E2939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112715150320677&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16873/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14872",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112715150320677&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16873/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to css.php, (2) redirect parameter to index.php, (3) email parameter to user.php, (4) goto parameter to language.php, (5) orderby parameter to modlog.php, and the (6) hex, (7) rgb, or (8) expandset parameter to template.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "70BC7FDF-AEAD-4BCA-AB0B-36F62D3D92A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC28EB5-343A-4B55-8ECE-8C46D304A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3499B6-7DC8-4DE5-80EB-1EEA3307ABA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53F61D2-5FD2-4625-A9FB-8E0258924BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306C6BDF-C687-4B63-998B-B520DF1D1B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF18ED7C-80BB-4A78-8809-9AAE817876A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D731A35-E0DB-4F40-A981-C38229A2EB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4053C8E5-5510-4814-A46E-89B81266C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6753AB-DFCF-4D40-8267-645810F7967E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B3772-A566-4A51-8B51-68E78C86CB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFBBAA9-BD46-44E3-9618-D87384E959A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E594B0-05D5-46C2-8F06-F58E3F8BBD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E0702A-9235-45BE-82A8-BFD57A0DCC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799F983E-908D-4B9F-9C99-6422863E7807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0914B4-24A9-438F-9B44-A6809D755168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1A0EF6-1267-463E-B4F7-83D2ACB64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74013F50-0677-454E-8E6C-101CF210E989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC951B-860E-4AF1-8908-71C7099FB19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87198098-906E-4C39-B293-34BBB1779011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD10C2CD-DEDA-4CC7-B5E9-B9218E1A5851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43639D6-C4FE-486B-9822-9DDDD922CB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E9C82-64CF-4487-8947-ED745C41945A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D099410F-AD78-4EF1-879E-BEED838B90E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B411D271-87B5-4A82-8E05-5277E8E205E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FD2B80-AEB5-444D-AEC3-F59E6727BCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA6003D-1E93-472E-B037-8D0922C4247C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B366723-3598-4B4A-AFB9-E4A9616D033B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFD7266-0E3B-44B3-AC8E-DE0BFC5E2939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112715150320677&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16873/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14874",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112715150320677&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16873/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitrary files via the upload action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "70BC7FDF-AEAD-4BCA-AB0B-36F62D3D92A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC28EB5-343A-4B55-8ECE-8C46D304A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3499B6-7DC8-4DE5-80EB-1EEA3307ABA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53F61D2-5FD2-4625-A9FB-8E0258924BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306C6BDF-C687-4B63-998B-B520DF1D1B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF18ED7C-80BB-4A78-8809-9AAE817876A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D731A35-E0DB-4F40-A981-C38229A2EB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4053C8E5-5510-4814-A46E-89B81266C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6753AB-DFCF-4D40-8267-645810F7967E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B3772-A566-4A51-8B51-68E78C86CB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFBBAA9-BD46-44E3-9618-D87384E959A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E594B0-05D5-46C2-8F06-F58E3F8BBD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E0702A-9235-45BE-82A8-BFD57A0DCC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799F983E-908D-4B9F-9C99-6422863E7807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0914B4-24A9-438F-9B44-A6809D755168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1A0EF6-1267-463E-B4F7-83D2ACB64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74013F50-0677-454E-8E6C-101CF210E989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC951B-860E-4AF1-8908-71C7099FB19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87198098-906E-4C39-B293-34BBB1779011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD10C2CD-DEDA-4CC7-B5E9-B9218E1A5851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43639D6-C4FE-486B-9822-9DDDD922CB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E9C82-64CF-4487-8947-ED745C41945A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D099410F-AD78-4EF1-879E-BEED838B90E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B411D271-87B5-4A82-8E05-5277E8E205E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FD2B80-AEB5-444D-AEC3-F59E6727BCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA6003D-1E93-472E-B037-8D0922C4247C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B366723-3598-4B4A-AFB9-E4A9616D033B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFD7266-0E3B-44B3-AC8E-DE0BFC5E2939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112715150320677&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16873/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112715150320677&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16873/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) announcement parameter to announcement.php, (2) userid parameter to user.php, (3) calendar parameter to admincalendar.php, (4) cronid parameter to cronlog.php, (5) usergroupid parameter to email.php, (6) help parameter to help.php, (7) rvt parameter to language.php, (8) keep parameter to phrase.php, or (9) updateprofilepic parameter to usertools.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "70BC7FDF-AEAD-4BCA-AB0B-36F62D3D92A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC28EB5-343A-4B55-8ECE-8C46D304A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3499B6-7DC8-4DE5-80EB-1EEA3307ABA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53F61D2-5FD2-4625-A9FB-8E0258924BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306C6BDF-C687-4B63-998B-B520DF1D1B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF18ED7C-80BB-4A78-8809-9AAE817876A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D731A35-E0DB-4F40-A981-C38229A2EB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4053C8E5-5510-4814-A46E-89B81266C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6753AB-DFCF-4D40-8267-645810F7967E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B3772-A566-4A51-8B51-68E78C86CB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFBBAA9-BD46-44E3-9618-D87384E959A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E594B0-05D5-46C2-8F06-F58E3F8BBD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E0702A-9235-45BE-82A8-BFD57A0DCC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799F983E-908D-4B9F-9C99-6422863E7807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0914B4-24A9-438F-9B44-A6809D755168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1A0EF6-1267-463E-B4F7-83D2ACB64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74013F50-0677-454E-8E6C-101CF210E989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC951B-860E-4AF1-8908-71C7099FB19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87198098-906E-4C39-B293-34BBB1779011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD10C2CD-DEDA-4CC7-B5E9-B9218E1A5851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43639D6-C4FE-486B-9822-9DDDD922CB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E9C82-64CF-4487-8947-ED745C41945A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D099410F-AD78-4EF1-879E-BEED838B90E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B411D271-87B5-4A82-8E05-5277E8E205E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FD2B80-AEB5-444D-AEC3-F59E6727BCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA6003D-1E93-472E-B037-8D0922C4247C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B366723-3598-4B4A-AFB9-E4A9616D033B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFD7266-0E3B-44B3-AC8E-DE0BFC5E2939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112715150320677&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112715150320677&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) announcement.php, (2) admincalendar.php, (3) bbcode.php, (4) cronadmin.php, (5) email.php, (6) faq.php, (7) forum.php, (8) image.php, (9) language.php, (10) ranks.php, (11) replacement.php, (12) replacement.php, (13) template.php, (14) template.php, (15) usergroup.php, or (16) usertitle.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "70BC7FDF-AEAD-4BCA-AB0B-36F62D3D92A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC28EB5-343A-4B55-8ECE-8C46D304A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3499B6-7DC8-4DE5-80EB-1EEA3307ABA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53F61D2-5FD2-4625-A9FB-8E0258924BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306C6BDF-C687-4B63-998B-B520DF1D1B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF18ED7C-80BB-4A78-8809-9AAE817876A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D731A35-E0DB-4F40-A981-C38229A2EB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4053C8E5-5510-4814-A46E-89B81266C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6753AB-DFCF-4D40-8267-645810F7967E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B3772-A566-4A51-8B51-68E78C86CB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFBBAA9-BD46-44E3-9618-D87384E959A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E594B0-05D5-46C2-8F06-F58E3F8BBD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E0702A-9235-45BE-82A8-BFD57A0DCC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799F983E-908D-4B9F-9C99-6422863E7807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0914B4-24A9-438F-9B44-A6809D755168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1A0EF6-1267-463E-B4F7-83D2ACB64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74013F50-0677-454E-8E6C-101CF210E989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC951B-860E-4AF1-8908-71C7099FB19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87198098-906E-4C39-B293-34BBB1779011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD10C2CD-DEDA-4CC7-B5E9-B9218E1A5851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43639D6-C4FE-486B-9822-9DDDD922CB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E9C82-64CF-4487-8947-ED745C41945A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D099410F-AD78-4EF1-879E-BEED838B90E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B411D271-87B5-4A82-8E05-5277E8E205E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FD2B80-AEB5-444D-AEC3-F59E6727BCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA6003D-1E93-472E-B037-8D0922C4247C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B366723-3598-4B4A-AFB9-E4A9616D033B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFD7266-0E3B-44B3-AC8E-DE0BFC5E2939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112715150320677&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112715150320677&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) announcement parameter to announcement.php, the (2) thread[forumid] or (3) criteria parameters to thread.php, (4) userid parameter to user.php, the (5) calendarcustomfieldid, (6) calendarid, (7) moderatorid, (8) holidayid, (9) calendarmoderatorid, or (10) calendar[0] parameters to admincalendar.php, (11) the cronid parameter to cronlog.php, (12) user[usergroupid][0] parameter to email.php, (13) help[0] parameter to help.php, the (14) limitnumber or (15) limitstart parameter to user.php, the (16) usertitleid or (17) ids parameters to usertitle.php, (18) rvt[0] parameter to language.php, (19) keep[0] parameter to phrase.php, (20) dostyleid parameter to template.php, (21) thread[forumid] parameter to thread.php, or (22) usertools.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "70BC7FDF-AEAD-4BCA-AB0B-36F62D3D92A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC28EB5-343A-4B55-8ECE-8C46D304A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3499B6-7DC8-4DE5-80EB-1EEA3307ABA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53F61D2-5FD2-4625-A9FB-8E0258924BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306C6BDF-C687-4B63-998B-B520DF1D1B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF18ED7C-80BB-4A78-8809-9AAE817876A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D731A35-E0DB-4F40-A981-C38229A2EB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4053C8E5-5510-4814-A46E-89B81266C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6753AB-DFCF-4D40-8267-645810F7967E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B3772-A566-4A51-8B51-68E78C86CB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFBBAA9-BD46-44E3-9618-D87384E959A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E594B0-05D5-46C2-8F06-F58E3F8BBD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E0702A-9235-45BE-82A8-BFD57A0DCC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799F983E-908D-4B9F-9C99-6422863E7807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0914B4-24A9-438F-9B44-A6809D755168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1A0EF6-1267-463E-B4F7-83D2ACB64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74013F50-0677-454E-8E6C-101CF210E989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC951B-860E-4AF1-8908-71C7099FB19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87198098-906E-4C39-B293-34BBB1779011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E9C82-64CF-4487-8947-ED745C41945A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D099410F-AD78-4EF1-879E-BEED838B90E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B411D271-87B5-4A82-8E05-5277E8E205E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FD2B80-AEB5-444D-AEC3-F59E6727BCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA6003D-1E93-472E-B037-8D0922C4247C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B366723-3598-4B4A-AFB9-E4A9616D033B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFD7266-0E3B-44B3-AC8E-DE0BFC5E2939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112732980702939&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.7.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112732980702939&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.7.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the loc parameter to (1) modcp/index.php or (2) admincp/index.php, or the ip parameter to (3) modcp/user.php or (4) admincp/usertitle.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "70BC7FDF-AEAD-4BCA-AB0B-36F62D3D92A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC28EB5-343A-4B55-8ECE-8C46D304A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3499B6-7DC8-4DE5-80EB-1EEA3307ABA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53F61D2-5FD2-4625-A9FB-8E0258924BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306C6BDF-C687-4B63-998B-B520DF1D1B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF18ED7C-80BB-4A78-8809-9AAE817876A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D731A35-E0DB-4F40-A981-C38229A2EB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4053C8E5-5510-4814-A46E-89B81266C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6753AB-DFCF-4D40-8267-645810F7967E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B3772-A566-4A51-8B51-68E78C86CB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFBBAA9-BD46-44E3-9618-D87384E959A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E594B0-05D5-46C2-8F06-F58E3F8BBD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E0702A-9235-45BE-82A8-BFD57A0DCC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799F983E-908D-4B9F-9C99-6422863E7807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0914B4-24A9-438F-9B44-A6809D755168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1A0EF6-1267-463E-B4F7-83D2ACB64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74013F50-0677-454E-8E6C-101CF210E989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC951B-860E-4AF1-8908-71C7099FB19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87198098-906E-4C39-B293-34BBB1779011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E9C82-64CF-4487-8947-ED745C41945A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D099410F-AD78-4EF1-879E-BEED838B90E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B411D271-87B5-4A82-8E05-5277E8E205E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FD2B80-AEB5-444D-AEC3-F59E6727BCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA6003D-1E93-472E-B037-8D0922C4247C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B366723-3598-4B4A-AFB9-E4A9616D033B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFD7266-0E3B-44B3-AC8E-DE0BFC5E2939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112732980702939&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.7.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112732980702939&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://morph3us.org/advisories/20050917-vbulletin-3.0.7.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the read parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:epay:*:*:enterprise:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "37853A53-902D-49C9-A21D-579A6669C737"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037225.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112714879101323&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112716394925851&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYA-2005-008-alstrasoft-epay-pro.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14871",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037225.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112714879101323&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112716394925851&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYA-2005-008-alstrasoft-epay-pro.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sybari Antigen 8.0 SR2 does not properly filter SMTP messages, which allows remote attackers to bypass custom filter rules and send file attachments of arbitrary file types via a message with a subject of \"Antigen forwarded attachment\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybari:antigen:8.0:sr2:exchange:*:*:*:*:*",
            "matchCriteriaId" : "D41C5276-1B16-498A-8E85-AD123F6B2AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybari:antigen:8.0:sr2:smtp_gateways:*:*:*:*:*",
            "matchCriteriaId" : "AFC5FA5B-279E-4FE2-B6B9-8933628AC9DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112714679622107&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16759/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14875",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112714679622107&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16759/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2023-11-07T01:57:45.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2986.  Reason: This candidate is a duplicate of CVE-2005-2986.  Notes: All CVE users should reference CVE-2005-2986 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to execute arbitrary code via a long filname in an ACE archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:v3_virusblock_2005:6.0.0.383:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CA7FD9-0821-4659-A417-D777B30B99F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:v3net:6.0.0.383:*:win_server:*:*:*:*:*",
            "matchCriteriaId" : "14FB3E59-C46A-4A06-9394-583ED5A33E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:v3pro_2004:6.0.0.383:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C916FC5-2E7D-434B-BA6F-6BF69667543C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://info.ahnlab.com/english/advisory/01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680062609377&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15674/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-17/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14844",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://info.ahnlab.com/english/advisory/01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680062609377&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15674/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-17/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in a compressed archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:v3_virusblock_2005:6.0.0.383:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CA7FD9-0821-4659-A417-D777B30B99F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:v3net:6.0.0.383:*:win_server:*:*:*:*:*",
            "matchCriteriaId" : "14FB3E59-C46A-4A06-9394-583ED5A33E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:v3pro_2004:6.0.0.383:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C916FC5-2E7D-434B-BA6F-6BF69667543C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://info.ahnlab.com/english/advisory/01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680062609377&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15674/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-17/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14848",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://info.ahnlab.com/english/advisory/01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112680062609377&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15674/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-17/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in vxFtpSrv 0.9.7 allows remote attackers to execute arbitrary code via a long USER name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cambridge_computer_corporation:vxftpsrv:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32DC594-3FA1-4C04-9006-63F82B99982B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16837",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014911",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.airscanner.com/security/05081102_vxftpsrv.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.airscanner.com/security/05081102_vxftpsrv.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in vxTftpSrv 1.7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TFTP request with a long filename argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cambridge_computer_corporation:vxtftpsrv:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DCE0B4-E8CA-4054-B75E-0E622A39DC5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16840",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014912",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.airscanner.com/security/05081203_vxtftpsrv.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.airscanner.com/security/05081203_vxtftpsrv.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in vxWeb 1.1.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cambridge_computer_corporation:vxweb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6DBC07-80CF-47E4-932B-1A3FD9DBC2B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.airscanner.com/security/05081101_vxweb.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.airscanner.com/security/05081101_vxweb.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to bypass authentication via a null session."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compuware:driverstudio:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B325D1E-3A51-4670-BA3F-EF07F22B5BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compuware:driverstudio:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8191FCF-6118-484A-AA76-EEAB7E1F842D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.seifried.org/pipermail/security/2005-September/009956.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16838",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xfocus.net/articles/200509/821.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.seifried.org/pipermail/security/2005-September/009956.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xfocus.net/articles/200509/821.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to cause a denial of service (reboot) via a UDP packet sent directly to port 9110."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compuware:driverstudio:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B325D1E-3A51-4670-BA3F-EF07F22B5BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compuware:driverstudio:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8191FCF-6118-484A-AA76-EEAB7E1F842D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.seifried.org/pipermail/security/2005-September/009956.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16838",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14838",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.xfocus.net/articles/200509/821.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.seifried.org/pipermail/security/2005-September/009956.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.xfocus.net/articles/200509/821.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "File Transfer Anywhere 3.01 stores sensitive password information in plaintext in the PASS value in the \"File Transfer Anywhere\" registry key, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ttxn:file_transfer_anywhere:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93DB6A0D-98F1-42A2-A83B-221BEC7BE1F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014919",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Handy Address Book Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the SEARCHTEXT parameter in a demos URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:handy_address_book:handy_address_book_server:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "135BC190-70F8-4EA3-8AA3-9BEB0230E507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secubox.teria.org/index.php?menu=24&action=detail&aid=82",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16798",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014901",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secubox.teria.org/index.php?menu=24&action=detail&aid=82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Hosting Controller 6.1 before Hotfix 2.4 allows remote attackers to list and read contents of arbitrary drives, related to \"the PHP vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAEE0D-CDCE-46F2-8FCD-E9C9CD7BB159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hostingcontroller.com/english/logs/hotfixlogv61_2_4.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16824",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14840",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hostingcontroller.com/english/logs/hotfixlogv61_2_4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idPage parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mall23:mall23:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6113DBF4-1662-4726-BFD4-25C11225DE40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014882",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://systemsecure.org/ssforum/viewtopic.php?t=219",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://systemsecure.org/ssforum/viewtopic.php?t=219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remote attackers to read arbitrary files via \"..\" sequences in the Template parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tac:vista:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CCD374-BAAB-4F77-B787-C4A1809FDF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tac:vista:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2ECC29-1B0E-45F8-9302-AE01EBA08328"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16854",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014923",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-37-advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19479",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-37-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified \"drag-and-drop vulnerability\" in Opera Web Browser before 8.50 on Windows allows \"unintentional file uploads.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.50",
            "matchCriteriaId" : "C71D0061-0003-42D7-BE3B-C85C6D3F7A62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.opera.com/docs/changelogs/windows/850/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14884",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1789",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/850/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when \"full PAM conversations\" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B443FCF7-5949-4084-BA55-74F45A8ADB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E815171B-B054-450F-A9B3-2D522161DD02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-09/0257.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2340940493/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16858",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/83_e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.webmin.com/changes-1.230.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.webmin.com/uchanges-1.160.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-09/0257.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2340940493/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/83_e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.webmin.com/changes-1.230.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.webmin.com/uchanges-1.160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T10:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOption_Dropdown_2 parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mall23:mall23:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6113DBF4-1662-4726-BFD4-25C11225DE40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0509-exploits/mall23.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://systemsecure.org/ssforum/viewtopic.php?t=277",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0509-exploits/mall23.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://systemsecure.org/ssforum/viewtopic.php?t=277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) via (1) fput in a 32-bit ioctl on 64-bit x86 systems or (2) sockfd_put in the 32-bit routing_ioctl function on 64-bit systems."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.13",
            "matchCriteriaId" : "2BA1764A-11F1-489F-A727-7957397763A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/aegl/linux-2.6.git%3Ba=commitdiff%3Bh=35311d6478077f7bfe35c1c653193e658bf32686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/chrisw/linux-2.6.13.y.git%3Ba=commit%3Bh=98debffa9114b60138b3dbd4d02ce13f01a07ab4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-187-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/aegl/linux-2.6.git%3Ba=commitdiff%3Bh=35311d6478077f7bfe35c1c653193e658bf32686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/chrisw/linux-2.6.13.y.git%3Ba=commit%3Bh=98debffa9114b60138b3dbd4d02ce13f01a07ab4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-187-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2701",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-23T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "B9216BBE-9C9B-40F6-BB64-D20072344A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.11",
            "matchCriteriaId" : "60B8BE80-E9C1-40AE-991C-437F10D81E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19643",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14916",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22373",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9323",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2702",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-23T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with \"zero-width non-joiner\" characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "B9216BBE-9C9B-40F6-BB64-D20072344A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.11",
            "matchCriteriaId" : "60B8BE80-E9C1-40AE-991C-437F10D81E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14918",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22375",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1150",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11609",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2703",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-23T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "B9216BBE-9C9B-40F6-BB64-D20072344A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.11",
            "matchCriteriaId" : "60B8BE80-E9C1-40AE-991C-437F10D81E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14923",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22376",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10767",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1089",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2704",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-23T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "B9216BBE-9C9B-40F6-BB64-D20072344A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.11",
            "matchCriteriaId" : "60B8BE80-E9C1-40AE-991C-437F10D81E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14921",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1272",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9784",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2705",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-23T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "B9216BBE-9C9B-40F6-BB64-D20072344A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.11",
            "matchCriteriaId" : "60B8BE80-E9C1-40AE-991C-437F10D81E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14917",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=303213",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10367",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1307",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=303213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2706",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-23T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "B9216BBE-9C9B-40F6-BB64-D20072344A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.11",
            "matchCriteriaId" : "60B8BE80-E9C1-40AE-991C-437F10D81E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19648",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14920",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22378",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11317",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1443",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-58.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-200-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2707",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-23T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "B9216BBE-9C9B-40F6-BB64-D20072344A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.11",
            "matchCriteriaId" : "60B8BE80-E9C1-40AE-991C-437F10D81E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-59.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14919",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11130",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1197",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2005-59.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_58_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-785.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-789.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-791.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-24T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitrary SQL commands via the phrase field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my_little_homepage:my_little_forum:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5502C9-AC73-4A20-BB19-4717423D4C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my_little_homepage:my_little_forum:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9B8670-347D-47CF-AD2B-D15271F7BFDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112741430006983&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/mylittle15_16b.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16913/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14908",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112741430006983&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/mylittle15_16b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16913/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-24T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privileges via the user field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E50CE3C-06D9-4543-9966-E277113BAA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112749230124091&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpmyfuck151.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112749230124091&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpmyfuck151.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-24T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PMF_CONF[version] parameter to footer.php or (2) PMF_LANG[metaLanguage] to header.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E50CE3C-06D9-4543-9966-E277113BAA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112749230124091&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpmyfuck151.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112749230124091&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpmyfuck151.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-24T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP files via a .. (dot dot) in the LANGCODE parameter, which also allows direct code injection via the User Agent field in a request packet, which can be activated by using LANGCODE to reference the user tracking data file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E50CE3C-06D9-4543-9966-E277113BAA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112749230124091&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpmyfuck151.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112749230124091&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpmyfuck151.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-24T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive information via a direct request to the data/tracking[DATE] file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E50CE3C-06D9-4543-9966-E277113BAA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112749230124091&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpmyfuck151.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112749230124091&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpmyfuck151.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-24T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter that does not exist, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E50CE3C-06D9-4543-9966-E277113BAA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112749230124091&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpmyfuck151.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112749230124091&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpmyfuck151.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-24T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Searcher, allows remote attackers to execute arbitrary code via a large ARJ block."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igor_pavlov:7-zip:3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72365EC-7B28-4072-ABD5-A32D499D2877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igor_pavlov:7-zip:4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79331EE2-DE37-4D7A-A5CF-33E97F741636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igor_pavlov:7-zip:4.26_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "004FF5E6-7B1A-40D5-8CC6-3CDD504867A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112749134603258&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16664/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-45/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/21208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vuln.sg/turbosearcher330-en.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4603",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112749134603258&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16664/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-45/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vuln.sg/turbosearcher330-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-24T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:jportal:jportal_web_portal:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2880CF-460E-448A-89D9-E53E84B1BE93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112748957426316&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/20",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112748957426316&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3053",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-26T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (kernel BUG()) via a negative first argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042eef8b09C5r6iI0LuMe5Uy3k05c5g",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10576",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042eef8b09C5r6iI0LuMe5Uy3k05c5g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3054",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-09-26T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when the open_basedir directive includes a trailing slash, which allows PHP scripts in one directory to access files in other directories whose names are substrings of the original directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323585",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17229",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14957",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1862",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/207-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/207-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues:\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\n",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3055",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-26T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, which leads to a stale pointer reference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=112766129313883",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14955",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9472",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112766129313883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-26T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) \" handling of must-revalidate cache directive for HTTPS pages\" or (2) a \"display issue with cookie comment encoding.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16645",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/850/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/850/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1789",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/850/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/850/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow remote attackers to execute arbitrary code via a long filename in a (1) ACE or (2) ARJ archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerarchiver:powerarchiver_2002:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0610CF40-B0A2-4467-8098-BEF4D225BA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerarchiver:powerarchiver_2003:8.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DE59561-FACC-40C8-8A81-3E843B7B41AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerarchiver:powerarchiver_2004:9.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F54F66-32E4-4AF3-A0AA-5D3A99F6B25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerarchiver:powerarchiver_2006:9.5_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B509E8DE-C146-4D1B-A1D6-86ECE601D76B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerarchiver:powerarchiver_2006:9.5_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AAE8459-61F7-4251-8DE1-36F80A740043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112748874211458&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16713/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-50/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14922",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112748874211458&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16713/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-50/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:e-friends:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D707E991-FF03-4F31-8619-D554A4474B2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112758134227112&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16941/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/22",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14932",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112758134227112&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16941/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unu_networks:mailgust:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C22E02-2A8A-41F9-89A6-E99D17CF874A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112758146618234&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/maildisgust.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16937/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/21",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14933",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112758146618234&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/maildisgust.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16937/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows remote attackers to change or delete the message of the day (motd.txt)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multitheftauto:multitheftauto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5_patch_1",
            "matchCriteriaId" : "25C212A8-2BFC-453C-9904-A4F795DEE2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/mtaboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037384.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16926/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/mtaboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16926/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted command 40 that causes a -1 length to be used and triggers an out-of-bounds read."
      }, {
        "lang" : "es",
        "value" : "MultiTheftAuto 0.5 parche 1 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a traves de un comando 40 manipulado que provoca una longitud -1 para ser utilizada y desencadenar una lectura fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multitheftauto:multitheftauto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5_patch_1",
            "matchCriteriaId" : "25C212A8-2BFC-453C-9904-A4F795DEE2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037384.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16926/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/26",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16926/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in perldiver.pl in PerlDiver 1.x allows remote attackers to inject arbitrary web script or HTML via the query string.  NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptsolutions:perldiver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD3AB90-803F-417D-A8C7-88725A1023B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015146",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.scriptsolutions.com/support/showflat.pl?Board=PDBugs&Number=443",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=443&Search=true&Forum=All_Forums&Words=werner&Match=Entire%20Phrase&Searchpage=0&Limit=25&Old=1month&Main=443",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=447&page=0&view=collapsed&sb=5&o=186&vc=1#Post447",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.scriptsolutions.com/support/showflat.pl?Board=PDBugs&Number=443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=443&Search=true&Forum=All_Forums&Words=werner&Match=Entire%20Phrase&Searchpage=0&Limit=25&Old=1month&Main=443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=447&page=0&view=collapsed&sb=5&o=186&vc=1#Post447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in perldiver.cgi in PerlDiver 2.x allows remote attackers to inject arbitrary web script or HTML via the module parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptsolutions:perldiver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD3AB90-803F-417D-A8C7-88725A1023B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015146",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=443&Search=true&Forum=All_Forums&Words=werner&Match=Entire%20Phrase&Searchpage=0&Limit=25&Old=1month&Main=443",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=443&Search=true&Forum=All_Forums&Words=werner&Match=Entire%20Phrase&Searchpage=0&Limit=25&Old=1month&Main=443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Eric Integrated Development Environment (eric3) before 3.7.2 has unknown impact and attack vectors related to a \"potential security exploit.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eric_integrated_development_environment:eric_integrated_development_environment:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BB3E46-89B6-44E3-AD70-FAFA7E008504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eric_integrated_development_environment:eric_integrated_development_environment:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA0B87E-BB04-485C-86EA-0B083F26EF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eric_integrated_development_environment:eric_integrated_development_environment:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037458CC-2C86-4299-97B2-8F31F99D92EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eric_integrated_development_environment:eric_integrated_development_environment:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC4C682-8410-4F84-8A83-CBCE9FCBCEDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eric_integrated_development_environment:eric_integrated_development_environment:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C0E745-C893-45E8-9980-7E4BD2B2B5AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eric_integrated_development_environment:eric_integrated_development_environment:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F23862-57B0-4EC0-8DDD-B2EAB916CFE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eric_integrated_development_environment:eric_integrated_development_environment:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D657F5-5B94-44E2-B665-C7A13FAB496C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eric_integrated_development_environment:eric_integrated_development_environment:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1518DA-EE8A-4150-A967-47D98DB80149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014947",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=119070&release_id=357174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=119070&release_id=357174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hylafax:hylafax:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCC3306-1850-4CDE-B97C-377CD3FE3D0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=329384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=329384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hylafax:hylafax:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.1",
            "matchCriteriaId" : "7A606E4E-8627-46FB-84A5-1E40A0F34C2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=329384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:177",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=329384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Unix File System (UFS) on Solaris 8 and 9, when logging is enabled, allows local users to cause a denial of service (\"soft hang\") via certain write operations to UFS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101940-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101940-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66EB2C6-C7A9-4A4B-8D86-252E2C72E7A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:4.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C602361-6AC9-440F-A8A6-E51D6C8BCB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:4.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BB5C11-E04E-4C46-928D-12E7CBB1CBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:4.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4499946-FEA7-422D-BCF7-E44F2F110304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:4.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6355504-3928-4F42-BE82-E8D336D88114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:4.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002E154B-7FB4-4732-8290-89DC9624177D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89CD71AD-539A-4529-B617-14E667D98F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3EF221-D1FD-4906-8167-AC2BE6C275AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BB18BE-B4F8-4C57-BBCE-4016BDEE5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E58845-8F7B-4F31-8305-E6542902E1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A49479E-B8B1-4EE3-9615-65A59DE59DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EF260D-C8AC-445F-918F-D094863C2FE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16923",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) \"mike\", (2) \"standard\", or (3) \"foundation\" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66EB2C6-C7A9-4A4B-8D86-252E2C72E7A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89CD71AD-539A-4529-B617-14E667D98F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interchange_development_group:interchange:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D13F78-193F-44ED-84F5-A4FC935860F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16923",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1_stable",
            "matchCriteriaId" : "704E4B17-DEC5-4BBB-AD88-436309F308B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.1_development",
            "matchCriteriaId" : "327A1C97-DCDF-4C5B-802A-D428AF71048C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.8.0_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10972C30-E2E7-44A1-AD77-6089C4B3DC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.8.1_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F790335E-0251-40E0-8733-FE292E0F46F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.8.2_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0225F1DA-A546-49F9-BB74-9C16495C735A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.8.3_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC7AC67-3E04-411A-A56F-FE228906285C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.8.4_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0456DCB-8D6E-43B4-A3C9-E742CF6062A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.9.0_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD71DF4B-FB43-4DFC-B1E6-3D88885A3E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.9.1_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9ED1573-D871-489E-BA95-3C9366E42844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.9.2_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D36B48-D5E2-4FB1-9281-E2701052B3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.9.3_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B16A75D-4D20-43C8-9EE5-D7FCE1571B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.9.4_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7452394A-731E-473D-AD8C-369D9ADC9122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.9.5_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A28917-C43A-4A10-BFE2-F3D602660D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.9.6_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E09137-34B5-4674-8FB3-25114A13E569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.9.7_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD7FE3-F6D0-4B89-BF77-EA9CEB001D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:0.9.8_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350E596D-D26A-40A5-B3EF-700270F174C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslogd:1.0.0_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6457AEF-3CA8-4F03-AC40-68B6B827DC93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16947",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.rsyslog.com/Article35.phtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.rsyslog.com/Article35.phtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Zengaia before 0.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpc-donkey:zengaia:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFB5B42-0EFF-43CE-B7D4-3AEBEF00F4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpc-donkey:zengaia:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362F0476-8E95-44C7-8C81-1000EEDAAC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpc-donkey:zengaia:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9D106D-5CB9-4B18-8142-BB36E84EA0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpc-donkey:zengaia:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73142D0B-C6AC-4FD3-ADC6-B081DB60834F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpc-donkey:zengaia:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "988C94E9-B2D3-47E7-BA81-D14A14798718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpc-donkey:zengaia:0.1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB46FD1A-016E-40DB-BDF6-C570D945CD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpc-donkey:zengaia:0.1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96429705-CB4B-4ADE-86BF-3FF4F7A788A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpc-donkey:zengaia:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55D2E4F-E9D4-4A3B-8420-36A33F02BC81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mpc-donkey.de/zengaia/ChangeLog.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mpc-donkey.de/zengaia/ChangeLog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid (1) pid, (2) blogid, (3) cid, or (4) m parameters to archive.php, or the (5) blogid parameter to blogadmin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplog:simplog:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4063A02E-924C-4BA1-9AE0-2BDC94251012"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.simplog.org/bugs/bug.php?op=show&bugid=55",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.simplog.org/bugs/bug.php?op=show&bugid=55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B288E1C-4511-482A-B39D-E6BB9585AF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168078",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112785544325326&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112775929608219&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/41",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-826",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=311&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/361181",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_59_RealPlayer.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.open-security.org/advisories/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-762.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-788.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112785544325326&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112775929608219&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=311&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/361181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_59_RealPlayer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.open-security.org/advisories/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-762.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-788.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service (crash) via a web page with malformed attributes in a BGSOUND tag, possibly involving double-quotes in an about: URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie_for_macintosh:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63F5F9CC-5D74-4D72-8A56-BEBEF5644094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/14899",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PunBB before 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the \"forgotten e-mail\" feature."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B349F-F76D-49D2-95DA-C8670E32530A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB336F6C-E81A-43C2-A252-36A192D9CADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2C26FE-F2D3-4C1A-8D14-E4B818834703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00082231-3168-4FCC-807B-8AD3DBBFCE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FF770-BEB4-4320-AA45-399A5CC6540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97DA335-4815-4608-84D5-67F4E539D8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF85286-A1F8-4797-99F0-4F42B6D859CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE58D68-FC34-4F70-849A-2E6CC919230D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713E747-5529-4A64-95B4-D9678D8E88B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16908",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.7_to_1.2.8.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.7_to_1.2.8.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PunBB before 1.2.8 allows remote attackers to perform \"code inclusion\" via the user language selection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B349F-F76D-49D2-95DA-C8670E32530A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB336F6C-E81A-43C2-A252-36A192D9CADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2C26FE-F2D3-4C1A-8D14-E4B818834703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00082231-3168-4FCC-807B-8AD3DBBFCE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FF770-BEB4-4320-AA45-399A5CC6540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97DA335-4815-4608-84D5-67F4E539D8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF85286-A1F8-4797-99F0-4F42B6D859CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE58D68-FC34-4F70-849A-2E6CC919230D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713E747-5529-4A64-95B4-D9678D8E88B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16908",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.7_to_1.2.8.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.7_to_1.2.8.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geshi:geshi:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF8085F-C8FA-4B7D-BE6B-46BD37599235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geshi:geshi:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8640CA-5302-491A-91E7-0D559966F153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geshi:geshi:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7035B2-576E-4DB8-8F43-785FCE8D3077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geshi:geshi:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACADB05-ABC5-4565-93C8-9545B16FC900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geshi:geshi:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6243E133-0612-4FF1-81D1-758F5B55AEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geshi:geshi:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A87C84D-044C-45E4-8FE9-EB6169CE8D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geshi:geshi:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E021E26-9C91-4644-8FFC-95F240E27F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geshi:geshi:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D678F7-99E0-448A-89A6-EFFBB3B4060E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geshi:geshi:1.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF5342B1-7CC5-4A5B-B7A2-260E5B6983ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geshi:geshi:1.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C72BCBFB-A9F1-43F0-9AFA-1C26D152ECED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=358285",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14903",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=358285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wzdftpd:wzdftpd:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BBFF6E8-09E1-4EB5-996B-2492008B11FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0646.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16936",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5CP0R1PGUE.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0646.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5CP0R1PGUE.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute arbitrary SQL commands via the user_pass_sha1 value in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:seo-board:seo-board:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFA049D-B353-4483-AB33-37987EB030F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.ghc.ru/showthread.php?fid=32&tid=179&old_block=0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.seo-board.com/article280.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112784905928282&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16949",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.ghc.ru/showthread.php?fid=32&tid=179&old_block=0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forums.seo-board.com/article280.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112784905928282&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87A7B4D-FB2C-4896-BF22-76F5D16A995E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112785315518373&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14937",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112785315518373&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the TIFF library in the Photo Viewer for Sony PSP 2.0 firmware allows remote attackers to cause a denial of service via a crafted TIFF image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:playstation_portable:2.0_firmware:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E00ABA-79F4-4D98-82DE-7FE8F08359B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pspupdates.qj.net/2005/09/20-overflow-found-and-working.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16922",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pspupdates.qj.net/2005/09/20-overflow-found-and-working.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in rss.php in Riverdark Studios RSS Syndicator module 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) forum or (2) topic parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riverdark_studios:rss_syndicator_module:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65D7964-61ED-45A2-B24B-B46027138329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014969",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1014969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via \"..\" sequences in the ctsWebsite parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contentserv:contentserv:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4991F1FB-5721-429F-A84C-F3D89F318E40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0650.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16929",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0650.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generation of the pre-master secret (PMS), which makes it easier for attackers to guess the secret and decrypt sensitive data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:securew2:securew2:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82B3D2A-10CF-4985-93A3-E15E4C987F85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037352.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16909",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037352.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T18:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC) script that uses an eval statement. NOTE: it is not clear whether an untrusted party has any role in triggering this issue, so it might not be a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014949",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mozilla.org/products/firefox/releases/1.0.7.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14924",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=302100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mozilla.org/products/firefox/releases/1.0.7.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=302100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2557",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-09-28T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir parameter, as identified by bug#0005959, and a different vulnerability than CVE-2005-3090."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112786017426276&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-778",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-16.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mantisbt.org/changelog.php",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14604",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21958",
        "source" : "security@debian.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112786017426276&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mantisbt.org/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2964",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-09-28T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mechanism."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abisource:community_abiword:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.9",
            "matchCriteriaId" : "F69988CA-4C52-416E-A4E2-D645516B772C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16982",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16990",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17012",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17052",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17070",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17215",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17551",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1014982",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.abiword.org/release-notes/2.2.10.phtml",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-894",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-20.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-04.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_23_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/19717",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14971",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-188-1",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22454",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.abiword.org/release-notes/2.2.10.phtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200509-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-188-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, which is not quoted when view_all_bug_page.php is used to delete the bug, as identified by bug#0006002, a different vulnerability than CVE-2005-2557."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112786017426276&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-778",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112786017426276&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 \"thraxisp\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E88349-E374-4AE9-9C4E-9599C1448D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21FF02F-982C-429F-A14D-D6E18058DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FB3D29-644D-4E5F-875D-C87CCE3EF95C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5173B32-1099-47C9-996B-56DB29456BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B419B788-ADDD-4C0A-8E02-CBB58FD21938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E387645-BC7A-4EA5-AE9E-A3C66994391B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80575A3-87E7-40BC-9BCB-E12BB7938A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04989B5F-30B2-43A0-A061-BF43EEA8756C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7C781D-F5D1-4C63-B6E3-230DEC80104E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0755FA0-2365-42B4-8E42-214D5BAD71A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35248DDA-D37D-4D72-9FF8-6813BA4C87BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67C54F4-4155-43DA-8E07-579249759989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C376D216-914A-4D96-8603-C6861B3E2857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A07B4C-CE12-4381-BFE4-CE79411F5069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "065C222C-638F-4303-BE6A-7FED59E21FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB502B29-FBC5-4984-A735-AA0B6DF4A58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F759138-7079-471F-B30D-ED62351CFCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF83421-973D-4AC9-BDA3-4161B9CF2D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084BD5F4-37F8-4913-8045-769FD81F8C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B09948-A44C-47D8-A5EC-3873FF36F451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D72C1E-73E5-4F51-9D30-D28026939C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C469C66-B64B-49BD-9D1C-D15F0E9028EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28223A1-359F-434C-BAAA-82A5F310FA44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF1F18B-AE36-48F3-B784-5C97B3F2535E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAFD163-7FE7-48FB-8860-7B00B0FFA628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53520AA0-E5AB-450A-9D95-E075B552D2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8462CB86-30B1-43D8-B306-271709423DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131A96BB-EF2E-4AE2-9334-91CA96222BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17DC6205-7016-40C3-921A-B5AEC8513CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721A536A-9626-4BD7-B84A-E3C4074F1217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D77F95A-0059-4442-8D9D-AA7F101FBBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89786096-AE1B-491B-8284-DBCC2F6112F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70450FAB-7886-418E-B471-8F16A68F9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4CFE80-223F-45DA-A9FB-03474F61E027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29FF305-E773-497E-9C47-7D87383F1440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8724300D-CBDC-4C66-BF78-038F838C06DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7283A58-EE8E-493F-8E51-C97FF87ECA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E42F3A0-5FDB-4053-9EA5-D19B7061CDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101BF6DC-0F73-41E0-A0EE-BA1EA7397423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC458D9-12B1-4CF1-980E-BC86E874BBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mantisbt.org/changelog.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mantisbt.org/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a (1) .mid or (2) .wav file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:image-line_software:fl_studio:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36135698-7C3B-45FF-AFD3-0F143E161D86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112776577002945&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16958/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/25",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112776577002945&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16958/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nokia 7610 and 3210 phones allows attackers to cause a denial of service via certain characters in the filename of a Bluetooth OBEX transfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:3210:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ADB5A3C-D1B1-49C3-A7C9-10941B8267B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:7610:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DD4E27-4E36-4796-AE6E-35824D89AAA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/14948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avi Alkalay man-cgi script allows remote attackers to execute arbitrary code via shell metacharacters in the topic parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avi_alkalay:man_cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90AFD2BA-1E93-4DB9-A1EE-C12BA18C3F4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.alkalay.net/software",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cirt.net/advisories/alkalay.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19519",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.alkalay.net/software",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cirt.net/advisories/alkalay.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avi_alkalay:notify:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8F4361-0C51-4105-B975-7FB3A9A35190"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16886/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.alkalay.net/software",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cirt.net/advisories/alkalay.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16886/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.alkalay.net/software",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cirt.net/advisories/alkalay.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avi_alkalay:nslookup.cgi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0980F24-E74B-4908-B2AB-00492E6DCE9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.alkalay.net/software",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cirt.net/advisories/alkalay.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19520",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.alkalay.net/software",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cirt.net/advisories/alkalay.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Avi Alkalay contribute.cgi (aka contribute.pl), dated 16 Jun 2002, allows remote attackers to overwrite arbitrary files via \"..\" sequences in the contribdir variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avi_alkalay:contribute.cgi:16_jun_2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A37F9A3-6B25-47A9-A452-42958CA850F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cirt.net/advisories/alkalay.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cirt.net/advisories/alkalay.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "poppassd in Qualcomm qpopper 4.0.8 allows local users to modify arbitrary files and gain privileges via the -t (trace file) command line argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualcomm:qpopper:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE46D0C-4801-4D9F-86B9-420A514103E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Sep/0652.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14944",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Sep/0652.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the (1) Xsun and (2) Xprt commands in Solaris 7, 8, 9, and 10 allows local users to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08003947-A4F1-44AC-84C6-9F8D097EB759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16955",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101800-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-220.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101800-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-220.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified \"PPTP Remote DoS Vulnerability\" in Astaro Security Linux 4.027 allows attackers to cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:astaro:security_linux:4.027:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1772367-33D8-4234-A321-F681550F9D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16967",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.astaro.org/showflat.php?Cat=&Number=62289&Main=62289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14950",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.astaro.org/showflat.php?Cat=&Number=62289&Main=62289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F63E3A-019C-431C-A155-1CD6E42FA485"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14911",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1542C3-E6CD-4CF6-9F1D-E8E58F2A11E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the (1) title, (2) category, (3) body, (4) extended body, and (5) excerpt form fields in new blog entries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1542C3-E6CD-4CF6-9F1D-E8E58F2A11E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-28T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1542C3-E6CD-4CF6-9F1D-E8E58F2A11E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T10:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mprotect code (mprotect.c) in Linux 2.6 on Itanium IA64 Montecito processors does not properly maintain cache coherency as required by the architecture, which allows local users to cause a denial of service and possibly corrupt data by modifying PTE protections."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cache-www.intel.com/cd/00/00/21/57/215792_215792.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404248d4019z8HvgrPAji51TKrWiV2uw?nav=index.html%7Csrc/%7Csrc/mm%7Crelated/mm/mprotect.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.intel.com/cd/ids/developer/asmo-na/eng/215766.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cache-www.intel.com/cd/00/00/21/57/215792_215792.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404248d4019z8HvgrPAji51TKrWiV2uw?nav=index.html%7Csrc/%7Csrc/mm%7Crelated/mm/mprotect.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.intel.com/cd/ids/developer/asmo-na/eng/215766.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T10:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/diffs/fs/exec.c%401.156?nav=index.html%7Csrc/%7Csrc/fs%7Chist/fs/exec.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9108",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/diffs/fs/exec.c%401.156?nav=index.html%7Csrc/%7Csrc/fs%7Chist/fs/exec.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T10:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fs/exec.c in Linux 2.6, when one thread is tracing another thread that shares the same memory map, might allow local users to cause a denial of service (deadlock) by forcing a core dump when the traced thread is in the TASK_TRACED state."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/diffs/fs/exec.c%401.155?nav=index.html%7Csrc/%7Csrc/fs%7Chist/fs/exec.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.11-rc1/2.6.11-rc1-mm1/broken-out/fix-coredump_wait-deadlock-with-ptracer-tracee-on-shared-mm.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/diffs/fs/exec.c%401.155?nav=index.html%7Csrc/%7Csrc/fs%7Chist/fs/exec.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.11-rc1/2.6.11-rc1-mm1/broken-out/fix-coredump_wait-deadlock-with-ptracer-tracee-on-shared-mm.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T10:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak via an ioremap on a certain memory map that causes the iounmap to perform a lookup of a page that does not exist."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=93ef70a217637ade3f335303a112b22a134a1ec2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=93ef70a217637ade3f335303a112b22a134a1ec2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T10:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service (oops) by using hfsplus to mount a filesystem that is not hfsplus."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/gitweb.cgi?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=945b092011c6af71a0107be96e119c8c08776f3f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/gitweb.cgi?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=945b092011c6af71a0107be96e119c8c08776f3f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T10:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating under a heavy load, might allow remote attackers to cause a denial of service (crash) via a series of packets that cause a value to be modified after it has been read but before it has been locked."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=6800453&forum_id=8572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=6800453&forum_id=8572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T10:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:backupninja:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8",
            "matchCriteriaId" : "9E1A8680-8A55-4AB1-8E5C-A9E1EC98DEBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16995/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-827",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16995/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T10:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"reset password\" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash, which allows attackers with access to the database to obtain the passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:breeze:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AF9CF0-164D-41D0-8832-27E857181116"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.macromedia.com/go/mpsb05-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.macromedia.com/go/mpsb05-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T10:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to download and execute arbitrary programs by setting the arguments to the GotNate.Excute method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nateon:nateon_messenger:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9996ABF-662B-4B6E-B7F9-246DA27783F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=112796492819343&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112796492819343&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T10:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long third argument to the GotNate.Excute method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nateon:nateon_messenger:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9996ABF-662B-4B6E-B7F9-246DA27783F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=112796492819343&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=112796492819343&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2917",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-09-30T18:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service (daemon restart)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.stable10",
            "matchCriteriaId" : "DE077B6D-CB5E-445A-97F8-444D3D7FCAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD7F1E4-35E3-43A0-B4F8-68697D70908E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16992",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17015",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17177",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014920",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-828",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:181",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0045.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0052.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-192-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24282",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11580",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA--.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-192-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2962",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-09-30T18:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the username and password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntlmaps:ntlmaps:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.9",
            "matchCriteriaId" : "B3E69D2C-FE05-4158-98BA-3842F96380AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17017",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-830",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16700",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T18:05:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via (1) ts.stat, (2) ts.mpg, (3) foobar, (4) blockbar, or (5) foobar[NNN]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpeg-tools:mpeg-tools:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5b_r1",
            "matchCriteriaId" : "834ED6C5-C9EB-43D7-95E0-294E4A56997E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=107344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=107344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2660",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-09-30T19:10:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "apachetop 0.12.5 and earlier, when running in debug mode, allows local users to create or append to arbitrary files via a symlink attack on atop.debug."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachetop:apachetop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.12.5",
            "matchCriteriaId" : "7CB30035-1615-42C1-BEAB-C8E7D7BFC03D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=104473",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/38",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1014996",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14982",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.zataz.net/adviso/apachetop-09022005.txt",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=104473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/apachetop-09022005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-09-30T19:10:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows local users to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16996",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY73814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY73850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/602300",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/19719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14959",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY73814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY73850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/602300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/19719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-04T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the registry parsing code in GroupWise 6.5.3, and possibly earlier version, allows remote attackers to cause a denial of service (application crash) via a large TCP/IP port in the Windows registry key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251EAE31-9799-453A-ABF7-F3D1C6602A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0763.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037442.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112784386426802&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/28",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098814.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/techcenter/search/search.do?cmd=displayKC&docType=%20c&externalId=10098814html&sliceId=&dialogID=717171",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-13.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14952",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0763.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037442.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112784386426802&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098814.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/techcenter/search/search.do?cmd=displayKC&docType=%20c&externalId=10098814html&sliceId=&dialogID=717171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-04T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers to inject arbitrary web script or HTML via the query string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucidcms:lucidcms:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBDC16E-D4E4-43F5-B560-239779E8A550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112784678820859&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14951",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112784678820859&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-04T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:address_add_plugin:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3928E722-252A-4EF4-9BEB-7EB6ABA47353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:address_add_plugin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03BEE4CF-4BBD-4622-9785-A254BD186D86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112801672520766&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0002/sqmadd/0002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16987/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://squirrelmail.org/plugin_view.php?id=101",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112801672520766&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moritz-naumann.com/adv/0002/sqmadd/0002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16987/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://squirrelmail.org/plugin_view.php?id=101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-04T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.4",
            "matchCriteriaId" : "EAB43FCB-33D2-459B-B95C-70451E779520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037580.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112801570631203&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17011/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112801570631203&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17011/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-04T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL commands via the login field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucidcms:lucidcms:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBDC16E-D4E4-43F5-B560-239779E8A550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112803020415743&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/lucidcms1011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/33",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112803020415743&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/lucidcms1011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-04T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to blank.html, or the createdataCX parameter to (2) calendar_d.html, (3) calendar_m.html, or (4) calendar_w.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A1B67D-FE00-4E52-9947-577A0552C01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.2.4r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027EEDBE-E129-422D-BF31-C3B325C84E2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112810385104168&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17046/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14980",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112810385104168&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17046/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-04T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlist_inc.html, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A1B67D-FE00-4E52-9947-577A0552C01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.2.4r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027EEDBE-E129-422D-BF31-C3B325C84E2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112810385104168&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17046/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112810385104168&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17046/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-04T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to (1) delete arbitrary files or directories via a relative path to the id parameter to logout.html or (2) include arbitrary PHP files or other files via the helpid parameter to help.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A1B67D-FE00-4E52-9947-577A0552C01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.2.4r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027EEDBE-E129-422D-BF31-C3B325C84E2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112810385104168&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17046/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14988",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112810385104168&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17046/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-04T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:metaframe:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7086C091-8F68-4892-8EA4-9DFF4BF67573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:metaframe:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00A595F-DF12-411C-B414-056D1F6A132A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112811189420696&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17032/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/39",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.citrix.com/kb/entry%21default.jspa?categoryID=275&externalID=CTX107705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.grupoitpro.com.ar/ctxpoliciesbypass.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112811189420696&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17032/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.citrix.com/kb/entry%21default.jspa?categoryID=275&externalID=CTX107705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.grupoitpro.com.ar/ctxpoliciesbypass.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-04T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to execute arbitrary code via a long filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtools:web_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.100",
            "matchCriteriaId" : "284D11A0-A6AD-457D-8F6C-CBCE79BD471A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/virtbugs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112811771331997&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17034/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/virtbugs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112811771331997&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17034/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-04T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtools:web_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.100",
            "matchCriteriaId" : "284D11A0-A6AD-457D-8F6C-CBCE79BD471A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/virtbugs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112811771331997&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17034/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/40",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14991",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/virtbugs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112811771331997&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17034/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T19:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2AD14C-2BD2-4658-BDB0-232A9E26EA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:4.0:*:bluecoat:*:*:*:*:*",
            "matchCriteriaId" : "11EDDA59-F819-4EB8-99EB-9CD3F4A17355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:4.0:*:clearswift:*:*:*:*:*",
            "matchCriteriaId" : "1E739083-DFC2-4A89-9F84-E067E127D420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:4.0:*:netapp_filer:*:*:*:*:*",
            "matchCriteriaId" : "33090505-58E7-42AB-8726-FACF2C93248A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:4.0:*:netapp_netcache:*:*:*:*:*",
            "matchCriteriaId" : "8489A23E-AB16-418C-B64A-8F68FB2A5936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F11687CE-E997-4D26-ACAE-B9175348ADDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:4.3:*:caching:*:*:*:*:*",
            "matchCriteriaId" : "2F90AD67-02CB-4006-B567-631FD633DB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:4.3:*:clearswift:*:*:*:*:*",
            "matchCriteriaId" : "BC0F87D0-E4B5-41FC-8050-386B9CE04249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:4.3:*:microsoft_sharepoint:*:*:*:*:*",
            "matchCriteriaId" : "FBBFF303-3DD6-4312-94CD-37E5170A93AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine_for_network_attached_storage:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B7D063-0862-452E-AE9E-208A9E9297DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/48",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=314&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/849209",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/19854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.10.04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=314&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/849209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/19854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.10.04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2960",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-05T19:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C22AB17-D78C-4330-A7BA-02495AE92F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:1.5.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA14719-B1F6-4547-A746-073FAFF3DCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:1.6:a10:*:*:*:*:*:*",
            "matchCriteriaId" : "1883251B-87AF-40B4-87E7-C11C5B2B2257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:1.6:a11:*:*:*:*:*:*",
            "matchCriteriaId" : "CF22B1A4-9890-4F2F-B63A-80DA3E0C9DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA206B37-DB0C-4636-8211-979E5CFEFDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E712F24-407C-451F-9DB4-09579B50F85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AE934D-08E5-42C7-B4C1-C9B0C8881B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD09E7B0-CA9F-49FC-BB8B-54CDB3230C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2CD9C4-C206-4C43-B519-6E791187E2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FC40B-AC0A-4DD6-9964-3E8D57EC5F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4445F7-307B-4653-A0E4-0AE513218980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.5:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EC7DFB-CBB8-457F-94A0-1DBB833F5F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.5:pre:*:*:*:*:*:*",
            "matchCriteriaId" : "0B6729F6-B94B-4897-BEF5-C3A10A18D085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.5:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF801CA-BED6-43CA-8EA1-522365F2AA57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455F26C8-CFDD-4C9C-8482-8D53614B1143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3C108-D79A-4465-8F4D-317AD84098AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.7:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "D21D57EA-DF58-429B-9FBE-F0080085B62E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.7:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "5E622AEA-F5B4-4BA3-B9F0-2E7C4D121411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.7:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "D23A118C-59A6-44AB-A772-ED0037C95B53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC61324-5640-48E4-B3E3-0006FC90770E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.0.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC8CA7A-AB4C-4A04-B290-43A5E2B7B9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.1.0:a6:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD529EF-93DF-441E-968B-32BAF48A9913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.1.0:a8:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAB0408-08BD-4DCE-BA56-C60AD845E705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.1.0:a9:*:*:*:*:*:*",
            "matchCriteriaId" : "F78851E3-1E2B-45DB-8B4A-F8E1BDE2E057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.1.7:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "546496E5-38B1-4E01-A8AB-C32DD7FDC59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C54567-FE72-4749-A7FB-81A09A030F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0B24D0-204C-44D2-8B13-85ACA088D724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:2.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD392209-766B-4F5F-B4B5-DCEA650D3C49"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=107871",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17037/",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17038",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17040",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17142",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17182",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17215",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-835",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-836",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:184",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_23_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14994",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-198-1",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22489",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=107871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17037/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-198-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2961",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-05T19:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0026377-4D52-43A3-9E68-35452E73AFC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17021/",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17035",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-834",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14993",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22491",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17021/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T19:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2005-2960."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cfengine:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA206B37-DB0C-4636-8211-979E5CFEFDD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=107871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17037/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-835",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-836",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-198-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=107871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17037/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-198-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libvte4:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360DA666-6352-4B77-B9AC-16386E01682E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libzvt2:1.4.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6DD87F-629F-417E-957E-967402969166"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330907",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=317312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879572407250&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15004",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=317312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879572407250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2966",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.94",
            "matchCriteriaId" : "708B174F-116E-4DB6-8C79-3FE03D9009B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF88FD4E-7248-499A-A0E3-A944D403D424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:0.92.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0814A4A-83A2-495F-88C4-7066341514AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D4B312B-5056-4941-8B71-71D602CD9597"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17047",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17059",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17083",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17095",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17108",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-847",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1025",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-06.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:187",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15000",
        "source" : "security@debian.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1950",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/193-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/193-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of installed products via the config.cgi file, which is accessible even when the requirelogin parameter is set."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC72143-27C3-498F-AFAB-98AE043C0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04885D31-09F3-455F-A1A9-815E182ABCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725BD7BE-1769-4032-ADA8-9ED15528C770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2053CFB4-602E-4141-BB3D-A440E2A31D85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112818466125484&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17030/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14995",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112818466125484&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17030/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names match an arbitrary substring, even when the usevisibilitygroups parameter is set."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2053CFB4-602E-4141-BB3D-A440E2A31D85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112818466125484&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17030/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14996",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112818466125484&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17030/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain the cleartext NIS password hashes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:procom:netforce_800_firmware:4.02:m10:*:*:*:*:*:*",
            "matchCriteriaId" : "A506BCAF-7025-4C42-BF99-D8D09051E2A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:procom:netforce_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB21CDD8-08B0-460A-A3E4-98943C9B685F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112818351032426&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17033/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14997",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112818351032426&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17033/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cerulean Studios Trillian 3.0 allows remote attackers to cause a denial of service (crash) via a reverse direct connection from a different client, as demonstrated using LICQ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerulean_studios:trillian:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189B6C6-A516-4C23-A67F-F1505D977DB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ceruleanstudios.com/forums/showthread.php?s=84987af3601384b1dc7ea1f36b237c9c&threadid=64889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112837909626441&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/43",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=8315933&forum_id=5420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ceruleanstudios.com/forums/showthread.php?s=84987af3601384b1dc7ea1f36b237c9c&threadid=64889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112837909626441&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=8315933&forum_id=5420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbitrary code via a CAB file with large records after the header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0:*:windows_file_servers:*:*:*:*:*",
            "matchCriteriaId" : "DFD8A5C2-DC03-4605-B502-3A895B7D377C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0:*:windows_workstations:*:*:*:*:*",
            "matchCriteriaId" : "5897A334-2627-480C-9CF3-85AF3B7650BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA07931-220A-4FCC-A83D-0C91563385DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal_pro:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64212DE-796D-4D5D-901A-0B5FA40D9C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_personal_security_suite:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EAE20B-6A64-4AC0-91C3-73AEC48B4BF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0018.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112837961522571&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17024/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/44",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kaspersky.com/news?id=171512144",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rem0te.com/public/images/kaspersky.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112837961522571&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17024/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kaspersky.com/news?id=171512144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rem0te.com/public/images/kaspersky.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service (crash) via IMAP clients on Mac OS X 10.4 Mail 2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39E5EFB-99BF-4247-9DB0-4E9190FEBE72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5FD48C-BA1B-4401-B7A2-E1DE1E0DF48B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758F95DB-E619-4B08-86FA-6CF2C1B0CBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F04471C-732F-44EE-AD1B-6305C1DD7DDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3499913B-5DCD-4115-8C7B-9E8AFF79DE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E237919A-416B-4039-AAD2-7FAE1F4E100D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39149924-188C-40C1-B598-A9CD407C90DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D5780C-4E29-4BCA-A47E-29FF6EAF33FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6501108-5455-48FE-AA82-37AFA5D7EC24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711E924F-7802-4FEB-9CBC-A28046036284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411BECA0-EE69-4AD6-82C5-B8238A7EE2A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4d:webstar:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC5958F6-AAFD-4995-80EC-5F0DCECB7E4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History_535.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17003",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14981",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History_535.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service via long HTTP headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:standards_based_linux_instrumentation:sblim-sfcb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0",
            "matchCriteriaId" : "C9D32CAA-E7F3-43B9-9A6E-FE9E726EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:standards_based_linux_instrumentation:sblim-sfcb:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CB59B02-BD7F-42B0-A19C-81DD257354D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16975",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=359700",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14972",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=359700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service (resource consumption) by connecting to sblim-sfcb but not sending any data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:standards_based_linux_instrumentation:sblim-sfcb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0",
            "matchCriteriaId" : "C9D32CAA-E7F3-43B9-9A6E-FE9E726EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:standards_based_linux_instrumentation:sblim-sfcb:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CB59B02-BD7F-42B0-A19C-81DD257354D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16975",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=359700",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=359700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A5B037-A737-472C-866F-F86EEEDF30D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F7732C-040D-4DA3-8F02-3F651DBB8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F60E29E-45A2-49C3-A8F7-CDF42300A7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB0D75A-D55D-4846-B581-47398344BD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A62393-39F7-45B9-9969-EF328B6804FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2009E5F-8C8F-4A91-AEDB-FC7144364C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5531AA6C-C729-4910-8FC0-11B27D942AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750899E8-04DF-4594-BD7F-4A2044233C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE30852-D827-47D5-94F9-6BDA1358C2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88417E27-47E3-4C4C-BAC9-3C1639F99388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FF3CCC-AC43-410F-958A-6E0FA23FD2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77A5E1-A4A6-4699-A18B-FDE941402749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4034B2BF-3A2C-4A6A-A5E9-A93816AD7CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00FD7AB3-2BFF-45F5-8962-8E3E87EF5C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F668721-FDE7-48FA-ABDE-FE036467CCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE5598E-0478-4D6F-AE78-55F55470DCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF78954-AD7E-441B-A514-83300738BCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37953139-D103-4371-8015-4363869BF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0FBB65-804F-4A4C-9D1F-940731C187CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228A7BFD-C097-4225-B43B-877729E87519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8504BF7-89C4-45C6-A6F2-1674CF4CC7E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C2B452-2333-47E2-961E-753CDE5AC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EF03CA-39D8-4FD5-B68F-96CD953F70EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA9FC18-076D-4DA6-A3C0-CB5182F60D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EED05AB-16BD-4547-98C9-123EDDA40EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436D746E-A601-4063-B11A-ADF5D71B0D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69875274-9655-4395-9A94-BC743C673604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5DA6A5-9842-4483-B0C0-9C79B775E85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0871F4C9-ED38-4184-9537-5044C06D5769"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67527281-81FA-4068-9E0A-7B19FB6A208A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=352676",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14985",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=352676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A5B037-A737-472C-866F-F86EEEDF30D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F7732C-040D-4DA3-8F02-3F651DBB8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F60E29E-45A2-49C3-A8F7-CDF42300A7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB0D75A-D55D-4846-B581-47398344BD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A62393-39F7-45B9-9969-EF328B6804FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2009E5F-8C8F-4A91-AEDB-FC7144364C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5531AA6C-C729-4910-8FC0-11B27D942AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750899E8-04DF-4594-BD7F-4A2044233C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE30852-D827-47D5-94F9-6BDA1358C2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88417E27-47E3-4C4C-BAC9-3C1639F99388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FF3CCC-AC43-410F-958A-6E0FA23FD2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77A5E1-A4A6-4699-A18B-FDE941402749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4034B2BF-3A2C-4A6A-A5E9-A93816AD7CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00FD7AB3-2BFF-45F5-8962-8E3E87EF5C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F668721-FDE7-48FA-ABDE-FE036467CCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE5598E-0478-4D6F-AE78-55F55470DCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF78954-AD7E-441B-A514-83300738BCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37953139-D103-4371-8015-4363869BF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0FBB65-804F-4A4C-9D1F-940731C187CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228A7BFD-C097-4225-B43B-877729E87519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8504BF7-89C4-45C6-A6F2-1674CF4CC7E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C2B452-2333-47E2-961E-753CDE5AC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EF03CA-39D8-4FD5-B68F-96CD953F70EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA9FC18-076D-4DA6-A3C0-CB5182F60D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EED05AB-16BD-4547-98C9-123EDDA40EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436D746E-A601-4063-B11A-ADF5D71B0D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69875274-9655-4395-9A94-BC743C673604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5DA6A5-9842-4483-B0C0-9C79B775E85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0871F4C9-ED38-4184-9537-5044C06D5769"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67527281-81FA-4068-9E0A-7B19FB6A208A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=352676",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=352676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A5B037-A737-472C-866F-F86EEEDF30D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F7732C-040D-4DA3-8F02-3F651DBB8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F60E29E-45A2-49C3-A8F7-CDF42300A7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB0D75A-D55D-4846-B581-47398344BD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A62393-39F7-45B9-9969-EF328B6804FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2009E5F-8C8F-4A91-AEDB-FC7144364C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5531AA6C-C729-4910-8FC0-11B27D942AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750899E8-04DF-4594-BD7F-4A2044233C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE30852-D827-47D5-94F9-6BDA1358C2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88417E27-47E3-4C4C-BAC9-3C1639F99388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FF3CCC-AC43-410F-958A-6E0FA23FD2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77A5E1-A4A6-4699-A18B-FDE941402749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4034B2BF-3A2C-4A6A-A5E9-A93816AD7CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00FD7AB3-2BFF-45F5-8962-8E3E87EF5C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F668721-FDE7-48FA-ABDE-FE036467CCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE5598E-0478-4D6F-AE78-55F55470DCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF78954-AD7E-441B-A514-83300738BCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37953139-D103-4371-8015-4363869BF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0FBB65-804F-4A4C-9D1F-940731C187CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228A7BFD-C097-4225-B43B-877729E87519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8504BF7-89C4-45C6-A6F2-1674CF4CC7E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C2B452-2333-47E2-961E-753CDE5AC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EF03CA-39D8-4FD5-B68F-96CD953F70EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA9FC18-076D-4DA6-A3C0-CB5182F60D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EED05AB-16BD-4547-98C9-123EDDA40EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436D746E-A601-4063-B11A-ADF5D71B0D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69875274-9655-4395-9A94-BC743C673604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5DA6A5-9842-4483-B0C0-9C79B775E85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storebackup:storebackup:1.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0871F4C9-ED38-4184-9537-5044C06D5769"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67527281-81FA-4068-9E0A-7B19FB6A208A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=352676",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=352676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not properly handle the LIBUIM_VANILLA environment variable when a suid or sgid application is linked to libuim, such as immodule for Qt, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uim:uim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "EFDA7FAD-FD2B-4BC1-B2C4-AAA0AEFCC6CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=331620",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.freedesktop.org/pipermail/uim/2005-September/001346.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.freedesktop.org/pipermail/uim/2005-September/001347.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17043",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-03.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=331620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.freedesktop.org/pipermail/uim/2005-September/001346.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.freedesktop.org/pipermail/uim/2005-September/001347.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weex:weex:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E51B2A3-709E-4E65-A8F8-5E29DC8680B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weex:weex:2.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFEF227-ED6C-4340-903F-2970C62807EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17028",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-855",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/86833",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-09.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/86833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.37a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62380670-0746-4945-942E-B08994074367"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17013",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5BP0T2KGVA.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5BP0T2KGVA.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to (1) cart.php or (2) index.php, or (3) the searchStr parameter in a viewCat action to index.php.  Note: vectors (1) and (2) were later reported to affect 3.0.7-pl1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715762F5-862C-489D-A75F-B1E78F2AC332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.7-pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC141847-A950-4CC3-AF62-BDD862FFE49D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.cubecart.com/?do=details&id=363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.cubecart.com/?do=details&id=459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/09/cubecart-303-multiple-variable-cross.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/35",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014984",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14962",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.cubecart.com/?do=details&id=363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.cubecart.com/?do=details&id=459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/09/cubecart-303-multiple-variable-cross.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.php in myBloggie 2.1.3 beta and earlier allows remote attackers to bypass a whitelist regular expression and conduct SQL injection attacks via a username parameter with SQL after a null character, which causes the whitelist check to succeed but injects the SQL into a query string, a different vulnerability than CVE-2005-2838.  NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treated as a myBloggie vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E0FF8C-1AEA-46C0-A867-F2728AA5E069"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112818273307878&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mywebland.com/forums/showtopic.php?t=399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/mybloggie213b.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/42",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/19935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112818273307878&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mywebland.com/forums/showtopic.php?t=399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/mybloggie213b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/19935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in file or directory name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwin:bitdefender:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5A38BE-5D75-404F-AE34-7663D3E17927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwin:bitdefender:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50EE6F4F-9342-4E4D-B67E-EDD01A8DD469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwin:bitdefender:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DFBC2D-24EB-41BF-9E63-30D0F53F5E33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.bitdefender.com/KB261-en--Filename-Format-String-Vulnerability.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16991",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://securityreason.com/securityalert/45",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://shadock.net/secubox/BitDefenderLoggingFunc.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14968",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://kb.bitdefender.com/KB261-en--Filename-Format-String-Vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/16991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://securityreason.com/securityalert/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://shadock.net/secubox/BitDefenderLoggingFunc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45540A37-2CBF-453F-8EFF-696B9318499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE40F5BA-6174-4959-BFD1-CCECAB138009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17010",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-05T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in printfaq.php in EasyGuppy (Guppy for Windows) 4.5.4 and 4.5.5 allows remote attackers to read arbitrary files via \"..\" sequences in the pg parameter, which is cleansed for XSS but not directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyguppy:easyguppy:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969202B8-7908-4242-B779-421438A20E08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyguppy:easyguppy:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1CCB69-9570-4144-A7C3-BB37A5E47D9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112812059917394&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112812059917394&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL commands via the msg_send parameter, a different vulnerability than CVE-2005-3158 and CVE-2005-3159."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1318098-F9B4-4BE8-AB18-3EB82DE4E740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112793982604963&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpfusion600109.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112793982604963&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpfusion600109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbitrary SQL commands via the (1) pm_email_notify and (2) pm_save_sent parameters, a different vulnerability than CVE-2005-3157 and CVE-2005-3159."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92E863F-C72B-428E-A134-2CA5CA7058B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC61337-9477-46AC-AA5E-7722F594BCAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112801702000944&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gnucitizen.org/writings/php-fusion-messages.php-sql-injection-vulnerability.xhtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112801702000944&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gnucitizen.org/writings/php-fusion-messages.php-sql-injection-vulnerability.xhtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg_view parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DC9F38-3CAD-4B5F-8DC9-0183A92F640F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0EDB22-A7E0-44C0-903C-02EE07BC9675"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1040A11C-5F39-4045-9E7B-A9FFC0D119ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:5.01_service_pack:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6D6B0C-920B-4547-A42A-6463BE84A3E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F2384D-1E17-4DA8-A797-7E4729C2720F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21F2030-F535-49A4-8E6E-FD1CBE689AFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112811077320676&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.s4a.cc/forum/archive/index.php/t-3585.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14489",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112811077320676&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.s4a.cc/forum/archive/index.php/t-3585.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQL commands via the (1) album and (2) photo parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EB6101-6BD0-4D6A-B681-7607B9424977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2AB1FF-B81B-4F19-9192-1E1CB66516D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D4A233-7466-4F44-8468-779AA6A60850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29821D4F-1EF2-4DA0-8CAB-67700D0B1A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1DCE7B-E049-4FA0-A972-D39BCE79E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D79B94-BBA2-47D2-9D2C-5EF59FE6D7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92E863F-C72B-428E-A134-2CA5CA7058B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC61337-9477-46AC-AA5E-7722F594BCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6716EE68-D01C-4C5B-ACA5-30E58B834C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1318098-F9B4-4BE8-AB18-3EB82DE4E740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17048",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via (1) the activate parameter in register.php and (2) the cat_id parameter in faq.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EB6101-6BD0-4D6A-B681-7607B9424977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2AB1FF-B81B-4F19-9192-1E1CB66516D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D4A233-7466-4F44-8468-779AA6A60850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29821D4F-1EF2-4DA0-8CAB-67700D0B1A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1DCE7B-E049-4FA0-A972-D39BCE79E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D79B94-BBA2-47D2-9D2C-5EF59FE6D7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92E863F-C72B-428E-A134-2CA5CA7058B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC61337-9477-46AC-AA5E-7722F594BCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6716EE68-D01C-4C5B-ACA5-30E58B834C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1318098-F9B4-4BE8-AB18-3EB82DE4E740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17055",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-52/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/54",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=261",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15018",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-52/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2023-11-07T01:57:47.147",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3160.  Reason: this candidate is a duplicate of CVE-2005-3160.  Notes: All CVE users should reference CVE-2005-3160 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polipo:polipo:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAAC736-942E-4114-B3C4-B56D4A89D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polipo:polipo:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD4F358-1A37-482B-9883-342EA8B64791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polipo:polipo:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63BA58B-2C92-47EF-9874-4782081CC276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polipo:polipo:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3075BA-6CBB-4996-8CE2-1AC7F8084108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polipo:polipo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C22C2C-3B7A-4294-B685-A144FC511FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polipo:polipo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882A8B7C-6372-45C0-93D8-9FB1A98B193F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polipo:polipo:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B729DD44-65D1-4E8A-AAE2-7A115DD44987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polipo:polipo:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8C1AEB-1002-439E-B035-62468183C9DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polipo:polipo:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBE0622-715F-425E-840A-E7CB8A284EBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14970",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which can lead to an information leak when \"unsuitable request body data\" is used for a different request, possibly related to Java Servlet pages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_05_e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFDA7F0-F0F4-4BAC-9C5C-0026B50C38FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_05_f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA803316-5DD9-49CC-AD3F-04A8CEE97097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_05_h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D14CFB-DADC-4983-8EF8-11D8741636F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_05_k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299CE786-2211-418F-B63B-0FDF458C345B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndIncluding" : "4.0.6",
            "matchCriteriaId" : "FF3E6EBD-6EC0-4A43-BFCE-440182124A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndIncluding" : "4.1.36",
            "matchCriteriaId" : "E458C818-F9FA-4D48-8D70-D284138BB7F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2379314822/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17019",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30802",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30899",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30908",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT2163",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-019_e/01-e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15003",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1979/references",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1981/references",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2379314822/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT2163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-019_e/01-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1979/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1981/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) <math> tags or (2) Extension or <nowiki> sections that \"bypass HTML style attribute restrictions\" that are intended to protect against XSS vulnerabilities in Internet Explorer clients."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174665BA-F231-45F6-922C-933B8A613009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B175F5A-7CB6-44E6-9E98-FB40F6D14FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45833DC-F104-42BB-8688-4DE66AFF72F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A75AFB-2706-42FF-8534-B910997987AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F335EB4-1A74-4FAE-ADAF-AC9FB37A80DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116C8AA3-481D-409A-ABA8-C8DA1EE8FF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DCE478-7D30-4BBC-8878-C3745D6ADAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E70F32-2F26-4836-8A4F-0A0B06EAD371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE506B8C-245E-4A7E-A24C-FABB1D4531EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934382C1-088A-4AEE-A71A-E9802AC9C1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9028E-1BDE-4BA0-A479-7A30020331D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D02E4C1-2BA7-4BC0-9C11-D0F74181DF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728E2852-5658-4DCC-AF1E-718B292F06C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lwn.net/Articles/153906/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16932",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=352777",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lwn.net/Articles/153906/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=352777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in \"edit submission handling\" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allows remote attackers to cause a denial of service (corruption of the previous submission) via a crafted URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F54837-5004-4D10-B3B0-502CED4F6592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09F36C1-CBC0-489E-B62D-4590A2E5A4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F0067D-534A-4238-A244-D92A73845432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEC422E-49BC-41D4-9F71-B834D4108EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D854161-28AA-4386-B90A-97F9692CE37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A0FA49-99DC-4691-968F-6AEB76B74370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0C6A2C-992B-45A0-8E0C-1AE983881337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292A77C7-8C7B-4F3A-B7FD-3505A9F37E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77FC97A-3BB2-4AA5-B0D6-C0D1FBEA5FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9393EF-083A-4662-BC7A-89979C2B8546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DE6A4E-6BCE-499E-B017-1E0F8D1F65B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD90730F-BF26-46C5-83F8-039CD661C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DDA753-26F5-4142-B227-07DDF14DD8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D3B5E2-AC84-421D-AC10-3266D9575922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326D4BFB-EFE7-4EAC-AA71-45E8C7E41538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736DFCB7-B747-4F98-AB87-9023BCD0B5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174665BA-F231-45F6-922C-933B8A613009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B175F5A-7CB6-44E6-9E98-FB40F6D14FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45833DC-F104-42BB-8688-4DE66AFF72F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A75AFB-2706-42FF-8534-B910997987AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F335EB4-1A74-4FAE-ADAF-AC9FB37A80DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116C8AA3-481D-409A-ABA8-C8DA1EE8FF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DCE478-7D30-4BBC-8878-C3745D6ADAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBFFA2C-6768-4CB9-B0B0-BDB79CA1DEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E70F32-2F26-4836-8A4F-0A0B06EAD371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE506B8C-245E-4A7E-A24C-FABB1D4531EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934382C1-088A-4AEE-A71A-E9802AC9C1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9028E-1BDE-4BA0-A479-7A30020331D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D02E4C1-2BA7-4BC0-9C11-D0F74181DF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728E2852-5658-4DCC-AF1E-718B292F06C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=358163",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=358163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, which allows remote attackers to conduct cross-site scripting (XSS) attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174665BA-F231-45F6-922C-933B8A613009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B175F5A-7CB6-44E6-9E98-FB40F6D14FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45833DC-F104-42BB-8688-4DE66AFF72F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A75AFB-2706-42FF-8534-B910997987AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F335EB4-1A74-4FAE-ADAF-AC9FB37A80DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116C8AA3-481D-409A-ABA8-C8DA1EE8FF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DCE478-7D30-4BBC-8878-C3745D6ADAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBFFA2C-6768-4CB9-B0B0-BDB79CA1DEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0C4A1E-B084-4C78-BEE4-4E733159F367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E70F32-2F26-4836-8A4F-0A0B06EAD371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE506B8C-245E-4A7E-A24C-FABB1D4531EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934382C1-088A-4AEE-A71A-E9802AC9C1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9028E-1BDE-4BA0-A479-7A30020331D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D02E4C1-2BA7-4BC0-9C11-D0F74181DF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728E2852-5658-4DCC-AF1E-718B292F06C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=361505",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=361505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists (ACLs) on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the template."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/834424/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/834424/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 2000 before Update Rollup 1 for SP4, when the \"audit directory service access\" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized activities without detection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/833873",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/833873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/883639",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/883639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntuser.pol cannot be accessed, which could cause system administrators to believe that the system is compliant with the specified settings."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/884559",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/884559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could prevent the string from being null terminated and lead to data corruption or enable buffer overflow attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/824867",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/824867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct domain controller and could allow the user to bypass intended restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/821102",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/821102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name (FQDN) is 8 characters long."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/830847",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/830847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/842742",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/842742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/891076",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/891076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-06T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/831374",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/831375",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.microsoft.com/kb/831374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/831375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/kb/900345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3117",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-06T19:02:00.000",
      "lastModified" : "2023-11-07T01:57:46.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3150.  Reason: This candidate was privately assigned by a CNA to an issue, but the issue was published through separate channels and assigned a new identifier by the MITRE CNA, so it is a duplicate of CVE-2005-3150. Notes: All CVE users should reference CVE-2005-3150 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3118",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-06T19:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the system to run without a firewall after a reboot."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:william_stearns:mason:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1657C221-0036-48D1-8C40-E52EF34395A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17084",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-845",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/19875",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15019",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1976",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1764",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-07T18:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux 2.6.11 on 64-bit x86 (x86_64) platforms does not use a guard page for the 47-bit address page to protect against an AMD K8 bug, which allows local users to cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freshmeat.net/articles/view/1678/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=637716a3825e186555361574aa1fa3c0ebf8018b",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=637716a3825e186555361574aa1fa3c0ebf8018b",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/13904",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43324",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://freshmeat.net/articles/view/1678/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=637716a3825e186555361574aa1fa3c0ebf8018b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=637716a3825e186555361574aa1fa3c0ebf8018b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2104",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-07T18:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:sysreport:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BFBAD8-1A0B-4A80-A83E-0771CE331D0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16381",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17539",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1014653",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00034.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00035.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-598.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15379",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162978",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21770",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9411",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-598.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2497",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-07T18:02:00.000",
      "lastModified" : "2023-11-07T01:57:38.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2641.  Reason: This candidate is a duplicate of CVE-2005-2641.  Notes: All CVE users should reference CVE-2005-2641 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3178",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-07T18:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xli:xli:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "741E2806-21B2-445F-9714-CEA64DF4D50E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xloadimage:xloadimage:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "81003EB2-9C45-420A-80C8-7BB8545A2E60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.62/SCOSA-2005.62.txt",
        "source" : "security@debian.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.56/SCOSA-2005.56.txt",
        "source" : "security@debian.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112862493918840&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17087/",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17124",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17139",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17140",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17143",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17206",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17273",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17282",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17369",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18050",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18170",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18491",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1015072",
        "source" : "security@debian.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-013.htm",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-858",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-859",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-26.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:192",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-802.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433935/30/5010/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15051",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10590",
        "source" : "security@debian.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.62/SCOSA-2005.62.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.56/SCOSA-2005.56.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112862493918840&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17087/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-013.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-26.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-802.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433935/30/5010/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2337",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-10-07T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE9BA9-DE82-4461-8D05-8B4DA2BAFE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA0B06-65B5-43F5-949A-82E7D92DD90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A236FC9B-F3CF-43A7-BB19-4255A2CC33D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FF7BFC-8107-44F6-946A-D358152E53D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609CC668-6AE0-4047-BDE4-1A6CFD17901B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A035112-8F5B-455D-9085-993C9B66627C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C1DE25-8BD7-4729-800D-0B5D712838A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9313467-150B-4231-80E5-35EFD6B64978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A4185F-1CE1-48D1-B967-01A96527417B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551CCA30-00E2-46CF-A05B-FA8F9827CDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.2_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF152DC-D5B5-4692-AA7F-38357A2C48B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.2_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724A539F-F54A-4896-9116-89D35350670D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2362914675/index.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/16904",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17094",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/17098",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17129",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17147",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17285",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/59",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-860",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-862",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-864",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-05.xml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/160012",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:191",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-799.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.ruby-lang.org/en/20051003.html",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14909",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014948.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-195-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22360",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10564",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2362914675/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/160012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-799.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ruby-lang.org/en/20051003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014948.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-195-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3119",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-12T13:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a denial of service (memory consumption) via a large number of authorization token keys."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.10",
            "versionEndIncluding" : "2.6.13",
            "matchCriteriaId" : "52E430AC-F462-488C-BAFD-6EB0939E9CF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4043483fddCiQX1WyG_orbko06TrjMVA",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17114",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15076",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11236",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4043483fddCiQX1WyG_orbko06TrjMVA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-12T13:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions, which allows local users to enable DRM debugging and obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=107893",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17114",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17280",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=d7067d7d1f92cba14963a430cfbd53098cbbc8fd",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9549",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15154",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=107893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=d7067d7d1f92cba14963a430cfbd53098cbbc8fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1978",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-12T13:04:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "COM+ in Microsoft Windows does not properly \"create and use memory structures,\" which allows local users or remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17161",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/950516",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15057",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1261",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1269",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1466",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1499",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A576",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A816",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/950516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1979",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-12T13:04:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an \"unexpected protocol command during the reconnection request,\" which is not properly handled by the Transaction Internet Protocol (TIP) functionality."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17161",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=320&type=vulnerabilities",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15058",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1134",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1283",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1338",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1513",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1550",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A686",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=320&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1980",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-12T13:04:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service hang) via a crafted Transaction Internet Protocol (TIP) message that causes DTC to repeatedly connect to a target IP and port number after an error occurs, aka the \"Distributed TIP Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17161",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=319&type=vulnerabilities",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15059",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1136",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1182",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1203",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1253",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1325",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1413",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=319&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2119",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-12T13:04:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17161",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securityreason.com/securityalert/73",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051011b.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/180868",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18828",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15056",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1071",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1452",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A551",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/73",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051011b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/180868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2128",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-12T13:04:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17160",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051011a.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/995220",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18822",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15063",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-050",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1149",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1231",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1267",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1424",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1434",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051011a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/995220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-12T13:04:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63CC83D-BF18-42BF-A5DF-3516508B072F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051001-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=312&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427409/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=312&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427409/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-12T13:04:00.000",
      "lastModified" : "2023-11-07T01:57:43.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3663, CVE-2005-3664.  Reason: this candidate was intended for one issue, but multiple advisories used this candidate for different issues.  Notes: All CVE users should consult CVE-2005-3663 and CVE-2005-3664 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2965",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-12T13:04:00.000",
      "lastModified" : "2023-11-07T01:57:44.213",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4802, CVE-2005-4803.  Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2005-4802 and CVE-2005-4803 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-12T13:04:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Orinoco driver (orinoco.c) in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used packet whose length is increased, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.13",
            "matchCriteriaId" : "2BA1764A-11F1-489F-A727-7957397763A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112914754708402&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/75",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=feecb2ffde28639e60ede769c6f817dc536c677b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112914754708402&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=feecb2ffde28639e60ede769c6f817dc536c677b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3181",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-12T13:04:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndIncluding" : "2.6.13.3",
            "matchCriteriaId" : "A9F602FA-8F83-4EF9-A35F-2904E977205F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14FC74C-2341-4582-81B2-CD8A89033632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC1CA0A-375F-40D6-9A2A-383B48F4778A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux:2006.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B501B8B6-338B-4E1E-843D-905D335E426B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=829841146878e082613a49581ae252c071057c23",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404346883bQBeBd26syWTKX2CVC5bDcA",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17114",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17280",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9549",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=829841146878e082613a49581ae252c071057c23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404346883bQBeBd26syWTKX2CVC5bDcA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-808.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-199-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-12T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup_data_and_business_center:4.5fp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C038986E-D722-4BB2-B499-22AB550110B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup_data_and_business_center:4.5mp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C085A38F-A0FF-45B2-A431-526580E92DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup_enterprise_server_client:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B24AC2E-EE02-4F64-83B6-D0C233E434A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup_enterprise_server_client:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A4909B-67D0-471E-BB9D-C3163DD02A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup_enterprise_server_client:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02DD594-B1B2-4174-9B62-09C4422D7ED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17181",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015028",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/279085.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102054-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/495556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15079",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.10.12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-05-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/279085.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102054-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/495556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.10.12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-05-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-12T22:02:00.000",
      "lastModified" : "2023-11-07T01:57:44.013",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate has been revoked by its Candidate Numbering Authority (CNA) because it was initially assigned to a problem that was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3183",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-12T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3c:libwww:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB19713F-BA80-4434-9C4F-A6C2EA38489C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17119",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17122",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17489",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17814",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19193",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0208.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9444",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9445",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15035",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159597",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9653",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/220-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0208.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/220-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170518\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThe risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 2.1 and 3 which are in maintenance mode.\n",
        "lastModified" : "2007-09-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1985",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-13T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an \"unchecked buffer\" when processing certain crafted network messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17165",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015041",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.osvdb.org/19922",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15066",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-046",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21700",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1106",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1210",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1536",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1544",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A910",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1987",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-13T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the \"Content-Type\" string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "E88E31D4-1120-4A18-BA65-E2C96B35E599"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "9FB47735-C33C-43B6-9AC6-E5ECAB18AF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:itanium:*",
            "matchCriteriaId" : "5AA32D8C-430E-4CA2-B2DF-FFF63714F480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "E3C43D05-40F8-4769-BA6B-A376420EA972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C65B29-89C4-4C05-BD53-27CAD31810A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97474F37-792B-4FD1-B8B8-3AAC050DF327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:sp1:*:*:*:*:*:itanium:*",
            "matchCriteriaId" : "92759831-AC3F-4F01-919F-8C0BAFE15352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "949AD335-71B5-4C93-8698-6C17119CE7A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:tablet_pc:*:*:*",
            "matchCriteriaId" : "24FD61D1-518D-47D1-969E-81E3CBCB15FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:tablet_pc:*:*:*",
            "matchCriteriaId" : "BD92FDA6-5BD1-4AAD-B1BE-60B477E35316"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0289.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112915118302012&w=2",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17167",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015038",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015039",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ907245",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/883460",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/19905",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15067",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-048",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22495",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1130",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1201",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1406",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1420",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1515",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A581",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A848",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0289.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112915118302012&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ907245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/883460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/19905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2120",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-13T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of \"\\\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17166",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securityreason.com/securityalert/71",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015042",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051011c.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/214572",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18830",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15065",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-047",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1244",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1328",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1519",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051011c.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/214572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2963",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-13T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749F9325-2253-420A-941C-BD56491E127B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84593AE8-E873-4C4F-99F0-81037B5BEC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43025F27-302F-41E4-9DD3-99AFAF94B758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5BE018-681C-47A9-B911-2A9DAD07096B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEBF877-4EB6-4E4F-BF8B-A172D2BA3981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F30540C5-133A-4B84-9F6C-576AD87CF6F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58AE41C1-D2C6-406B-89D0-C8B3408A0D53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323789",
        "source" : "security@debian.org"
      }, {
        "url" : "http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:200",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17060/",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17067",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17348",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-844",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19863",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15224",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22520",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17060/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-13T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (\") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:uw-imap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2004f",
            "matchCriteriaId" : "1D9B64B5-DB7C-4ACC-B686-A14F97CCFF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:uw-imap:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF2722B-0003-4FC5-9201-B646960E91D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:uw-imap:2004a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7969D25D-D6C5-4196-9C38-8FE327771174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:uw-imap:2004b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77BB3D9E-3462-41D5-AE85-4B77151E88EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:uw-imap:2004c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00545D19-4721-4B0B-8D4D-E7220A044D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:uw-imap:2004d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9DA399-4B7A-41ED-8532-D9C26059679B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:uw-imap:2004e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D548F276-417F-4F32-82AB-C405B404C30C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0276.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17062/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/47",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.500161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/933601",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_23_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-848.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-850.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0501.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430296/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430303/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.washington.edu/imap/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0276.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17062/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.500161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/933601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-848.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-850.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430303/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.washington.edu/imap/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-13T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86CC05D-62C9-4F9B-AFA8-C0CF8C00DEF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918A0DB1-2FE6-4FC1-B957-3FFE60263A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C99D1C6-E73D-4FAD-872C-FB7CD5CBE48D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC3FFB-812A-4440-BEFB-4D2B67AC37AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12CBC28-D23A-483B-829A-B11423D9F18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C259E51-4DF4-4D0C-9AB4-F3840DA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39668C04-DFAA-4152-9A8D-74C900C96FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A7B9A4-B6A4-457C-AB14-22E900D85163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81EF987-4610-4F52-9B7D-02ABC6E85B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB98F9FF-49A7-433F-8CA2-D842E10D3201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65EFD68C-A7E9-4371-AB84-CB08973E2659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B119C7BC-038E-458F-8C54-6B0C83EF6B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1597610A-0824-4CC7-B969-08ADA89B7476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB7001A-D790-4995-92CD-45E1CA8E6EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1E0252-304E-4835-9614-EFE1A58E9BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824D8F15-E510-414E-A08B-C6141E0D0506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B8987C-A1E3-4F86-8264-5C23F182BF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA54C747-8E09-4E41-9CE6-F5F7E83F49FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F6F7FBA-9809-4D36-9173-987B801F9774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D694FB-3E98-46F0-8096-479206CDF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davide_libenzi:xmail:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86BB0A56-D579-45ED-8D16-03670BB53E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/81",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-05.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=321&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xmailserver.org/ChangeLog.html#oct_12__2005_v_1_22",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=321&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xmailserver.org/ChangeLog.html#oct_12__2005_v_1_22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2992",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-13T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arc:arc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.21j",
            "matchCriteriaId" : "0BD70602-CD91-42E5-96B2-3580D6E13A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0535.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112689596714383&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16805",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17068",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securityreason.com/securityalert/11",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-843",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0535.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112689596714383&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-13T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2458D0E-66F7-484C-9989-308530AE766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A61633-B9B8-44B5-B352-29F4BFBD2BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wget:wget:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551786A9-941B-4FCF-A9F4-EFC560CE5316"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17193",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17203",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17208",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17228",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17247",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17297",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17320",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17400",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17403",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17485",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17965",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19193",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/82",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.519010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-19.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=322&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_63_wget_curl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00055.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-807.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-812.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2125",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/205-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.519010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=322&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_63_wget_curl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00055.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-807.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-812.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/205-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-13T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:igateway:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4F8E1B-D85A-42E4-83CE-4BBC365D17E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:igateway:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1120BAF3-910D-4928-80BB-25FB1F87B671"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0349.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0418.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/86",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33485",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0418.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2661",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:up-imapproxy:up-imapproxy:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C662911-AB53-4247-A958-FA2BC456797E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:up-imapproxy:up-imapproxy:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34505EE9-6B72-4405-9B6A-1FD481010980"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17100/",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17120",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19113",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securityreason.com/securityalert/547",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-852",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-04.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15048",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2014",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2015",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17100/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2967",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D402CB-4DED-4525-AF38-B5EC73C39E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A905719D-4520-4374-B3A7-55034728B85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2899EF34-824B-4893-8636-64A83EC5885B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB10333-6C25-4359-BB3F-D76468170825"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0196.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17097",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17099/",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17111",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17132",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17162",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17179",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17282",
        "source" : "security@debian.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.415454",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-863",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-08.xml",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:180",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/19892",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15044",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-196-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://xinehq.de/index.php/security/XSA-2005-1",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22545",
        "source" : "security@debian.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0196.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17099/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.415454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-196-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xinehq.de/index.php/security/XSA-2005-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to execute arbitrary code via a long filename in a compressed (1) ALZ, (2) ARJ, (3) ZIP, (4) UUE, or (5) XXE archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:estsoft:alzip:5.52_english:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932AF33A-4D44-49D9-8A0C-1EF05BA8E67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:estsoft:alzip:6.1_international:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E44919-5ACD-44E2-BC98-B2B7F9C6509A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:estsoft:alzip:6.12_korean:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B14029-1887-4646-AD74-D17A176B3B29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16847/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-49/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16847/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-49/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2023-11-07T01:57:48.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3178.  Reason: this candidate is a duplicate of CVE-2005-3178; the duplicate arose from a pre-candidate that was not deleted during the editing phase. Notes: All CVE users should reference CVE-2005-3178 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:planet_technology_corp:fgsw2402rs:1.2_firmware:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536CADF-9D73-42DB-AE7C-3AFB725CC262"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112861552020302&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/53",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112861552020302&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to execute arbitrary code as SYSTEM by sending a crafted DeviceIoControl command, then removing an allowed program from the firewall list."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webroot_software:desktop_firewall:1.3.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFD2689-97F0-4597-B9F3-46D00B19EE40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0129.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15745/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-10/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.webroot.com/ics/support/KBAnswer.asp?questionID=2332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15016",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15745/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-10/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.webroot.com/ics/support/KBAnswer.asp?questionID=2332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webroot Desktop Firewall before 1.3.0build52 allows local users to disable the firewall, even when password protection is enabled, via certain DeviceIoControl commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webroot_software:desktop_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0_build_43",
            "matchCriteriaId" : "2C2C14DD-82D9-4384-8F52-0F66001411BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0129.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15745/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-10/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/55",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.webroot.com/ics/support/KBAnswer.asp?questionID=2332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15745/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-10/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.webroot.com/ics/support/KBAnswer.asp?questionID=2332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in aradmin.asp for aspReady FAQ allow remote attackers to execute arbitrary SQL commands, possibly via the (1) txtLogin and (2) txtPassword parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspready_faq_manager:aspready_faq_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47129DA7-695A-48DD-9EC8-635699E9227C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112861875408315&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17091/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/52",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112861875408315&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17091/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the sitetitle parameter in header.php and (2) the version and (3) query_count parameters in footer.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:utopia_software:utopia_news_pro:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A39A7F8-EBCC-4E06-B663-6BA87D1709DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:utopia_software:utopia_news_pro:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A35C687-FC90-432B-A4A5-B47773D93DFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112872691119874&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/utopia113.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17115/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15027",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.utopiasoftware.net/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112872691119874&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/utopia113.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17115/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.utopiasoftware.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:utopia_software:utopia_news_pro:1.1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8584C5-ADBE-4252-B0ED-F2184AD5D7A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:utopia_software:utopia_news_pro:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F0346C-B380-415B-8180-A5A8FA0687EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:utopia_software:utopia_news_pro:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A39A7F8-EBCC-4E06-B663-6BA87D1709DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112872691119874&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/utopia113.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17115/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15028",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.utopiasoftware.net/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112872691119874&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/utopia113.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17115/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.utopiasoftware.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the (1) p or (2) p_t02 parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:html_db:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCE6796-482A-4E24-96B6-4FC04A627687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:html_db:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229FC889-39B4-4C2D-BE1D-244443C939BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0173.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870398418456&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14935/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/62",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_htmldb_css.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15031",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0173.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870398418456&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14935/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_htmldb_css.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:html_db:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCE6796-482A-4E24-96B6-4FC04A627687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:html_db:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229FC889-39B4-4C2D-BE1D-244443C939BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0174.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870441917345&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14935/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_htmldb_plaintext_password.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0174.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870441917345&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14935/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_htmldb_plaintext_password.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFAE1E8A-644B-42FD-B149-89AD420BD7A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8075E330-5819-4105-9BB7-4DCC3C0EAEF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB346764-EDF2-4BE1-A273-C2CE9A173CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E59B89D9-AAF9-40CB-931C-EB4958491B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64888FB-133F-4930-8368-1BD2A4FB11A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAAD1A33-4333-4AFB-8D49-1274AE345BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB37CB05-942B-460C-8F1E-2098A4B5F6AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFAA7E8B-263B-40A2-B6D8-8A303A7D4358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085FF0CB-B426-4DCB-9411-017A45280A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:developer_9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AC36E8-211F-4E0B-A486-2511521D9B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2201796B-013B-4440-B366-1F2966AA86FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90F6C4F-CEF5-4172-97FC-617B71EAA636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5_fips:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61ECB215-482D-4E47-A1CE-169ADE17812B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E121A29C-C1EB-47F9-B220-5B5C9EFA9A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFA2A5C-B289-4505-85F5-7F6F0222B552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E876825-D6E5-4958-B737-4CE43A32BEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E07567-754A-40C0-9428-D151880EE6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6233345D-5100-404A-9B61-524D9679D9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB739C3-A9BD-433F-8547-12BC615DB18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9B1EAF-ED2D-4B3A-9EB7-5FEB9E6B684C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DB0B6B-EB97-448A-B63E-E5997382DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA77BC6D-661F-46E9-B144-1587C1192B8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F9C7F3-8140-4FEF-8319-64CE51B830AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5_fips:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F843A2C-2FC8-44E0-84C0-E20186A979CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957E3BDA-D69B-4FD8-B72A-E8D7C3AB5833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68286D06-9EBA-4FBD-AB0B-D80993895416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C059683-E0A1-4E97-B393-CB6B0EACF7C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5675664-7036-48D0-9524-0350F626D4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597EE9ED-6A95-46C7-BE83-ADEC6AA65341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50411FCF-8173-458D-B18A-4F7DE7E81A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65D66A0-23F7-4110-AF71-05CBFB3F92F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F207CBC6-D186-418D-8F11-3E623530E00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB2708A-58D1-4F17-8504-3748D6667788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83B1C7A-287A-405F-B44E-85F891183D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5_fips:*:*:*:*:*:*:*",
            "matchCriteriaId" : "015C96B0-1B89-4ECA-B1BB-AEFFC398088C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC1E19-8F20-4215-8D90-E42EF7126BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE456956-255F-4BA6-B830-356512B5D2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB172848-A873-4137-A335-AD034806A5EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78BD7D2-7B48-438C-8C24-01C4007C1A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F64908D-FDAA-499B-8060-8A6EC2443418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61851FB-AC6F-4E56-8CA8-F8CE97D65364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99255D3E-41FF-4D2F-A11B-9563997F4110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0177.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870541502542&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/66",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_xmldb_css.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15034",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870541502542&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_xmldb_css.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the \"set markup HTML TABLE\" command, which is executed when the user selects a table."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.2.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "28388E5D-A93B-438F-B43B-5C7E9BA0B989"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0172.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870489324437&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/63",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_isqlplus_css.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0172.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870489324437&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_isqlplus_css.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "840BDD7B-E520-45D8-BB95-9C0EF19336FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0176.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870589127719&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/64",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_isqlplus_shutdown.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15032",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870589127719&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_isqlplus_shutdown.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:4.5.10.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1AC3E4-4A7B-499D-8FBB-B1E61EE09D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119C936-B996-42F1-9141-D3DECAB1949E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:6.0.8.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441ED303-854C-4DFA-8A92-64773E5B9488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:6i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38985A2-F5F6-4157-92C0-CE80B7F37013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:9i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E934ED-92DE-47C3-94C4-6714A32FC32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:forms:10g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D0E1F5-89E9-4C1E-B20A-6EF175D8AE70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0175.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870645720399&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/65",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_forms_shutdown.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15039",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112870645720399&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15991/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_forms_shutdown.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in (1) aeNovo, (2) aeNovoShop and (3) aeNovoWYSI allow remote attackers to execute arbitrary SQL code via (a) the password parameter in control.asp, and (b) the strSQL parameter in search.asp, which can enable XSS attacks in resulting error messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aenovo:aenovo:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CA4376-FB7C-4FB3-AF36-E28907CB6A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aenovo:aenovoshop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E84793B-F90B-440D-B6DD-4F9F1D4EC431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aenovo:aenovowysi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66F6D79-0C97-4458-921C-48AECE03973A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112872593432359&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17117/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-78.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15038",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112872593432359&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17117/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-78.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aenovo:aenovo:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CA4376-FB7C-4FB3-AF36-E28907CB6A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aenovo:aenovoshop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E84793B-F90B-440D-B6DD-4F9F1D4EC431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aenovo:aenovowysi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66F6D79-0C97-4458-921C-48AECE03973A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112872593432359&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17117/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-78.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112872593432359&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17117/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-78.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Kaspersky Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:*:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "72C69048-3912-4AA0-9EE1-A0FDE712199E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwin:bitdefender_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30643C74-5FE6-44C2-8481-AAAEF4A3374F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eset_software:nod32_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E090CB46-AD90-4925-94DC-2F37A8E8FF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE47D20B-4B5A-401A-BF5A-9264EC00B751"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B406B15-77C1-433C-AD89-59539ACB3972"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of McAfee Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mcafee:antivirus_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC85D58-2714-4207-88C2-A93D95672A62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCF6E5F-DF9F-4B6A-A826-1268E0EAD4FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A088A0F-4465-441D-9E2D-12DAAAD19440"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dr.web:dr.web_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90AEF1CF-0DFF-47FE-A10B-149DB5E8A8F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:antivir_personal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A75AF-D8B4-4B54-87E9-6EED562CAAC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Norman Virus Control Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:norman:virus_control_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DCEEAD-C39B-487C-84F3-3EEC7C5C7DB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fortinet:fortinet_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782879AB-6F83-4F33-A37B-C9B14F563C74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of VBA32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vba32:vba32_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C8549-2585-435F-BEE7-9645C8A5FBD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Rising Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rising:rising_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E88158D-8E9F-4474-B33F-4C0DDD8320B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of AntiVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:antivir_personal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A75AF-D8B4-4B54-87E9-6EED562CAAC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of (1) eTrust-Iris and (2) eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133DBA5A-1F25-43E8-984D-391170082AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus_iris_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "372B82C0-49C5-4236-89BC-16C00C9E7113"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of ArcaVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcavir:arcavir_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA10BCD8-9502-44AF-8C87-78208B534976"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of UNA Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:una:una_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D335DD-878B-4221-B832-5B68D4042447"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarus:ikarus_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE7D9E0-658E-497C-84D8-A0D341B5A1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A85C689-95E0-41F7-83D9-5A8B0AB42390"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:panda:activescan:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BECDED27-304A-436C-8051-422ADDB12111"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cat:quick_heal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7493D410-71FB-4762-8D8A-08C352FDC58E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of TheHacker allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thehacker:thehacker:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C460FD-7C10-4C46-8C2E-8CA0E120E1DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Trustix Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustix:antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E67467D-F233-4BB2-8D90-5D39218C8B47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Grisoft AVG Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grisoft:avg_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD58FE3-6CB3-4A76-9795-B002DF482208"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in unspecified versions of Proland Protector Plus 2000 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proland:protector_plus:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5492F7D-75C3-41D3-93DD-7225052F83AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879611919750&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shadock.net/secubox/AVCraftedArchive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via (1) the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or (2) the nick parameter of lostpwd.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cynox:cyphor:0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9961F038-5A12-4D81-B023-A92BA7CEC114"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879353805769&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17104/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/70",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879353805769&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17104/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML via the t_login parameter of footer.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:cynox:cyphor:0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9961F038-5A12-4D81-B023-A92BA7CEC114"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112879353805769&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17104/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/70",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015020",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15047",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112879353805769&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17104/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T19:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of service (panic) via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101881-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101881-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-14T19:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4BB686-4159-41D9-9AE2-67AF2FCDE0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=333566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=333566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3120",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-17T20:06:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invisible-island:lynx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.6",
            "matchCriteriaId" : "678A8E2F-E386-4534-85A0-DEDC96407237"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.47/SCOSA-2005.47.txt",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038019.html",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17150",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17216",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17230",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17231",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17238",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17248",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17340",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17360",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17444",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17445",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18376",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18584",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20383",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1015065",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-010.htm",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-874",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-876",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1085",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:186",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-803.html",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419763/100/0/threaded",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435689/30/4740/threaded",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15117",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170253",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9257",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/206-1/",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.47/SCOSA-2005.47.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1015065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-010.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-803.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419763/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435689/30/4740/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/206-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-17T20:06:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors related to the \"/proc\" filesystem, which trigger a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101987-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101987-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-17T20:06:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via \"..\"  sequences in the g2_itemId parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630262DD-0577-4655-B558-3819019A6F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54931180-0CCA-46B2-B139-EDC35FD7D87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831E6EDF-1466-4EE1-8987-6580DC80712D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF8B06-63F6-49FE-B98C-4EDCD95A997E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB5079E-8FEA-427F-8004-150AD4827C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75B75A-5016-4503-A1A9-0B5BFA439C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8620FD-82E4-4877-8C5A-A95D753FE9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC0225C-6E32-452B-A7E2-0CA91D9028C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dipper.info/security/20051012/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://gallery.menalto.com/gallery_2.0.1_released",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/88",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://dipper.info/security/20051012/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://gallery.menalto.com/gallery_2.0.1_released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2969",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-18T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A518E8-21BE-4C5C-B425-410AB1208E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E79A05-64F3-4397-952C-A5BB950C967D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98693865-2E79-4BD6-9F89-1994BC9A3E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6476506-EC37-4726-82DC-D0E8254A8CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4E446D-B9D3-45F2-9722-B41FA14A6C31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers/dir5.10.3_docs_relnotes.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17153",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17178",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17180",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17189",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17191",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17259",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17288",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17335",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17344",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17389",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17409",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17432",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17466",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17589",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17617",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17632",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17888",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18045",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18165",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18663",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21827",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25973",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/26893",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015032",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101974-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-031.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20051202-openssl.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-875",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-881",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-882",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_61_openssl.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openssl.org/news/secadv_20051011.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-762.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-800.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15071",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/24799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2710",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2908",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3531",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2457",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/35287",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1633",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11454",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers/dir5.10.3_docs_relnotes.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101974-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-031.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20051202-openssl.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_61_openssl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openssl.org/news/secadv_20051011.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-762.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-800.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/24799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/35287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-18T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcefire:snort:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29DDB0C-701D-429C-82EE-04EB5E18FA96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcefire:snort:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C4A2D0-E47D-419B-98F2-8FB14A097DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcefire:snort:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07636BAF-C6CE-4452-B0BF-3A032D53B2C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0505.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/175500",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.snort.org/docs/change_logs/2.4.3/Changelog.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=362187&RenditionID=",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=363396&RenditionID=",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/207",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0505.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/175500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.snort.org/docs/change_logs/2.4.3/Changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=362187&RenditionID=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=363396&RenditionID=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-18T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a seteuid operation, which could allow attackers to execute code as other system UIDs that are greater than the minimum value, which should be 1000 on Debian systems."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:1.0:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "210D4507-0674-4CE8-B5E5-2968EBBD812A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.0:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "2C7E6FC7-B662-4EAD-BB70-4D0B71FC227B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.1:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "41C1A717-D4C5-4B13-B854-4876390FFE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.2:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "066CB342-3253-474E-BB68-3087DC25D4B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.3:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "A4E0DCAA-DD68-4F96-8FB5-93B50DEBCBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.4:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "65B98F5D-BFCB-4D40-90E2-ADCB3DD01C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.5:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "34C675A3-DC2A-4B42-AC92-B360C5D9B24F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.6:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "F4DC500E-517C-4835-AC40-44982E465AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.7:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "B3CD3A7F-825D-41DF-92FF-A60A33AC8B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.0:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "EAF0C607-C08F-4D04-8ACE-2796AB369DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.1:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "92229934-F6EF-469D-ADE1-7901BBD2252B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.2:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "90D1310E-824E-4C2A-AAE7-D0C9D27DA8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.3:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "DF999CEA-56D2-464D-A6E0-A1972C2D0317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.4:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "149D3D64-6B9B-4AC9-95F8-592BF2BE0349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.5:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "FD972D61-0392-4EB3-9469-ACBBCF2637C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "90A7D13C-F694-4D4B-9B58-9DE68317C136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.1:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "5EDF950B-043C-485F-A08E-DCF81EC931FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.2:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "384E9435-030F-43BC-9455-301F574CF663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.3:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "1198FF43-4566-41B9-9297-D58323A64369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.4:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "BFF334A9-3D51-4922-BCE1-D26F65899D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.5:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "467E03EB-EB96-466E-A960-072BCACFEF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.7:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "CF5DDD4C-B253-47EA-A7CC-2B4674903CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.7.1:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "59515C6D-1B84-4D2C-9C9B-C2DC0DC8DAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.8:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "7C272EA2-B65C-4F16-BACF-B7717319EC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.11:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "CF865B2C-9643-4690-BF2F-57F21522AD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.21:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "F41C0839-B0B7-4BC7-A44B-F08A1649EB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.22:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "6831B987-BF5B-4555-825A-AF56C4EEC182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.23:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "1CF0C54A-7D2E-45B2-97DD-F486D62F2E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.24:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "05CFE913-3AA0-4B73-9A37-B449E6A4162D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.alioth.debian.org/pipermail/secure-testing-announce/2005-August/000003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.alioth.debian.org/pipermail/secure-testing-announce/2005-August/000003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-18T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the web document root, which allows remote attackers to obtain sensitive information via direct requests to those CGIs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:1.0:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "210D4507-0674-4CE8-B5E5-2968EBBD812A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.0:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "2C7E6FC7-B662-4EAD-BB70-4D0B71FC227B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.1:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "41C1A717-D4C5-4B13-B854-4876390FFE56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.2:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "066CB342-3253-474E-BB68-3087DC25D4B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.3:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "A4E0DCAA-DD68-4F96-8FB5-93B50DEBCBAE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.4:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "65B98F5D-BFCB-4D40-90E2-ADCB3DD01C41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.5:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "34C675A3-DC2A-4B42-AC92-B360C5D9B24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.6:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "F4DC500E-517C-4835-AC40-44982E465AB7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:2.7:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "B3CD3A7F-825D-41DF-92FF-A60A33AC8B4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.0:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "EAF0C607-C08F-4D04-8ACE-2796AB369DF3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.1:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "92229934-F6EF-469D-ADE1-7901BBD2252B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.2:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "90D1310E-824E-4C2A-AAE7-D0C9D27DA8C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.3:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "DF999CEA-56D2-464D-A6E0-A1972C2D0317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.4:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "149D3D64-6B9B-4AC9-95F8-592BF2BE0349"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.5:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "FD972D61-0392-4EB3-9469-ACBBCF2637C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "90A7D13C-F694-4D4B-9B58-9DE68317C136"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.1:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "5EDF950B-043C-485F-A08E-DCF81EC931FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.2:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "384E9435-030F-43BC-9455-301F574CF663"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.3:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "1198FF43-4566-41B9-9297-D58323A64369"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.4:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "BFF334A9-3D51-4922-BCE1-D26F65899D69"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.5:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "467E03EB-EB96-466E-A960-072BCACFEF70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.7:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "CF5DDD4C-B253-47EA-A7CC-2B4674903CDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.7.1:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "59515C6D-1B84-4D2C-9C9B-C2DC0DC8DAE4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.8:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "7C272EA2-B65C-4F16-BACF-B7717319EC3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.11:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "CF865B2C-9643-4690-BF2F-57F21522AD11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.21:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "F41C0839-B0B7-4BC7-A44B-F08A1649EB64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.22:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "6831B987-BF5B-4555-825A-AF56C4EEC182"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.23:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "1CF0C54A-7D2E-45B2-97DD-F486D62F2E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.24:*:debian_gnu_linux:*:*:*:*:*",
            "matchCriteriaId" : "05CFE913-3AA0-4B73-9A37-B449E6A4162D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.alioth.debian.org/pipermail/secure-testing-announce/2005-August/000003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.alioth.debian.org/pipermail/secure-testing-announce/2005-August/000003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3256",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-18T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enigmail:enigmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.92.0",
            "matchCriteriaId" : "4944FD3F-3DAA-4DCD-8F3B-ECDF55AFA726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cert.dfn.de/infoserv/dsb/dsb-2005-01.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-889",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/805121",
        "source" : "security@debian.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:226",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15155",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2158",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/211-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.cert.dfn.de/infoserv/dsb/dsb-2005-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/805121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/211-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2978",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-18T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79F02C3-950F-4D47-971A-3C1367F1642C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0344253A-AF59-499B-81DF-5494A34B115F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7297482-7D30-484A-8F8D-AFEA2E468725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93BA3D19-C291-468E-9E4E-E8374AE1BD32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CF9240-FAEE-4BA2-8374-8B81F738521A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45457716-9219-4A88-A824-B45FA16643D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A0526D-918E-4FAE-90AF-2BA49F9D5276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD350ED-1327-483A-BF73-02AB9924EDED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C11849-BCD4-4982-A779-435669BD668F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94984E9-22EE-4B24-AFCB-52137A871117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B10069-89E1-4E63-BCFF-C210CE3C5655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC42B061-EB8E-49B4-B041-42B31672C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFAE142A-4F71-4452-8DAD-9D6BA11EBF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179366EE-D637-4345-8759-81D5E12EFFA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725CFC44-43C8-47FF-9935-FA006B6338FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A331F93-08C2-4F45-98AD-46DBE38A9785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFB0157-CF91-4FCB-8786-4024595B3EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92045C29-20B4-46D0-9643-491BB0642D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148A51ED-1A00-45D3-934E-96CA2759F5A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77BE0692-E688-4438-98C7-FA1FCE05F41C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1904CB89-F576-4DFF-9639-9263D0ADE0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D11F39-3B4F-43E4-AC5E-E1B5931BCBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97023E9B-520D-4E6F-BA7F-052BA89BF2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A152B4-8483-4874-88C0-4679831BB60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBAE4A7-B0E1-4E50-8775-CAEF3E49B7EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17221",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17222",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17256",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17265",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17282",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17357",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015071",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-878",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-793.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15128",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2133",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168278",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10135",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/210-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-793.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/210-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-18T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334113",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHBA-2007-0304.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17226",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17995",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHBA-2007-0304.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-20T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier versions allows local users to execute arbitrary code via a long user name in the USER command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:c:*:*:*:*:*:*",
            "matchCriteriaId" : "0B922B34-BBCA-4791-92EF-43ADDA7E2473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0299.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15925/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-23/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972340.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972433.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972438.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0299.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15925/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-23/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972340.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972433.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972438.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2971",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-20T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDFDF11-A965-48B0-AC5A-1AB34A8FE93B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C88CD4B3-FC36-4009-AF40-E5930167B62A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053435DD-BFDF-4C39-9919-11C42D569085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9BB1A3C-3348-4545-A513-E504B33F72AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD45E2C8-0B0E-484F-8050-94BF77798183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EAA654E-9DD4-4614-92D7-EF4D676B3A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E505C5-C809-425F-AF68-A8D79330DE83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "267A2353-C2B9-4D7F-9290-9E3AC1B8C8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89C96FC9-40DB-467D-A701-49F97A1B887D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76128BDC-2CA7-4AE7-8C4F-BCB3835CA938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.3_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2517C7-27EF-4961-91C3-CA33219AFF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C08E0A-651F-458B-BCEC-A30DCD527E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6000D6AF-C056-4BC0-A54C-72E23E52AB92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://scary.beasts.org/security/CESA-2005-005.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17145/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17190",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17212",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17332",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17486",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015035",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.388487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-872",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-12.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051011-1.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00042.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15060",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22562",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/202-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17145/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.388487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051011-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/202-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-20T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in HTTP requests.  NOTE: the vendor suggests that this issues is \"in an underlying Microsoft technology\" which, if true, could mean that the overflow affects other products as well."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailsecurity:8.1:*:exchange_smtp:*:*:*:*:*",
            "matchCriteriaId" : "2B9C96A8-9760-42E7-A773-2DC4482D2A34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0290.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kbase.gfi.com/showarticle.asp?id=KBID002451",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112914475508191&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17136/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/74",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15081",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0290.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kbase.gfi.com/showarticle.asp?id=KBID002451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112914475508191&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17136/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3258",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-20T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain \"odd\" responses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0771FC-F8FB-4065-B6E1-EA21ECE77AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B81A56D-3F2E-455B-A960-69728437B31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7799D4-7B04-463B-BA19-AE36CD9DD694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8093EE-AA6A-4E2C-A891-163A42EA89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3655286B-D44A-4DCB-8DF4-D45A36398933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDCE5E-6D74-4E13-B830-E412C33EF337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E71F3AC2-E633-41D2-B49B-A92E5FB974F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87284115-14F4-4FB6-A8D9-7C7A3B5151E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB618BD-9C6D-458D-A521-FE436C428A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8717751-A250-49F6-97E9-C14C8A44E550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D360F838-C65C-4E76-B460-ADE1AB7657C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67618D3A-9C74-4701-B42F-385E0221D75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C501D54D-5294-4BFD-9858-BE70C411B928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CB5358-7833-4D1E-8F22-CB2714E36F3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2265D309-4E50-45A3-A884-9F1FA361D453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45663027-1EFD-415A-8AB3-BCE544F4AD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EAAEE-BAB5-42EC-B171-93D9E32AC6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9E1D6A-2C46-4062-87B2-726FCC5967B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D24DCC-6C2A-466A-B59F-3D07F62175D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC7B751-34D9-4BBB-8608-97823E5F5F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADF48B4-C9DA-41B7-9124-882ADF625F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446879FE-02A7-4576-A726-6E7C918C4E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F495D6-7734-411D-B527-14C74A345E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EFA76EB-C5A5-4652-8EF1-66E2B061BE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB6D7E3-697C-4AA9-9925-371AB99CA395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DD635-BB74-4311-9E62-0DFAEB8DC121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540AA8A9-A4AB-4DB2-B37E-11876348DF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E006EBC-5624-4AEE-85A8-10E33FCB20A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8DC1BE-EA6C-41B8-9D50-AACE2F2BA424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155CB225-3F1B-4841-90F7-49C4CF90B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21905542-2429-4695-B253-AEC648B0BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317FED1B-9C39-40E5-980D-C5ED808D8FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48242DB9-5EB2-4C95-A944-C52B798A32A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF792263-D6ED-4AD1-98C1-0E22670EF91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7183658C-0CDE-40B1-B203-8C365193724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C73406-9582-40F7-AFD9-7E9D6D94DE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB690A-E0EF-4B11-83D7-B4A4C6B52DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3F889C-2A50-4B91-B74D-1D32A2CAFFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE944B8-B660-4FDB-A3F2-81F908329D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75436484-5FCD-45D3-9262-63301A2024B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D59FA7-FD38-406A-923F-68297CC4B767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3969B3-02F1-480A-8E72-CC50CD14B573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD64CE0-686A-44F2-B537-6D41E47A8BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4233D036-BBD8-48AA-AD1C-403AF262B192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.5.stable11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E0E93D-2499-4600-BE99-C6CDE99374DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17271",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17287",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17338",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17407",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17513",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17626",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17645",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015085",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE11-rfc1738_do_escape",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE11-rfc1738_do_escape",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. These issues do not affect the versions of Squid as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-20T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) \"search this thread\" feature, (3) \"search for posts\" feature, (4) \"forgot password\" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:versatilebulletinboard:versatilebulletinboard:1.0.0.rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C60672-D4A1-4199-A4FD-7518BF0B32E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112907535528616&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/versatile100RC2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17174/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15068",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112907535528616&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/versatile100RC2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17174/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-20T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php and (2) the file parameter in imagewin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:versatilebulletinboard:versatilebulletinboard:1.0.0.rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C60672-D4A1-4199-A4FD-7518BF0B32E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112907535528616&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/versatile100RC2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17174/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15073",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112907535528616&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/versatile100RC2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17174/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-20T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:versatilebulletinboard:versatilebulletinboard:1.0.0.rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C60672-D4A1-4199-A4FD-7518BF0B32E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112907535528616&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/versatile100RC2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17174/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112907535528616&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/versatile100RC2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17174/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-20T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFE81D1-EE81-415D-ACE0-F97AF38BE007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BDA79B-B1CC-479C-A1DA-41DDDE098EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A1E0B7-020F-4110-9603-58CA8CEB7581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE627C32-9F4B-4D36-AC4B-5D01A47BFD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3366C2D1-F30A-413B-94A2-7DBDACC083EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8585089C-A6B5-4BFE-BEA3-133B94F24F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1011521-AEF2-40EB-B671-66B20FF01CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9843D850-DC4C-49D5-AAEB-EF75FB54F08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9B3100-2223-4201-AE29-B4A4EAFF2595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B556-A1B4-4AEF-8223-5ED44819515D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89BC32A-6D3B-4B83-BD49-856233EEF51C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16973/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-53/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rarlabs.com/rarnew.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15062",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16973/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-53/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rarlabs.com/rarnew.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-20T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFE81D1-EE81-415D-ACE0-F97AF38BE007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BDA79B-B1CC-479C-A1DA-41DDDE098EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A1E0B7-020F-4110-9603-58CA8CEB7581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE627C32-9F4B-4D36-AC4B-5D01A47BFD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3366C2D1-F30A-413B-94A2-7DBDACC083EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8585089C-A6B5-4BFE-BEA3-133B94F24F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1011521-AEF2-40EB-B671-66B20FF01CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9843D850-DC4C-49D5-AAEB-EF75FB54F08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9B3100-2223-4201-AE29-B4A4EAFF2595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B556-A1B4-4AEF-8223-5ED44819515D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89BC32A-6D3B-4B83-BD49-856233EEF51C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0266.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16973/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-53/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rarlabs.com/rarnew.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15062",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0266.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16973/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-53/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rarlabs.com/rarnew.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-20T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arbitrary web script or HTML via the threadID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroblog:zeroblog:1.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FB4E1B-8906-487D-BB9C-69179E80363E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroblog:zeroblog:1.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "025A4E0A-4D0E-45A6-B92C-F87660D4E550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/141/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112907042504220&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17175/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/141/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112907042504220&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17175/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-20T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, which allows local users to gain privileges.  NOTE: due to a CNA error, this candidate was also originally assigned to an issue in DiskMountNotify.  Use CVE-2005-3270 for the DiskMountNotify issue, and CVE-2005-2759 for the LiveUpdate issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.3:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "B2D0922A-3EA3-4BC9-9311-9DCA57338CBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=324&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.10.19a.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=324&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.10.19a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3121",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-20T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduard_bloch:module-assistant:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.9",
            "matchCriteriaId" : "CB9AFFE4-19D0-4C09-B390-11CCBFF8D3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduard_bloch:module-assistant:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B9511C-B04A-450D-9AAA-57C9BBB23289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduard_bloch:module-assistant:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C6AEFA-D2DF-4C95-BE5F-3BFAA14F624D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduard_bloch:module-assistant:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E44398-57BD-440D-94AE-F282837A549F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduard_bloch:module-assistant:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03F4550-129C-4168-9CC2-8461B090A8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduard_bloch:module-assistant:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D8DD9E-EFBF-45E1-88F0-3B0C9FFA5958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduard_bloch:module-assistant:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AE4734-1C15-4D21-A789-ABC4238B82AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduard_bloch:module-assistant:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E2A4D0-AB78-4608-AFA7-F46669564A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduard_bloch:module-assistant:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFC6F0-7DE7-46F4-B669-A0D0EC3D05A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduard_bloch:module-assistant:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D70E0E-37A3-4D51-823B-CE0291D4194F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17267",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-867",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15151",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-20T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.12",
            "matchCriteriaId" : "558E9DA2-26F4-425B-B467-3FBADA57AB76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=323&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=323&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3268",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-20T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allows local users to read arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raphael_bossek:yiff_server:2.14.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263432E0-B3AB-4176-8E89-57417A975369"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334616",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17242",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20074",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15140",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3269",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-20T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2003q4:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A63139-DAC4-4748-8A20-18FE72C6E93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2004q2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF5317C-051B-4906-8438-DEA07EE4D757"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2005q1:*:*:*:*:*:*",
            "matchCriteriaId" : "2FCAD34C-19EB-429A-A41D-0DC1F0999154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083E8ACF-7A6B-4C7C-B1E1-1567D09A8E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:2003q4:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6D70A5-A2AE-4142-86C7-A3D15C155801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:2004q2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F64D5A0-9BED-497F-9C90-B4F404A699A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:2005q1:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4F9948-4A6A-4C68-8CDA-AF34ACA12D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_administration_server:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A099D284-A1C4-474D-ABF9-84DEC377D18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3F2846-7A02-42A4-AE19-FCE28706FA9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:4.16:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA43DD25-AACA-4F63-A8E5-0CAA58C27BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BB5338-F78C-4140-8F60-8BB0F9ADDF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:5.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F94220C9-8EFC-4491-A530-033EF32AEAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:5.0_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A548BEA7-2592-49F0-BEE8-B077AFF7F8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBB854A-6951-4CA7-87BB-919B56F88ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:5.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "67D5A7FC-7F6B-461D-AD96-3A42036A91D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:5.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F12275A-86ED-4CB9-9849-BA3D3BF21A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:5.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "30214F09-1DD9-4A04-AE86-F5FCC006BD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:5.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8589402C-4E79-4615-A00B-F83B0508F6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:5.1:sp3:x86:*:*:*:*:*",
            "matchCriteriaId" : "7ED2C81F-7B2E-4FC5-A521-BE156F00B5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_directory_server:5.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E773228-F889-48A4-98DC-44BB5E746CC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112862037500012&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113815459026080&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17092",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18590",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/367",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/51",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015014",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015538",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15013",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16345",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1988",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112862037500012&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113815459026080&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-21T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifying the PATH to reference a malicious (1) ps or (2) grep file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.3:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "B2D0922A-3EA3-4BC9-9311-9DCA57338CBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=325&type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=325&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-21T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resource leak and could allow a large number of multiple local users to cause a denial of service by using more posix-timers than specified by the quota for a single user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40414b332fsZQvEUsfzKJIo-q2_ZH0hg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ussg.iu.edu/hypermail/linux/kernel/0409.1/1107.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40414b332fsZQvEUsfzKJIo-q2_ZH0hg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ussg.iu.edu/hypermail/linux/kernel/0409.1/1107.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-21T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40429a310bRFOXOmZvKaGXW8A5Qd9F1A",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40429a310bRFOXOmZvKaGXW8A5Qd9F1A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-21T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndigis argument for a new route, which allows attackers to trigger array out-of-bounds errors with a large number of digipeats."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.4/cset%4041e2cf515TpixcVQ8q8HvQvCv9E6zA",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40423114bcdthRtmtdS6MsZiBVvteGCg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2005/5/23/169",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.4/cset%4041e2cf515TpixcVQ8q8HvQvCv9E6zA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%40423114bcdthRtmtdS6MsZiBVvteGCg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2005/5/23/169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-21T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndIncluding" : "2.4.31",
            "matchCriteriaId" : "C9E64153-4A9A-448A-9654-5C79B4C86646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.6.13",
            "matchCriteriaId" : "43EDD335-A1D2-46B5-AED5-066CB1127212"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lkml.org/lkml/2005/6/23/249",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://lkml.org/lkml/2005/6/24/173",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=e684f066dff5628bb61ad1912de6e8058b5b4c7d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15528",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11723",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lkml.org/lkml/2005/6/23/249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://lkml.org/lkml/2005/6/24/173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=e684f066dff5628bb61ad1912de6e8058b5b4c7d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-21T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042e14e05d0V1d88nZlaIX1F9dCRApA",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15531",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042e14e05d0V1d88nZlaIX1F9dCRApA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-21T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to userspace, which might allow a user process to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042e81864gSEM90Oun0jA8dufpM3inw",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2005/8/3/36",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=71ae18ec690953e9ba7107c7cc44589c2cc0d9f1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0144.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042e81864gSEM90Oun0jA8dufpM3inw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2005/8/3/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=71ae18ec690953e9ba7107c7cc44589c2cc0d9f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0144.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2117",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-21T18:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0802EC98-E220-46F6-84CF-7FA4E3696887"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17168",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15064",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1291",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2118",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-21T18:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17168",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015040",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.argeniss.com/research/MSBugPaper.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15070",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1116",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1192",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.argeniss.com/research/MSBugPaper.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2122",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-21T18:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17168",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015040",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.argeniss.com/research/MSBugPaper.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/922708",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15069",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1329",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1488",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1517",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1537",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1551",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A708",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.argeniss.com/research/MSBugPaper.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/922708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-284A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2126",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-10-21T18:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when \"Enable Folder View for FTP Sites\" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted filenames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17163",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015036",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/415828",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/6M00I0KEAU.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-044",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1146",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1284",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1416",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/415828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/6M00I0KEAU.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-21T18:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters (\"`\" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than CVE-2002-1473."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDE44C49-172C-4899-8CC8-29AA99A7CD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/hp/2002-q3/0064.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.frsirt.com/exploits/20051019.hpux_lpd_exec.pm.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15136",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/hp/2002-q3/0064.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.frsirt.com/exploits/20051019.hpux_lpd_exec.pm.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2972",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abisource:community_abiword:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.10",
            "matchCriteriaId" : "576159E7-70BC-45EB-8F7A-E60809AD1CE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://scary.beasts.org/security/CESA-2005-006.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17199",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17200",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17213",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17264",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17551",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.abisource.com/changelogs/2.2.11.phtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-17.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/debian-bugs-rc%40lists.debian.org/msg28251.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20015",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15096",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2086",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/203-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.abisource.com/changelogs/2.2.11.phtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/debian-bugs-rc%40lists.debian.org/msg28251.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/203-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the openpsfile function in gsinterf.c for Jan Kybic BitMap Viewer (BMV) 1.2 allows local users to execute arbitrary code via a PostScript (PS) file containing a large number of pages value, which leads to a resultant buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jan_kybic:bitmap_viewer:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB586812-3FF4-44CD-9C28-DEDCA2DB6D6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://felinemenace.org/advisories/bmv_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17266",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://felinemenace.org/advisories/bmv_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long filename in the -b command line option."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jan_kybic:bitmap_viewer:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB586812-3FF4-44CD-9C28-DEDCA2DB6D6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://felinemenace.org/advisories/bmv_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://felinemenace.org/advisories/bmv_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Paros 3.2.5 uses a default password for the \"sa\" account in the underlying HSQLDB database and does not restrict access to the local machine, which allows remote attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paros:paros:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F67D7CD-92FD-443B-8830-D66BA91CD53A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17089",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423446/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15141",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.zone-h.com/en/advisories/read/id=8286/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423446/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.zone-h.com/en/advisories/read/id=8286/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to include arbitrary files via the file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nukefixes:nukefixes:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4CC5123-EAFB-4DEF-B31E-2DA06EC76FBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:splatt:splatt_forum:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB90EC9-7153-4BA7-B7B4-01747C72E421"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:splatt:splatt_forum:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48910578-0BC1-4A6D-8530-5C55CC29CE41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:splatt:splatt_forum:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60086BC6-D4C2-4A0A-8F08-76A2BCB4E0C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15152",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.1",
            "matchCriteriaId" : "ED003E11-05AC-4CD0-A117-99E48B832268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13501C0-3322-4D0C-8F7F-12535C76CB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB63DA4-E9B5-4BDF-A4E5-54F4EE4E94AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE04A29-E90B-41E1-A8B4-462B54C079B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2540703B-63B8-41F4-A17A-0274A7DE7E63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=109858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015087",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=364457",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://tikiwiki.org/art118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-23.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=109858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=364457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://tikiwiki.org/art118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0.488, and MyV3, with compressed file scanning enabled, allow remote attackers to execute arbitrary code via crafted (1) ALZ, (2) UUE, or (3) XXE archives."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:myv3:1.3.11.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412750A7-B6FC-4A36-8B30-AFDEA73F7226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:v3net:6.0.0.457:*:win_server:*:*:*:*:*",
            "matchCriteriaId" : "2A6C1BB9-003E-4E75-B10C-DF5D3C59A7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahnlab:v3pro_2004:6.0.0.457:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2012E656-26A8-4C2D-BA9F-32075D456DD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://global.ahnlab.com/security/security_advisory002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16851",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-48/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/80",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/413260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://global.ahnlab.com/security/security_advisory002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-48/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/413260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via the (1) forwardTo1, (2) forwardTo2, (3) nameFT1, or (4) nameFT2 parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2998DEF-607B-49F2-9904-A9F904175BFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/10/comersus-backoffice-plus-cross-site.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17219",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015064",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15118",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/10/comersus-backoffice-plus-cross-site.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Environment Block (PEB), which triggers an exception, aka the \"PEB lockout vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6682610C-1564-48E3-A364-76B6F5369F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:serverfirewall:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8E562F-0F18-4D4A-87D4-C8CE55C085ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/037958.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pb.specialised.info/all/adv/kerio-fwdrv-dos-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2005/Oct/166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17155",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/78",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kerio.com/security_advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/037958.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pb.specialised.info/all/adv/kerio-fwdrv-dos-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2005/Oct/166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kerio.com/security_advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions such as ASPX, which are not converted to .TXT like other dangerous extensions, and which can be directly requested from the cache directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite_express:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA5B94E1-7D30-4D85-9746-6F0E4165045D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015063",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the \"compose page\" feature, then accessing the file from the cache directory before saving or sending the message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite_express:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA5B94E1-7D30-4D85-9746-6F0E4165045D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015063",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY77624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY77638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY77624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY77638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Accelerated Mortgage Manager allows remote attackers to execute arbitrary SQL commands via the password field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accelerated_enterprise_solutions:accelerated_mortgage_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C58B4902-79A3-4471-BF10-015A43A5F4C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/21581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15097",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stani's Python Editor (SPE) 0.7.5 is installed with world-writable permissions, which allows local users to gain privileges by modifying executable files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stani:stanis_python_editor:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3337613-2B4F-4CED-90A4-6F29D7CBF89D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17224",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-13.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web script or HTML via Javascript events in tages such as <b>."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xeobook:xeobook:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291882DD-0868-4CD2-AC35-21A2823A59B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17159",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing \".\" (dot) or (2) list directory contents via a trailing null character."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xerver:xerver:4.17h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63892FAE-FD71-445E-8A87-6B6B293E83D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015079",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15135",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T18:02:00.000",
      "lastModified" : "2023-11-07T01:57:48.860",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3265.  Reason: this candidate is a duplicate of CVE-2005-3265; after initial reservation, the requester discovered that they had the same cause. Notes: All CVE users should reference CVE-2005-3265 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Typsoft FTP Server 1.11, with \"Sub Directory Include\" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands.  NOTE: it was later reported that 1.10 is also affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typsoft:typsoft_ftp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11",
            "matchCriteriaId" : "CC82FEBC-EC1A-4BC8-BE13-D62D7E22E63B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17196",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/15860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploitlabs.com/files/advisories/EXPL-A-2005-016-typsoft-ftpd.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/15860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploitlabs.com/files/advisories/EXPL-A-2005-016-typsoft-ftpd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP-UX B.11.23 on Itanium platforms allows local users to cause a denial of service due to a \"specific stack size.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F106B952-78D0-4D62-88F6-732A3CCD0E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015050",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.auscert.org.au/render.html?it=5613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.auscert.org.au/render.html?it=5613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDE44C49-172C-4899-8CC8-29AA99A7CD2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00126.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00126.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.frsirt.com/exploits/20051019.hpux_ftpd_preauth_list.pm.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15138",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.frsirt.com/exploits/20051019.hpux_ftpd_preauth_list.pm.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in OpenWBEM on SuSE Linux 9 allow remote attackers to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_60_OpenWBEM.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_60_OpenWBEM.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in OpenWBEM on SuSE Linux 9 allow remote attackers to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_60_OpenWBEM.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_60_OpenWBEM.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEA71B2-99EE-4975-A46B-A38112CD4F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80AAD482-064D-4CFB-A1AE-49095036485A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17137",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/69",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-16.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-23T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use grab_globals.php, then modifying certain configuration values for the theme."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478.",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113017591414699&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17289/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_162005.73.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478.",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113017591414699&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17289/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_162005.73.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-24T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) left.php, (2) queryframe.php, or (3) server_databases.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEA71B2-99EE-4975-A46B-A38112CD4F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80AAD482-064D-4CFB-A1AE-49095036485A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33423F75-0F5A-49F6-BF70-66DC2CE39E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FE9713-54BE-4A70-82F8-03B8E1915E2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-24T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CFDB293-97A3-427F-81FB-B922EBCF7760"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330895",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19754",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1039",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17663",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-25T16:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.7",
            "matchCriteriaId" : "CB2C33EC-9847-4B0A-8060-08FA6D6126A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.40/SCOSA-2005.40.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.40/SCOSA-2005.40.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-25T16:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E12F60-B4AF-4EF1-A4AA-5E9F0B8B0690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059218D3-A3AD-4A10-9AA4-FBB689321D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.41/SCOSA-2005.41.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.41/SCOSA-2005.41.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2958",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-25T16:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libgda2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "9E0E2AE9-C991-4298-8FF8-ED985DA13B31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17323",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17339",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17391",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17426",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17500",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1015107",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-871",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-01.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:203",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00013.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15200",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/212-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/212-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2959",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-25T16:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976B5923-1BCC-4DE6-A904-930DD833B937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5452DF1-0270-452D-90EB-45E9A084B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD12E6-F92E-4371-ADA7-BCD41E4C9014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FDF4FB-06FA-4A10-A3CF-F52169BC8072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B29018-B495-482A-8FF7-66821A178F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38718561-70C7-4E0D-9313-87A5E82ED338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D057064A-9B34-4224-97BA-4D5840A92BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C297DC-69B1-4BE6-A5EF-D320BD0CA968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4C1FFB-F6AA-4DED-9C54-DCB274F59A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338A92AC-92D2-40BF-9FAC-884AF6F74D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DB5610-03CE-425E-8855-70D5787029FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6848519-57E8-4636-BE10-A0AF06787B20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A458EA77-772C-4641-A08A-5733FA386974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B7415D-FE7F-4F67-8384-016BD6044015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09429504-327B-44B3-A651-E933EADA0300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7889BA46-0FAA-4D62-B2BB-B895060F5585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3p6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FD9DD4-A6D0-40F4-9A8E-8E0017BE349C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3p7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02CEAA5-8409-42AF-A4AE-58D9D16F007F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DFC86C-7743-4F27-BC10-170F04C23D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5170421-BA0C-4365-9CD6-BD232EA08680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5909AAA4-4AF9-4D23-87C5-5D7787909B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3E4716-6D11-46DD-9378-3C733BBDCD8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55799ECB-CEB1-4839-8053-4C1F071D1526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2170CFD0-2594-45FB-B68F-0A75114F00A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C07744-CAE8-44C6-965E-2A09BAE1F36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17E0E59-C928-49AB-BAA7-4AE638B376D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F99CB6-E185-4CE0-9E43-C5AE9017717B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F6F9C6-85B6-450F-9165-B23C2BF83EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294FC65B-4225-475A-B49A-758823CEDECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6156B085-AA17-458C-AED1-D658275E43B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C898BE7-506D-49DA-8619-F86C7A9FE902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6419309-385F-4525-AD4B-C73B1A3ED935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17318",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17322",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17345",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17390",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17666",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-870",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:201",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.002-sudo.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9643",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15191",
        "source" : "security@debian.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.sudo.ws/bugs/show_bug.cgi?id=182",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "security@debian.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/213-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.002-sudo.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.sudo.ws/bugs/show_bug.cgi?id=182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/213-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider this to be a security issue:\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=139478#c1",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2100",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-25T17:06:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The rw_vm function in usercopy.c in the 4GB split patch for the Linux kernel in Red Hat Enterprise Linux 4 does not perform proper bounds checking, which allows local users to cause a denial of service (crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=165547",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11556",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=165547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2970",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-25T17:06:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.36",
            "versionEndExcluding" : "2.0.55",
            "matchCriteriaId" : "2207E0B1-C109-47A5-9145-66E63F984C25"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397313C3-6BF5-4A87-90B3-55678E807171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FE6DAA-4702-409A-98B6-DE13B12805A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5DCF29-6830-45FF-BC88-17E2249C653D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora_core:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19D0B-B70C-4771-B315-78C48D96542A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.apache.org/mod_mbox/httpd-cvs/200509.mbox/%3C20051001110218.40692.qmail%40minotaur.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0159.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16559",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17923",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18161",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18333",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18585",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securitytracker.com/id?1015093",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://svn.apache.org/viewcvs?rev=292949&view=rev",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:233",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425399/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15762",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10043",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-225-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/httpd-cvs/200509.mbox/%3C20051001110218.40692.qmail%40minotaur.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0159.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/17923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securitytracker.com/id?1015093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://svn.apache.org/viewcvs?rev=292949&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425399/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-225-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Apache",
        "comment" : "Fixed in Apache HTTP Server 2.0.55:\nhttp://httpd.apache.org/security/vulnerabilities_20.html",
        "lastModified" : "2008-07-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2708",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-25T18:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service (panic), as demonstrated by running a process using the bash ulimit -v command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550DFE6E-DCE6-4649-8746-522996021DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17BB496-749A-40C8-BAA9-6CFBBE308065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF51F68C-60A5-451F-9150-6DABBAE1D41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3BF9D6-BE14-4590-91B8-501DC92261BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18523",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16320",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-25T22:06:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in QuickDraw Manager for Apple OS X 10.3.9 and 10.4.2, as used by applications such as Safari, Mail, and Finder, allows remote attackers to execute arbitrary code via a crafted PICT file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014961.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/529945",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14914",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014961.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/529945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-25T22:06:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014958.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/650681",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014958.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/650681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-25T22:06:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.suresec.org/advisories/adv7.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.suresec.org/advisories/adv7.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they came from a different site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Services in securityd for Apple Mac OS X 10.3.9 allows local users to gain privileges by granting themselves certain rights that should be restricted to administrators."
      }, {
        "lang" : "es",
        "value" : "Authorization Services en securityd para Apple Mac OS X 10.3.9 permite a usuarios locales obtener privilegios garantizándose a sí mismos determinados derechos que deben de ser restringidos a administradores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perry_kiehtreiber:securityd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCC51E4-F4A8-428C-9D15-92E4FEE5F68E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the \"Switch User...\" button to appear even though the \"Enable fast user switching\" setting is disabled, which can allow attackers with physical access to gain access to the desktop and bypass the \"Require password to wake this computer from sleep or screen saver\" setting."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary functions in system libraries, which allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mail.app in Mail for Apple Mac OS X 10.3.9, when using Kerberos 5 for SMTP authentication, can include uninitialized memory in a message, which might allow remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mail.app in Mail for Apple Mac OS X 10.3.9 and 10.4.2 includes message contents when using auto-reply rules, which could cause Mail.app to include decrypted message contents for encrypted messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/5509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-312.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the username parameter in the Your Account page, (2) the url parameter in the Downloads module, and (3) the description parameter in the Web_Links module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9A4F5F-31CB-4097-85E9-B08B2530E9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113017049702436&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpnuke78sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17315/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113017049702436&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpnuke78sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17315/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via the (1) forum_id or (2) thread_id parameter in the Forum file, (3) the link_id in the Links file, (4) the artid parameter in the Sections file, and (5) the dl_id parameter in the Download file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6318A231-4093-4E7C-B5F6-66B4BF64B33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113017972620427&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113019206306710&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113019342213796&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17304/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nuked-klan.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113017972620427&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113019206306710&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113019342213796&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17304/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nuked-klan.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the user parameter in a profile operation, a different vulnerability than CVE-2005-2814.  NOTE: it is possible that this XSS is a resultant vulnerability of CVE-2005-3307."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113018940229407&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17291/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113018940229407&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17291/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to read arbitrary files via \"..\" sequences in the (1) user parameter in a profile operation or (2) quale parameter in a newtopic operation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113018940229407&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17291/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113018940229407&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17291/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) comment parameter in detail.php, (3) the username parameter in get.php, and (4) the search parameter in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zomplog:zomplog:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8D6326-D8CC-4F51-B4A0-71BF162E5824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zomplog:zomplog:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B40804-E719-41D9-9AFF-B3AF3AC13DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113019053831123&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17306/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Oct/1015088.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113019053831123&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17306/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Oct/1015088.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Zomplog 3.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in detail.php and the catid parameter in (2) get.php and (3) index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zomplog:zomplog:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B40804-E719-41D9-9AFF-B3AF3AC13DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17306/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Oct/1015088.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17306/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Oct/1015088.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated users to inject arbitrary web script or HTML via an HTML file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer, which renders malformed image types as HTML, enabling cross-site scripting (XSS) attacks.  NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer (CVE-2005-3312) and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in phpBB."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0479.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113017003617987&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17295/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0479.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113017003617987&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17295/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bmc:software_control-m_agent:6.1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD129A4-E919-4555-A9BA-6F2032BC4ABA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113018286105811&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113018286105811&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-26T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML in corrupted images and other files such as .GIF, JPG, and WAV, which is rendered as HTML when the user clicks on the link, even though the web server response and file extension indicate that it should be treated as a different file type."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113017003617987&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/18",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.computec.ch/download.php?view.683",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1746",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/6F00B00EBY.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113017003617987&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.computec.ch/download.php?view.683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/6F00B00EBY.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2338",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-10-27T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.12 JP and earlier, XOOPS 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) modules that use \"XOOPS Code\" and (2) newbb in the forum module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.12_jp",
            "matchCriteriaId" : "8C02065E-81F9-481B-9281-0BDCCA45A1AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.13.1",
            "matchCriteriaId" : "06420D72-2A5F-4044-8DA7-7D7261CF16B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3_rc1",
            "matchCriteriaId" : "6C48026D-6730-4C27-9B0C-279797D8156C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2377105349/index.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113027315412024&w=2",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/17300",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/346302",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/683958",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/85_e.html",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15195",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2377105349/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113027315412024&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/346302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/683958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/85_e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264386DA-747F-492C-B660-D49BE9DB7139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F908FF-9986-4F71-B0B6-D6A86555EF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028F7F83-AF15-443B-A7DB-4E695E62EAFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113042785902031&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17293",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17349",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17446",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17491",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17495",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17631",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18895",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-823.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15179",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/215-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113042785902031&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-823.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/215-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3241",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors in the (1) ISAKMP, (2) FC-FCS, (3) RSVP, and (4) ISIS LSP dissector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73117E69-715B-4779-A5D8-218E15122A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20121",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20122",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20124",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10582",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3242",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (2) the SMB dissector when SMB transaction payload reassembly is enabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20133",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10558",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3243",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.frsirt.com/exploits/20051020.ethereal_slimp3_bof.py.php",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20126",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20135",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9836",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.frsirt.com/exploits/20051020.ethereal_slimp3_bof.py.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3244",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BER dissector in Ethereal 0.10.3 to 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20127",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9665",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3245",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the \"Dissect unknown RPC program numbers\" option is enabled, allows remote attackers to cause a denial of service (memory consumption)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20129",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11060",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3246",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unknown vectors in the (1) SCSI, (2) sFlow, or (3) RTnet dissectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20128",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20130",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20131",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10303",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3247",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SigComp UDVM in Ethereal 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20132",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10241",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3248",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the X11 dissector in Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (divide-by-zero) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20134",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3249",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9313",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// links, or (3) a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.1.0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199A2732-C4C9-44AA-96DF-AE476AEB8354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.1.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD99230-3962-4B92-B4D3-BCD7CD5A66E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.1.0.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29CFD705-4B19-4F9C-ACCC-53341676A972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B64407-2554-44D5-BCFB-20F991775EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.2.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C662FC-9B46-4C06-88AA-DE01D7371E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.2.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A189D66B-F12D-4631-BCCB-7CF9F250E736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.2.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ECD176-BEA4-434A-A669-28DB2F4F3CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.3.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145C6B47-3EDB-45F8-A600-C95EDFE1916E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.3.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E48FA3-47A8-4092-9191-2B51CA8DDB7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.3.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B8D3B0-CCBD-44DC-B07F-144F7281456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.3.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E7C0E2-88C0-4ED2-90AB-6FDC5DE9FADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.3.0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187081BD-71C1-484F-B86B-6B9ADF083356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.3.0.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AF812F2-4265-4EAA-AD01-1CDC60CBBE64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.3.0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CFB511-8FFB-4AF4-B246-2B15F4E7158A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.3.0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB94E69F-B0CB-43CF-9B28-32483A72D2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.4.0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754CF3A9-4DE4-4119-A1DA-178980CFD3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.4.0.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65F5874-C8A9-4558-BE21-32ED9B0A618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.4.0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27328CD1-28BE-4349-A999-7FBBEEDDB595"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17305/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://skype.com/security/skype-sb-2005-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/668193",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/930345",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.pentest.co.uk/documents/ptl-2005-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17305/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://skype.com/security/skype-sb-2005-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/668193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/930345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.pentest.co.uk/documents/ptl-2005-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial of service (crash) via crafted network data with a large Object Counter value, which leads to a resultant heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:0.92.0.12:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "461F013F-A352-4F97-BB3D-C13C0B831D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:0.93.0.3:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "75471285-8A28-4A2C-8A35-91C2E581CEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:0.98.0.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69649CEB-554F-4A0C-BD3A-DF3D90AE0BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.0.0.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1BD1B55D-1E8D-4B3A-9B9A-7551EB91A98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.0.0.7:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "081AA0ED-202C-4986-B62E-F773529E9C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92ED4BC-A607-46C5-B602-8F7B7D4856F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834D0C77-767F-4AB5-AAA3-D5CB3B3C50F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B664C2E-178E-4D7C-B84F-ABB214076CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.0.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3208E799-6F4D-4F93-BB26-CD9B5CCF0CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.0.0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA180874-A4BD-4B60-85CB-B1CEC3F93F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.0.0.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DECB2F4-8E0B-4140-9A2F-77F14B4720C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.0.0.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C0D63D-E52C-4B32-8CEF-6F3915B499F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BB57D5-C376-4EE9-B3C7-0B56FFDA87DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.1.0.20:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "88E79362-05FD-427D-BAC4-567C399FFE89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.1.06:*:pocket_pc:*:*:*:*:*",
            "matchCriteriaId" : "E965C7BF-640C-4504-B02A-0D9524DF63FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.2.0.17:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1CD92F3E-3047-4D94-A26B-E639D83745B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.3.0.16:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "25804F1C-D497-4524-AC14-A5D7E3417057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:1.4.0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27328CD1-28BE-4349-A999-7FBBEEDDB595"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026202728568&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17305/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://skype.com/security/skype-sb-2005-03.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/905177",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15192",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2197",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026202728568&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17305/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://skype.com/security/skype-sb-2005-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/905177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain privileges or prevent Discovery from running by setting another password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:discovery:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE64C169-45AB-4AA1-B4AA-9F9F596DB982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:on_command_discovery:standard_4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD94C-FEFF-4337-B198-981973D17083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:on_command_discovery:web_4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B022BB94-7256-4E70-A415-4BD83038DCA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.10.24.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.10.24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via (1) a ZIP archive that contains a file with a long filename, which is not properly handled by (a) zipgenius.exe, (b) zg.exe, (c) zgtips.dll, and (d) contmenu.dll; (2) a long original name in a (a) UUE, (b) XXE, or (c) MIM file, which is not properly handled by zipgenius.exe; or (3) an ACE archive with a file with a long filename, which is not properly handled by unacev2.dll."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zipgenius:zipgenius:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "standard_6.0.2.1041",
            "matchCriteriaId" : "9D49E97D-3A6D-447B-B192-6D167EF84ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zipgenius:zipgenius:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "suite_6.0.2.1041",
            "matchCriteriaId" : "0E7C1BF1-F65D-47FA-AFA8-18AF0557079C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zipgenius:zipgenius:standard_5.5.1.468:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6F8BA4-65CA-43E2-A118-8B56F6F275FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zipgenius:zipgenius:suite_5.5.1.468:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE919D2-21DB-4829-80A0-A2C50D6F6628"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.zipgenius.it/index.php?showtopic=684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-54/advisory",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/414083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.zipgenius.it/index.php?showtopic=684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-54/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/414083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303317F5-D6EB-4589-8787-11B04B1DDBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9D4A53-DC65-4A30-82BA-E65C92029C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C62A7D6-CB34-4E77-B6B3-7687527102B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F0E0CA-52CD-4B4C-9719-8E73B1A97BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A9D566-02D8-4DBE-9007-4A275DF283F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A459D41D-BC74-4436-9ED2-401BDC174C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AA0405-EC8B-41A4-977D-32C221EE43AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A284D128-418D-4323-8910-EC7E75FB1B6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0536.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morte.jedrea.com/~jedwin/projects/chmlib/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17325",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17775",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17776",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-23.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15211",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sven-tantau.de/public_files/chmlib/chmlib_20051126.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0536.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://morte.jedrea.com/~jedwin/projects/chmlib/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sven-tantau.de/public_files/chmlib/chmlib_20051126.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0491.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=107602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113019286208204&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0491.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=107602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113019286208204&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not class this as a security issue as it only allows local users who have the privileges to create .htaccess files the ability to cause a denial of service. Untrusted users should never be given the ability to create .htaccess files.",
        "lastModified" : "2008-02-12T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web script or HTML via the err parameter in the panel script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteturn:domain_manager_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9750400-9999-4F8B-9866-4BA16C3ECD8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kapda.ir/advisory-96.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/414396",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15186",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-96.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/414396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use weaker permissions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB0F1B-80B4-47F9-A54C-51DB7E77CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9C7018E7-F90C-435D-A07A-05A294EA2827"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17290/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_62_permissions.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17290/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_62_permissions.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D590FB-2759-475E-8136-1B15352605EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.7.8",
            "matchCriteriaId" : "5A511D4F-3037-4DCB-B1FC-5CFAAFE840B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.8.0",
            "versionEndExcluding" : "2.8.2",
            "matchCriteriaId" : "CC2F1054-D310-472D-9610-A66155B86CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3F478-1C30-4FB6-8983-A8D863D6FB0C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17173",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17309",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-910",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-20.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15082",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/229-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/229-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appindex:mwchat:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8280BEB8-1439-4AE5-A3C9-7FADA234D480"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://appindex.net/products/changelog/?product=mwchat&version=6.9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/mwchat.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17303",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015094",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hackerscenter.com/Archive/view.asp?id=19537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://appindex.net/products/changelog/?product=mwchat&version=6.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/mwchat.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hackerscenter.com/Archive/view.asp?id=19537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2, and unspecified other console scripts in these products, allow remote attackers to execute arbitrary SQL commands via the sig[1] parameter and possibly other parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acid:analysis_console_for_intrusion_databases:0.9.6b20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D95BCF7-B845-4AF6-A400-6C169D12FF20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secureideas:basic_analysis_and_security_engine:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0826792-D304-40F1-A9E8-F120B70CF677"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17314",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17552",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17558",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-893",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15199",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2188",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE181AB-C597-48A3-A5DA-135E601968AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=4507&pid=27223#pid27223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/414672",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15204",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=4507&pid=27223#pid27223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/414672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security (Start) mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:network_appliance:data_ontap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "DD365C74-7DA9-4E36-8EA2-231403109648"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:network_appliance:data_ontap:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D48FD48-1FEB-4629-8170-78AD7219CF49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:network_appliance:data_ontap:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F64DB52-A46C-4A5B-86A3-40F71B7D568B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113028385702680&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17321",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matasano.com/advisories/netapp-iSCSI.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113028385702680&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matasano.com/advisories/netapp-iSCSI.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the pun_root parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113017630505223&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113017630505223&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter in a GetPic operation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:authentication_agent_for_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3",
            "matchCriteriaId" : "A34DE97C-918E-485B-A6C9-5E126EF3E885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:authentication_agent_for_web:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51E015E-0F87-4C2F-A1D7-D7D34E1C631C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:authentication_agent_for_web:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BFB150-0B29-45DD-9B8A-BB41D4BB7EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:authentication_agent_for_web:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BA31AA-7ACF-46E2-B12B-9DF2ECA38FCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113028928630700&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113027017101376&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113027324906876&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113028928630700&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113027017101376&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113027324906876&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snoopy:snoopy:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302B4166-6B2C-4F59-9B8C-CF52F9F8AEA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113028858316430&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113062897231412&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17455",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17887",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=375385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2202",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2335",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2727",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://svn.ampache.org/branches/3.3.1/docs/CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113028858316430&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113062897231412&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=375385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://svn.ampache.org/branches/3.3.1/docs/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rogers_software_source:mgdiff_patch_viewer:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA85D64-35DD-4A24-90FE-97E16C21E713"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=335188",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17299",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=335188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:belchior_foundry:vcard:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7189E766-AFA4-4302-92CB-05A67E3BCDFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15207",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in eBASEweb 3.0 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ebase:ebaseweb:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350184BA-F62D-411E-9154-EF6A4A57B36A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ebase.co.jp/company/security",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ebase.co.jp/company/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary web script or HTML via the (1) PHPSESSID, (2) task, (3) string, (4) type, (5) serv, (6) due, (7) dev, and (8) sort2 parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flyspray:flyspray:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10D55FA-08EA-4389-8DF6-C632C4F70022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flyspray:flyspray:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A570EBA0-13CA-4902-9A65-22ADC3613D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flyspray:flyspray:0.9.8:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "F6C27319-D092-47D4-8E5C-0A56FB9531D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flyspray.rocks.cc/bts/task/703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/10/flyspray-bug-killer-multiple-variable.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://flyspray.rocks.cc/bts/task/703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/10/flyspray-bug-killer-multiple-variable.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mantisbt.org/changelog_page.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16818",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-46/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mantisbt.org/changelog_page.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-46/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mantisbt.org/changelog_page.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16818",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=362673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mantisbt.org/changelog_page.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=362673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML via (1) unknown vectors involving Javascript and (2) mantis/view_all_set.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E7458-6655-4C86-85A9-81004FF38321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mantisbt.org/changelog_page.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=362673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mantisbt.org/changelog_page.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=362673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E7458-6655-4C86-85A9-81004FF38321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mantisbt.org/changelog_page.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mantisbt.org/changelog_page.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-27T10:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E7458-6655-4C86-85A9-81004FF38321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mantisbt.org/changelog_page.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mantisbt.org/changelog_page.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2973",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-10-27T18:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (infinite loop and crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404342df67SNhRx_3FGhUrrU-FXLlQIA",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17261",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20163",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9549",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9555",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15156",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2173",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170772",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10041",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404342df67SNhRx_3FGhUrrU-FXLlQIA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-28T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the nome parameter in a login operation, a variant of CVE-2005-3306."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113019486931157&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113019486931157&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-28T20:02:00.000",
      "lastModified" : "2023-11-07T01:57:50.670",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3153.  Reason: This candidate is a reservation duplicate of CVE-2005-3153.  Notes: All CVE users should reference CVE-2005-3153 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-28T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303317F5-D6EB-4589-8787-11B04B1DDBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9D4A53-DC65-4A30-82BA-E65C92029C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C62A7D6-CB34-4E77-B6B3-7687527102B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F0E0CA-52CD-4B4C-9719-8E73B1A97BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A9D566-02D8-4DBE-9007-4A275DF283F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A459D41D-BC74-4436-9ED2-401BDC174C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AA0405-EC8B-41A4-977D-32C221EE43AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17775",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=332&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15234",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2249",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=332&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in (1) showcat.php and (2) add.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saphp:saphplesson:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CEBF90-6B94-41EA-9E98-70872B0AC5E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saphp:saphplesson:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C59750-642A-4578-9C0B-54E4AE64F3AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113018965520240&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17308/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2005-October/000313.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430906/30/5610/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440120/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/472799/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113018965520240&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17308/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2005-October/000313.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430906/30/5610/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440120/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/472799/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DboardGear allow remote attackers to execute arbitrary SQL commands via (1) the buddy parameter in buddy.php, (2) the u2uid parameter in u2u.php, and (3) an invalid theme file in the themes action to ctrtools.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:platinum:dboardgear:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4581955E-5DDA-412B-8574-FCBD714D163F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113017087231116&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015095",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-10/0298.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15174",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113017087231116&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-10/0298.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php.  NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454.  NOTE: the index.php/cid vector was later reported to affect 6.11."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE39E96D-B870-49FB-8C7C-7E829BA916B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0D7706-EEB2-4898-A0EA-7BD198965E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "356E5CEC-CCBD-4438-992A-29B53F3F6A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389B778A-EB0A-4BEC-9023-2190BCDAB746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27F4000-ED33-48F9-92BA-2629C5BAD709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7A0D86-BA93-4889-9242-A535C8F53E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57026D15-982E-4816-A4CB-960852D7006F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79713BBA-FC4F-4445-B888-656A4DF6C2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1D9D8F-FD72-4B51-817A-7A807750D3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156DC7CD-FFEA-4225-BE58-6DEFEDCB1730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92241B71-C6B6-4B85-96A8-726CC04E3F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F26F19B-4F47-475E-AD58-D8964C0BF8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7F57E2-E38E-4575-8C95-5E2FAC7D919D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113017151829342&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12751/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/27167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113017151829342&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12751/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/27167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 through 2.0.1 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the phpicalendar cookie.  NOTE: this is not a cross-site scripting (XSS) issue as claimed by the original researcher."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C478599-DCFC-4FEA-BCCF-1E76BD27B1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24EA9277-E46F-4EF6-84BB-9CBB444A82F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC91C699-46E8-4700-B70D-014C00629F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D831B19-C8BF-4BE8-AEC4-2E6846AE14D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0512.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113025930517426&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17328/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/2005/10/25/php-icalendar-css/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0512.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113025930517426&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17328/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/2005/10/25/php-icalendar-css/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in journal.php in SparkleBlog 2.1 allows remote attackers to inject arbitrary web script or HTML via the name field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sparkleblog:sparkleblog:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C613C2-29A3-41A0-B287-501DE2D201CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113029164931570&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113029164931570&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Search_Enhanced module in PHP-Nuke 7.9 allows remote attackers to inject arbitrary web script or HTML via the query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:search_enhanced:search_enhanced:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7376E4D3-CB18-4C63-97F5-660D59955006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:search_enhanced:search_enhanced:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44F1373-F558-4DF0-827A-0311DA96A274"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113038121108780&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17296/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15218",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113038121108780&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17296/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and earlier allow remote attackers to execute arbitrary SQL commands and possibly upload files via the (1) fileid and (2) subkatid parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38EA6377-47E9-4421-AEF9-17A4AA43FAE4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4715DB-A7C5-4FA5-BB5F-25D2CF6CE2C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB539382-7DB4-4D49-89BB-A87B09DC9B54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE155717-B08A-4D93-95A1-A24325DF0246"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113034480129309&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17347/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15214",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113034480129309&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17347/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in ArcaVir 2005 package 2005-06-21 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcavir:arcavir_2005:2005-06-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835DCA81-08C2-498D-8D61-C6CC29FD0654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in AVG 7 7.0.323 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grisoft:avg_antivirus:7.0.323:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5188CBC-298E-4F5A-A817-2DB05B178D85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:7.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638CC8F7-4B57-42DB-B07C-804E1D5C250F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in Dr.Web 4.32b allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dr.web:dr.web_antivirus:4.32b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137327B3-F81B-41E9-8B1B-5F86DEA5B9FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in F-Prot 3.16c allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:3.16c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A72DD59-9C97-4832-BAD2-794CD495E361"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarus:ikarus_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE7D9E0-658E-497C-84D8-A0D341B5A1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in Kaspersky 5.0.372 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.372:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789BB368-937D-424F-9914-2D7B68D32B9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in (1) McAfee Internet Security Suite 7.1.5 version 9.1.08 with the 4.4.00 engine and (2) McAfee Corporate 8.0.0 patch 10 with the 4400 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:7.1.5_version_9.1.08_engine_4.4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9216BAA4-28B8-420E-8C71-9A38D95BA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:8.0.0_patch_10_engine_4400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3568D0-B957-4289-AB28-08F4F800F2E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in Norman 5.81 with the 5.83.02 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:norman:norman_virus_control:5.81_engine_5.83.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1073E34-9BDB-4B6C-BA7E-8F265A954ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in Trend Micro (1) PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and (2) OfficeScan 7.0 with the 7.510.1002 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:7.0_engine_7.510.1002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3CAF81-213C-4F6B-A616-28CE1760CE1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:pc-cillin_2005:12.0.1244_engine_7.510.1002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410A1D5-55CF-404A-A954-C2540DE00AAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:titanium_2005:4.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB20540C-6A7A-40CC-B109-6ECA7C0B222E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in Ukrainian National Antivirus (UNA) 1.83.2.16 with kernel 265 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ukranian_national_antivirus:una:1.83.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD893B3-EEC0-46CE-B849-400125E2BD54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:3.91_engine_2.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28603B-6E57-4F80-B3E8-B89A74DF82AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyte.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityelf.org/magicbyteadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityelf.org/updmagic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:techno_dreams:announcement_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1D10F1-DC88-4B51-AC12-F7E4EB867E01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113035773010381&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17354/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-103.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20331",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15215",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113035773010381&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17354/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-103.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_dreams:techno_dreams_guest_book:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7042B5A-DC2D-4B6C-997B-F57F2994FDDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113035773010381&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17354/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-103.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20331",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113035773010381&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17354/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-103.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_dreams:mailing_list:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68DDF8C5-8EFA-491C-87E0-9E2EB41B7A5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113035773010381&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17354/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-103.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20331",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15215",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113035773010381&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17354/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-103.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T14:34:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_dreams:web_directory:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7FD74A-574A-4BB3-B176-EB66A649865F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113035773010381&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17354/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-103.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20331",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113035773010381&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17354/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-103.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3122",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-30T20:02:00.000",
      "lastModified" : "2023-11-07T01:57:46.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3424, CVE-2005-3425.  Reason: this candidate was intended for one issue, but two different authoritative sources used it for two distinct issues. Notes: All CVE users should consult CVE-2005-3424 and CVE-2005-3425 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3123",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-10-30T20:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as \"/.//..//////././\", which is collapsed into \"/.././\" after \"..\" and \"//\" sequences are removed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B30C1E-E26C-4208-96E0-10B46FF4D0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ED7127-4906-4C95-8180-57E7276FD760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9841DC70-40C0-4BC9-A541-76ED29D17825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0215148C-BC39-43D9-992B-60AF00250234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967F0E62-2613-49B5-8607-BE28491574AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9BF88B-E1F1-4E90-87F1-D6C186EECE89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17351",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/127",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1015118",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-877",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/20360",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15228",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2242",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-10-30T20:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks_patch_management_server:6.0.0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBCCC35-B232-43CE-AEBE-278FE594618A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cirt.dk/advisories/cirt-39-advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17358",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/536300",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/414880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cirt.dk/advisories/cirt-39-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/536300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/414880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password is being viewed, which could allow attackers with physical access to obtain the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes Finder to misrepresent file and group ownership information.  NOTE: it is not clear whether this issue satisfies the CVE definition of a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Software Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without asking the user to reset the status of the updates, which could prevent important, security-relevant updates from being installed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "memberd in Mac OS X 10.4 up to 10.4.2, in certain situations, does not quickly synchronize access control checks with changes in group membership, which could allow users to access files and other resources after they have been removed from a group."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory before reusing it, which could allow attackers to obtain sensitive information, a different vulnerability than CVE-2005-1126 and CVE-2005-1406."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.2",
            "matchCriteriaId" : "5E04B1AF-64A8-4A42-9AE1-04439D402184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.2",
            "matchCriteriaId" : "9B11CB78-44A7-4408-AA4B-30DEB19CD985"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2977",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam:pam:*:*:selinux:*:*:*:*:*",
            "versionEndIncluding" : "0.80",
            "matchCriteriaId" : "967AFB34-1676-4541-A26D-BA36AF296406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/pam/Linux-PAM/NEWS?rev=1.6&view=markup",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17346",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17350",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17352",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17365",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-22.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-805.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15217",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2227",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168181",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10193",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/pam/Linux-PAM/NEWS?rev=1.6&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-805.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E241363-CEE5-4AD7-AC5B-67BF24779B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE62DEB3-8DF4-424C-AE9C-0573432692B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17370",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0156.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15219",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luca_deri:ntop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "23EC4B4A-C34D-4840-BE23-66F69E6AE4E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://listgateway.unipi.it/pipermail/ntop-dev/2005-March/005296.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17382",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15242",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://listgateway.unipi.it/pipermail/ntop-dev/2005-March/005296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a \"stacked array assignment.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_182005.77.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-831.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-838.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15248",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PIRZJHM6UDNWNHZ3PCMEZ2YUK3CWY2UE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_182005.77.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-831.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-838.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PIRZJHM6UDNWNHZ3PCMEZ2YUK3CWY2UE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17490",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17531",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18669",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_192005.78.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-831.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-838.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15249",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_192005.78.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-831.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-838.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a \"GLOBALS\" fileupload field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB8BB-329A-4640-B758-7590C99B5E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945FF149-3446-4905-BCA1-C397E3497B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_202005.79.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/globals-problem",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-831.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-838.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415290/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15250",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_202005.79.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/globals-problem",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-831.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-838.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415290/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB8BB-329A-4640-B758-7590C99B5E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945FF149-3446-4905-BCA1-C397E3497B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues:\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB8BB-329A-4640-B758-7590C99B5E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945FF149-3446-4905-BCA1-C397E3497B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_4_4_1.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues:\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\n",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6457C946-123B-4B85-9253-D284A7A16A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D263CA-8B2C-4B66-8990-6224BAF52A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42CB75B-355B-4D80-91EA-77723B275D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5EFEC7-D9B6-454A-A36A-C75874564FCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113081023121059&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17376",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15239",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113081023121059&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) channel parameter in the topics module and (2) topic parameter in the posting module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oaboard:oaboard:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD5C934-3DA0-4ED2-A475-A6EBE9B30BD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17373",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15245",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E58AA0-90BF-497D-B296-845DAAFFE20A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17375",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15240",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E38D56-80BA-460C-A296-ED7F506E4364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD01F19-4B30-4147-AC48-7F5C64EE80CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17380",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015122",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY78241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY78253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY78241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY78253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp.  NOTE: the comersus_backoffice_message.asp/message vector is already covered by CVE-2005-2191 item 2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F49C1A8-3694-4AE3-B791-46C196C21195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEE5230-0C37-4EEE-8BE4-8178CA296633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D39EF7-4A9A-4E66-BD6A-840EBD344FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFEC7746-4D03-4707-854F-0888CD5FF31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6D652A-667B-48BD-A921-B8C12FF1F39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C67EEF24-0009-4C7F-942A-7CB3CE4D9B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3A2545-ACFC-4FE1-B5C1-B979DF7B9F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79D4A177-1141-4391-9795-EEB7484E31E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A199603-87D0-49BC-9A25-8A9140B19CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBF5CC-D5C4-448F-B45E-74B6BD8E2DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C14A80B-B606-44EB-8D8B-7E2033DB2E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2998DEF-607B-49F2-9904-A9F904175BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7663EA-7EF6-4272-B19D-55FE355BF7A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AFA3D2B-B5C4-4AE0-A0EF-106C2B73C71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CF64A8-AB43-4C61-9210-2CA3C2BF931B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380E572B-33D1-4785-9C71-F88B8ADBA362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAB0436-3072-48B8-A275-79EEF291587C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027A3B7B-1BFA-4A18-942A-D4A980B195B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E59E1C-ABEC-4B37-B747-7BD7B3CF9DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACEE6C9-7C0C-412C-8CBC-51F77E236D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9475BCA2-EC8E-4F67-B301-C3FF6975D608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F8A8BA-AD15-45FE-82E3-B21B109E61E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15251",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015112",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in CAT-QuickHeal 8.0 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cat:quick_heal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785010D3-85E5-4299-A1D5-1E06EC362270"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113036131526435&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113036131526435&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in Fortinet 2.48.0.0 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fortinet:fortinet:2.48.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC81735-491C-4EB0-AAA8-F9CA5BFFB560"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113036131526435&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113036131526435&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in TheHacker 5.8.4.128 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an \"MZ\" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a \"triple headed\" program that contains EXE, EML, and HTML content, aka the \"magic byte bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thehacker:thehacker:5.8.4.128:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C328FE2-42B1-4B04-B0EC-72B4AC8EC908"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113036131526435&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113026417802703&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113036131526435&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not notify users when it cannot establish a secure channel with the server, which allows remote attackers to obtain authentication information without detection via a man-in-the-middle (MITM) attack that bypasses TLS authentication or downgrades CRAM-MD5 authentication to plain authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113028017608146&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113034421329653&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=311657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113028017608146&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113034421329653&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=311657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the _base_href parameter in translate.php, (2) the _base_path parameter in news.inc.php, and (3) the p parameter in add_note.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1909A2-45D7-4388-9BB6-33BDEF52A0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAE5D26-1CD1-43F4-80AC-08B7588E3FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160F70B7-4686-47EF-8510-1BDBC89FB280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BDCA86-C4D0-49B1-A8FE-E81C9B29B04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB903C6-ECB0-4203-BCC2-533CB404B64F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://atutor.ca/view/3/6158/1.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113043022821049&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16915/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-55/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20347",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20348",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20349",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15221",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://atutor.ca/view/3/6158/1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113043022821049&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16915/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-55/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parameter followed by a null byte (%00) in (1) body_header.inc.php and (2) print.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1909A2-45D7-4388-9BB6-33BDEF52A0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAE5D26-1CD1-43F4-80AC-08B7588E3FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160F70B7-4686-47EF-8510-1BDBC89FB280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BDCA86-C4D0-49B1-A8FE-E81C9B29B04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB903C6-ECB0-4203-BCC2-533CB404B64F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113043022821049&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16915/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-55/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20346",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15221",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113043022821049&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16915/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-55/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either the (1) asc or (2) desc parameters set, possibly due to an eval injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1909A2-45D7-4388-9BB6-33BDEF52A0B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAE5D26-1CD1-43F4-80AC-08B7588E3FB1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160F70B7-4686-47EF-8510-1BDBC89FB280"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BDCA86-C4D0-49B1-A8FE-E81C9B29B04F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB903C6-ECB0-4203-BCC2-533CB404B64F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113043022821049&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16915/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-55/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20344",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15221",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113043022821049&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16915/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-55/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpESP 1.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F2AC68-8BBB-498A-9E64-F34EB55C70B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B064D5-DEE7-4C4A-B3FC-D50834DEE821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE6F403-FAC0-4683-B8A9-7CB2AA284EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E945E7-1EB2-430B-B1D7-09213CF2D6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.4_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A473E0-9F20-4BE6-A78B-1644B26F19FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.5_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7902B990-5232-46F0-8B8A-6E720F3A6D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36C4642-4A06-4E0A-8C8E-0D09AF33278C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AFB7AA4-FD70-4F4F-BDB1-372D5A8D0C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DDAEA0-A1B5-49E2-98DD-5272C38E6BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.6.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CE4811-C15A-48F8-8E50-268911C24108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.6_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF8CB9F-DB55-45B5-812F-DBB3C89FA7C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE2AB2F-625C-4668-A50A-7C1EC2333153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.6_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18FF2EA-53C5-4EC4-A368-BC1420678B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.6_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963CF065-3E46-44AE-9053-413E68C48236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65CCEE7-0809-460E-B4B1-9D03C49C4641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E0B6F6-11EF-478E-A63C-343CB3C9C70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23572B9F-23E6-40D7-863B-C2AE15D6BD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C91172-6CA8-44A6-86CC-B525DF88D52D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.5_dev1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13D3A9E-60DF-442B-A629-C2BBFED7A320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.5_dev2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7773515F-16F1-47D7-BF45-66CBF08584F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.5_dev3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC3C204-CA3E-4901-98CC-FE84EC1F1CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFA40B6-E757-4556-ABAC-EFE1A72B8B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431C81C-CF1E-48F5-B42C-8B6796D1DCF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20357",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F2AC68-8BBB-498A-9E64-F34EB55C70B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B064D5-DEE7-4C4A-B3FC-D50834DEE821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE6F403-FAC0-4683-B8A9-7CB2AA284EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E945E7-1EB2-430B-B1D7-09213CF2D6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.4_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A473E0-9F20-4BE6-A78B-1644B26F19FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.5_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7902B990-5232-46F0-8B8A-6E720F3A6D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36C4642-4A06-4E0A-8C8E-0D09AF33278C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AFB7AA4-FD70-4F4F-BDB1-372D5A8D0C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DDAEA0-A1B5-49E2-98DD-5272C38E6BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.6.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CE4811-C15A-48F8-8E50-268911C24108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.6_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF8CB9F-DB55-45B5-812F-DBB3C89FA7C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE2AB2F-625C-4668-A50A-7C1EC2333153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.6_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18FF2EA-53C5-4EC4-A368-BC1420678B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.6_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963CF065-3E46-44AE-9053-413E68C48236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65CCEE7-0809-460E-B4B1-9D03C49C4641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E0B6F6-11EF-478E-A63C-343CB3C9C70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23572B9F-23E6-40D7-863B-C2AE15D6BD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C91172-6CA8-44A6-86CC-B525DF88D52D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.5_dev1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13D3A9E-60DF-442B-A629-C2BBFED7A320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.5_dev2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7773515F-16F1-47D7-BF45-66CBF08584F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7.5_dev3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC3C204-CA3E-4901-98CC-FE84EC1F1CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFA40B6-E757-4556-ABAC-EFE1A72B8B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfat:phpesp:1.7_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431C81C-CF1E-48F5-B42C-8B6796D1DCF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20358",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T12:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands via the limit parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_neustaetter:gcards:1.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DDF67C-FEA8-45CF-A97A-79EDB5D70E18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17353",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015106",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fr33d0m.net/content-1783.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15216",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fr33d0m.net/content-1783.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or HTML via the type parameter in a Topic method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E3811E-DE0F-4AEB-A0C8-4115E9188A79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.snitz.com/forum/topic.asp?TOPIC_ID=60011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17385",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15241",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.snitz.com/forum/topic.asp?TOPIC_ID=60011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via a Post Reply to a topic, in which the reply contains a javascript: URL in an <img> tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elite_forum:elite_forum:1.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CEC3A2-A9AA-49D0-B718-5321948A2A38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113083841308736&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17341",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2005-009-elite-forum.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415400/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113083841308736&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2005-009-elite-forum.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415400/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in desktop.php in eyeOS 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the motd parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021FDB55-22B2-4A39-A5FD-E85EFB4024D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17105",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.thebillygoatcurse.com/advisories/eyeOS_0.8.4_Multiple.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.thebillygoatcurse.com/advisories/eyeOS_0.8.4_Multiple.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021FDB55-22B2-4A39-A5FD-E85EFB4024D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17105",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.thebillygoatcurse.com/advisories/eyeOS_0.8.4_Multiple.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.thebillygoatcurse.com/advisories/eyeOS_0.8.4_Multiple.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE (GPC) variable and a GLOBALS[] variable with the same name, which causes phpBB to unset the GLOBALS[] variable but not the GPC variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle a session, allows remote attackers to bypass security checks by setting the $_SESSION and $HTTP_SESSION_VARS variables to strings instead of arrays, which causes an array_merge function call to fail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to usercp_register.php, (2) forward_page parameter to login.php, and (3) list_cat parameter to search.php, which are not initialized as variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20387",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20388",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20389",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signature_bbcode_uid parameter, which is not properly initialized."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20390",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the signature_bbcode_uid parameter, as demonstrated by injecting an \"e\" modifier into a preg_replace statement."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20391",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113081113317600&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_172005.75.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T21:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D37855E6-5DD9-489D-82D5-0E2FBDA87D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "24BED8E1-AE22-49F5-9DB2-053D0D6D8D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2318282718/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17379",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015119",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=366565",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15236",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2318282718/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=366565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:10-4_aps:asp_fast_forum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC07F0F-23F8-4BE4-8DB6-05BEF07CCE80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17387",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15233",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subdreamer:subdreamer:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F66C2FA-3936-4643-90C5-4D751C9FDEE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rst.void.ru/papers/advisory35.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17378",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15238",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://rst.void.ru/papers/advisory35.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than CVE-2005-3425."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA61808-36A9-4A80-B664-0A7B5F6A3052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B49901-3341-41CD-A731-553BC379DCA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9262694-51F5-4B95-830A-272737ECC2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B492A11B-7E67-45B9-8C6C-2EDAC714DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11F283A-83C6-420F-8F68-8E3C45998770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B68CD0-E227-4C59-9FF6-8A5E39133752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F23C56-CA91-46E2-828C-453924C71991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11DA871-1105-4C94-80F4-5DF94E870DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1305B46-A74E-4946-8BED-14C3671140D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818D5BB6-56A8-4A01-BCA8-2FC2F5089A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B30C1E-E26C-4208-96E0-10B46FF4D0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ED7127-4906-4C95-8180-57E7276FD760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9841DC70-40C0-4BC9-A541-76ED29D17825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0215148C-BC39-43D9-992B-60AF00250234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967F0E62-2613-49B5-8607-BE28491574AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17351",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-877",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnu.org/software/gnump3d/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20359",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnu.org/software/gnump3d/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-01T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2005-3424."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA61808-36A9-4A80-B664-0A7B5F6A3052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B49901-3341-41CD-A731-553BC379DCA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9262694-51F5-4B95-830A-272737ECC2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B492A11B-7E67-45B9-8C6C-2EDAC714DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11F283A-83C6-420F-8F68-8E3C45998770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B68CD0-E227-4C59-9FF6-8A5E39133752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F23C56-CA91-46E2-828C-453924C71991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11DA871-1105-4C94-80F4-5DF94E870DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1305B46-A74E-4946-8BED-14C3671140D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818D5BB6-56A8-4A01-BCA8-2FC2F5089A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B30C1E-E26C-4208-96E0-10B46FF4D0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ED7127-4906-4C95-8180-57E7276FD760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9841DC70-40C0-4BC9-A541-76ED29D17825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0215148C-BC39-43D9-992B-60AF00250234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967F0E62-2613-49B5-8607-BE28491574AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9BF88B-E1F1-4E90-87F1-D6C186EECE89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-877",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnu.org/software/gnump3d/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnu.org/software/gnump3d/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6457C946-123B-4B85-9253-D284A7A16A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0ECEAF-401A-434E-9B0A-1A234BAEFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E751FA0E-0DF4-4F81-912A-1A132640246D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F61AC6-EDF6-4818-BA51-3EAA299680B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32984D8-9631-407B-834E-303B9405A425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB44A872-3FE2-47E9-BA84-B6E1015E1973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F020080D-7181-400D-988E-6844D1653464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D08038-9815-4222-9CD3-1211FE5954A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE43EA96-5B3C-498F-A040-C800821DA49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236F2BBF-0CF5-465E-9E65-8AD6D17F57A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDEBEDA-437A-4942-8A71-7B25DD558BCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB8A78E-DAB9-4A72-BC54-58230E1E9B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D74ED1-34C5-4F95-A941-83664AFFF2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0747C1A9-C404-4FBD-AA8F-9DBB70FEB4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3B1AD4-9EA0-4D86-90E1-3366FBC5629D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E483BD0-CAB9-4DA0-AAA4-A934B8318FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F04FAB1-A558-4F93-9FBF-043DE259A813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A189A733-3130-41B4-94DD-E99E294D0FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEE5695-DC49-445D-864A-4739E16DF762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBF146F-2CFA-4F14-BFBC-E01B58F9F72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D263CA-8B2C-4B66-8990-6224BAF52A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C9FCE-AD76-4E32-8FEC-EEFA0662BC04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7519FA-831A-41D7-AFC3-B9457E6DFB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB79AFD-493F-41F1-9EC1-8BCC0D28A914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C8F091B-194A-4FC5-87F4-A76CB490F3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11716B49-A920-4A1B-BEA5-4105213B9731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756A7AF5-E502-4EDC-9693-4041C993E3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9885BC3E-1854-4561-9906-FFAEECA5B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B7759F-F228-436D-BC86-7317B0109C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB9BD19-1BF9-42D0-9E43-7D95EE010347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0A6E23-6456-4305-A7DA-8CA1D506D4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D985B9F0-5B4F-4120-8ECF-506C5F6179FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7E6096-58BF-47F1-982B-27A9ED735AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62362541-FE20-47ED-9E03-94216A3D43CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BD7019-BBA5-4D08-85C8-571D2EC03FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1D56A4-A03C-445C-993B-1AA12024D4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F563B1FD-FC1F-4304-8141-A1188A190835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4269ED1A-3031-4572-B134-62C6E533D176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140999A7-E9BB-4459-B3F8-48DF8F5DFE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD75B0-24D0-40BA-A4FB-925BD5414298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED8F3C5-8E43-4B07-8224-38BF4774F4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC88614-E782-447B-B854-955498FAAA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C1B8EE-3C12-452F-986E-6FD8A230685A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC6851-F63E-47D7-BDEF-3BFF39E94D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685F5555-793D-4FAA-8CF4-578490CFAC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E688CF0C-134B-49E2-AEB3-45ECACB8B5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D385327-D1FF-4A22-A0C0-0C5AA53590C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51329755-1DBF-40E1-960C-E924CDC4B22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE65AC5-C218-456F-86FB-1C8BEC3C4598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1412133F-3B44-43B6-A4FF-FF80E7B564E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55EE355-28A1-4955-9ADD-A8E02376C9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E942C13E-6B54-465F-8026-ED49BD7EA2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AADF30CF-AD36-45EB-AF50-EB0533B20B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD078F82-361C-4B38-86E8-85E129F41A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9831C92-7717-4650-8689-3C41B773C5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3521E7-572E-4ADD-AAF6-F1AE505B4BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73290B2-384B-4B0F-8763-EF4D5D7C39FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4728B3CD-5B54-4B0B-8967-DE7D9E1474F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F353B495-D69A-4831-9E5B-F15F8F749C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16647409-3ADD-4E86-A053-4A7B8365700E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5CA9F6-68FE-4412-8CD5-F85E970249F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A74354-1EAB-4A4F-A79C-C04E9BCDF594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A016A3-CAA9-4FCB-B909-F4163CE1E19E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A53B7C-8E9D-4DD6-8B00-628F7796A365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5AADA5-05DA-4660-9636-A3B737916A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2778FEDE-063B-4454-9FA7-F526334CF9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989D471D-3F81-4018-A124-7FBEB3F4AB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EA97AE-B2DD-40F8-81E1-467E895CE736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C82A6A-4548-4508-B337-1061E57D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A972BC-6956-4195-933C-F3694BFEFB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF5187-C008-4927-B5CB-A491768E9822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A39ECE-7C8D-4BB8-A408-08EA0879F03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C67474C-3274-4F62-AF98-6953F9744522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D799CAF5-BFC3-4A80-8AE2-D292B7F9D9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D3B905-FCD7-4136-A94C-76A95994CD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE172A1-D9A5-4FF7-B316-4E0BD639B35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42CB75B-355B-4D80-91EA-77723B275D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5EFEC7-D9B6-454A-A36A-C75874564FCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17376",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote attackers to cause a denial of service (memory corruption and device reload) via a malformed client certificate during SSL session negotiation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF28C435-C036-4507-8E3F-44E722F9974A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/99",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015081",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051019-css.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051019-css.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_management_center_for_ips_sensors:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C8B21F-0C79-464A-AB73-4ED3066CD7D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051101-ipsmc.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/154883",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051101-ipsmc.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/154883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to inject arbitrary web script or HTML via a message body."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite_express:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.21",
            "matchCriteriaId" : "CF85F655-3BC7-4804-8E00-FAD19B9E6620"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113053680631151&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17240/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113053680631151&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17240/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite_express:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.21",
            "matchCriteriaId" : "CF85F655-3BC7-4804-8E00-FAD19B9E6620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite_express:6.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63D4D75-76B2-4566-B91E-3FB1AD1BACEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113053680631151&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113053680631151&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions, such as (1) .unk, (2) .asa, and possibly (3) .htr and (4) .aspx, which are not filtered like the .asp extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite_express:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.21",
            "matchCriteriaId" : "CF85F655-3BC7-4804-8E00-FAD19B9E6620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite_express:6.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63D4D75-76B2-4566-B91E-3FB1AD1BACEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113053680631151&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17240/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113053680631151&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17240/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to read arbitrary files via a full pathname in the AttachPath field of a mail message under composition."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite_express:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.21",
            "matchCriteriaId" : "CF85F655-3BC7-4804-8E00-FAD19B9E6620"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113053680631151&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17240/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15231",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113053680631151&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17240/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to * (wildcard) and the page parameter set to all."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_rybak:minigal_2:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B47576-53CC-4B34-9A4D-D4C157766B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_rybak:minigal_2:b13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CA8F45-908E-41E9-B122-1FFF2C4F68CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113063215507210&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17374/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15235",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113063215507210&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17374/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Mirabilis ICQ 2003a allows user-assisted attackers to execute arbitrary code by convincing a user to enter long strings into the First Name and Last Name fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2002a_build3728:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791F32E1-A239-4893-A1E9-138149D9CAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003a_build3800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0A9C10-A685-4D02-A9FF-6689441AF598"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113063323109149&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113063323109149&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Archilles Newsworld before 1.5.0-rc1 stores (1) account.nwd and (2) session.nwd under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames, hashed passwords, and session IDs, and gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archilles:newsworld:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0_rc1",
            "matchCriteriaId" : "FE6F88F0-0DFA-4068-9ED5-8E83B50BEBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archilles:newsworld:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5764ECC-48D5-4349-B769-E7902DE7993D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archilles:newsworld:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E87A4A2-756E-431C-B91C-ABA7D84B3109"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113018731120709&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17310/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113018731120709&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17310/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archilles:newsworld:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "2CAB764E-BAC3-4352-A2BA-B361C592154B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113018731120709&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/17310/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22860",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113018731120709&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/17310/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the (1) Search module, (2) certain edit fields in Guestbook, (3) the title in the Forum module, and (4) Textbox."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6318A231-4093-4E7C-B5F6-66B4BF64B33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112991421210577&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17304/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112991421210577&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17304/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PL/SQL component in Oracle Database Server 9i up to 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# DB01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logical Standby; (3) DB10 in Locale; (4) DB12 in Materialized Views; (5) DB13 in Objects Extension; (6) DB15 in Oracle Label Security; (7) DB27 in Security, possibly due to a buffer overflow in sys.pbsde.init; and (8) DB28 and (9) DB29 in Workspace Manager."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.4.2",
            "matchCriteriaId" : "A43EA2EB-E00A-4F79-A8B4-3A59E24CF3F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/449444",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/449444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database Server 10g up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB02, (2) DB03, and (3) DB05 in Change Data Capture; (4) DB07 in Data Pump Export; and (5) DB18, (6) DB19, (7) DB20, (8) DB21, (9) DB22, (10) DB23, (11) DB24, and (12) DB25 in the Spatial component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B945FDC6-7884-467A-AA4E-F3AB0EE32E6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Database Scheduler in Oracle Database Server 10g up to 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# DB08."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Intelligent Agent in Oracle Database Server 9i up to 9.0.1.5 has unknown impact and attack vectors, aka Oracle Vuln# DB14."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database Server 8i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB09 in Export, (2) DB11 in Materialized Views, and (3) DB16 in Security Service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CC3066-82BA-41AB-B6C8-D2E7D7AE7D6F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B945FDC6-7884-467A-AA4E-F3AB0EE32E6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Spatial component in Oracle Database Server from 9i up to 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# DB17."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CC3066-82BA-41AB-B6C8-D2E7D7AE7D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Programmatic Interface in Oracle Database Server from 8i up to 9.2.0.5 have unknown impact and attack vectors, aka Oracle Vuln# DB26."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CC3066-82BA-41AB-B6C8-D2E7D7AE7D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2328BA88-C390-46EA-8C30-9F0A001C10EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CC3066-82BA-41AB-B6C8-D2E7D7AE7D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B945FDC6-7884-467A-AA4E-F3AB0EE32E6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/890940",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/890940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Application Server 9.0.2.3 up to 10.1.2.0 has unknown impact and attack vectors, aka Oracle Vuln# DB32 and AS06."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2328BA88-C390-46EA-8C30-9F0A001C10EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CC3066-82BA-41AB-B6C8-D2E7D7AE7D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Single Sign-On in Oracle Database Server 10g up to 10.1.0.4.2 and Application Server 9.0.2.3 up to 9.0.4.2 has unknown impact and attack vectors, aka Oracle Vuln# DB33 and AS08."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the OC4J Module in Oracle Application Server 9.0 up to 10.1.2.0.2 has unknown impact and attack vectors, as identified by Oracle Vuln# AS01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09C4B72-2680-4AFB-9E0B-9B24EFF7066E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2328BA88-C390-46EA-8C30-9F0A001C10EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Application Server 9.0 up to 10.1.2.0 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS02 in Containers for J2EE, (2) AS07 in Internet Directory, (3) AS09 in Report Server, and (4) AS11 in Web Cache."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09C4B72-2680-4AFB-9E0B-9B24EFF7066E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2328BA88-C390-46EA-8C30-9F0A001C10EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/376756",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/512716",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/376756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/512716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unknown impact and attack vectors, as identified by Oracle Vuln# AS04."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296BCDEA-69B8-4184-928B-3E04F4F09C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in SQL*ReportWriter in Oracle Application Server 9.0 up to 9.0.2.1 has unknown impact and attack vectors, as identified by Oracle Vuln# AS10."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09C4B72-2680-4AFB-9E0B-9B24EFF7066E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E59B89D9-AAF9-40CB-931C-EB4958491B99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/171364",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/171364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Web Cache in Oracle Application Server 1.0 up to 9.0.4.2 has unknown impact and attack vectors, as identified by Oracle Vuln# AS13."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296BCDEA-69B8-4184-928B-3E04F4F09C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09C4B72-2680-4AFB-9E0B-9B24EFF7066E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Web Cache in Oracle Application Server 1.0 up to 10.1.2.0 has unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS12 and (2) AS14."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296BCDEA-69B8-4184-928B-3E04F4F09C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09C4B72-2680-4AFB-9E0B-9B24EFF7066E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC53C94-1C7B-4B5E-8114-EFB5ED61B045"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10g Release 1 version 10.1.1 and 9i Release 2 9.0.4.2 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) OCS01, (2) OCS02, (3) OCS03, and (4) OCS04 for Calendar; (5) OCS05, (6) OCS06, (7) OCS07, (8) OCS08, (9) OCS09, and (10) OCS10 for Email Server; and (11) OCS11, (12) OCS12, and (13) OCS13 for Oracle Files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3341ECC8-1E5F-4436-B056-9CA2BAF659E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8347DA-6C8E-4AFB-BBB1-A34F1339F5B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.10 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) APPS01 in Application Install; (2) APPS02 and (3) APPS03 in Application Object Library; (4) APPS05 and (5) APPS06 in Applications Technology Stack; (6) APPS07 in Applications Utilities; (7) APPS09, (8) APPS10, and (9) APPS11 in HRMS; (10) APPS12 in Mobile Application Foundation; (11) APPS13 in SDP Number Portability; (12) APPS14 in Oracle Service; (13) APPS15 in Service Fulfillment Manage, (14) APPS16 in Universal Work Queue; and (15) APPS20 in Workflow Cartridge."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57A5AE0-90B5-410E-8878-BD514C3B7946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7EAC35-E890-444A-B070-C91382F2E242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69568B66-122B-4946-B630-2960DAA1885E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3E4A5C-8D0F-4105-8618-26586BEDE84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FEA4F-B1C7-4250-81FD-AC1289769348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78408427-3FFB-45C4-82EF-C8D636B3A718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/150508",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/265700",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/609340",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/150508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/265700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/609340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.9 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) APPS04 in Application Object Library, and (2) APPS17, (3) APPS18, and (4) APPS21 in Workflow Cartridge."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.9",
            "matchCriteriaId" : "938A07EA-A171-49D3-9BA1-5154DAAE6F59"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC2C3EF-B1A4-4BF9-B534-A7ABB6490CCF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57A5AE0-90B5-410E-8878-BD514C3B7946"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7EAC35-E890-444A-B070-C91382F2E242"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69568B66-122B-4946-B630-2960DAA1885E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3E4A5C-8D0F-4105-8618-26586BEDE84B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FEA4F-B1C7-4250-81FD-AC1289769348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.10 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS08 in HRMS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.10",
            "matchCriteriaId" : "76DE3134-4227-42F1-827D-3B37D81A1D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120ED075-8649-44F1-A79C-99C040C2E365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC2C3EF-B1A4-4BF9-B534-A7ABB6490CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57A5AE0-90B5-410E-8878-BD514C3B7946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7EAC35-E890-444A-B070-C91382F2E242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69568B66-122B-4946-B630-2960DAA1885E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3E4A5C-8D0F-4105-8618-26586BEDE84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FEA4F-B1C7-4250-81FD-AC1289769348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78408427-3FFB-45C4-82EF-C8D636B3A718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.9 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS19 in Workflow Cartridge."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57A5AE0-90B5-410E-8878-BD514C3B7946"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7EAC35-E890-444A-B070-C91382F2E242"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69568B66-122B-4946-B630-2960DAA1885E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3E4A5C-8D0F-4105-8618-26586BEDE84B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FEA4F-B1C7-4250-81FD-AC1289769348"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78408427-3FFB-45C4-82EF-C8D636B3A718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle E-Business Suite and Applications 4.5 up to 4.5.1 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS22 in Oracle Clinical."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:clinical:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D946DB-2110-4CF9-B017-3B801D8008DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:clinical:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "759CF757-1D65-4419-8AAF-1C768E5E602D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0CBDB5-B13D-4071-994A-E1318A3821DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Agent in Oracle Enterprise Manager 9.0.4.1 up to 10.1.0.4 has unknown impact and attack vectors, as identified by Oracle Vuln# EM01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:10g_enterprise_manager_database_control:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86AB9FC2-2FA3-4F16-8AF5-F30991E36A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:10g_enterprise_manager_database_control:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F918241-E262-4091-B31F-01861B54195E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_application_server_control:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3C095E-D569-4F11-AAE8-FEC29E817365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_application_server_control:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A80DD27-A5C5-40AD-A3E9-A612C652F514"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/865948",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/865948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.42 up to 8.45.17 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en PeopleTools en Oracle PeopleSoft Enterprise 8.42 hasta la versión 8.45.17 tiene impacto y vectores de ataque no especificados, según lo identificado por Oracle Vuln# PSE01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.45.17",
            "matchCriteriaId" : "376CA128-B0E9-47A7-9F85-9EF850C127AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B32DD7-583D-42AA-8E73-BEE4304C900E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.46.02",
            "matchCriteriaId" : "27B3498B-E3A1-4B7F-A6EF-C2F27B415E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99141DE9-36C6-45D0-B4C7-A08B71460F74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.03 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE03."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en PeopleTools en Oracle PeopleSoft Enterprise 8.44 hasta la versión 8.46.03 tiene impacto y vectores de ataque no especificados, según lo identificado por Oracle Vuln# PSE03."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.46.03",
            "matchCriteriaId" : "0E3F6F11-3711-4542-BB6E-BDD37A8227D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99141DE9-36C6-45D0-B4C7-A08B71460F74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE04."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.46",
            "matchCriteriaId" : "DD46EDB3-AA23-4BA8-8386-4D6B3DFCC666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99141DE9-36C6-45D0-B4C7-A08B71460F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89994697-5BB5-4AF2-9A97-08AB7D289A90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in JDEdwards HTML Server in Oracle EnterpriseOne 8.94 OneWorld XE up to 8.95_B1, 8.94_Q1, and SP23_K1 has unknown impact and attack vectors, as identified by Oracle Vuln# JDE01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jdedwards:oneworld_xe:8.94_q1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6816AC6F-0DB9-40BB-92F4-5DD0A8939141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jdedwards:oneworld_xe:8.95_b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E88D0A79-DCF0-4751-88D5-7B3B89389D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jdedwards:oneworld_xe:sp23_k1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0C8FF5-150D-4683-B318-D23125C6E258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterpriseone:8.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B28EDD-5DA5-4F4C-A687-A717CEF627AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Enterprise CRM Sales in Oracle 8.81 up to 8.9 has unknown impact and attack vectors, as identified by Oracle Vuln# CRM01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_customer_relationship_management:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.9",
            "matchCriteriaId" : "719C0D8F-B761-4DAF-A158-9039091AA548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_customer_relationship_management:8.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FE4D94-5289-474F-AAA3-FA493B2E2A8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/210524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service (crash) via (1) malformed packets and possibly other unspecified issues with unknown impact and attack vectors including (2) use of \"~\" in a pathname, and (3) memory consumption of the daemon.  NOTE: it is not clear whether items (2) and above are vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0.1",
            "matchCriteriaId" : "92F4434F-7AAF-44D4-A200-5C2D73556A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB703F7-4806-4E3F-850E-ACC127892899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3F784-86CB-46FC-97FB-1F43F140C9ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022E0AF9-48FA-41C4-A109-4A3284A721BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397E88A4-9E82-4818-B176-1C049993F1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DD649F-E290-4E8E-B61F-3950A2157938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:4.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BE6EDE-C7BC-4730-9602-160A027D8F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE0A612-CF94-4DBE-808C-AE4CA9DD2C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F20066E0-BAE8-462F-86B5-A39DDB5D11C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B460EA-F742-4524-B213-BF92ABF82ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E646B1A-167C-4DB6-84C1-77B071AC605A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF068DF2-7298-4648-BA80-06321599E723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B3B340-C416-421D-9616-C4ACB59E05A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:5.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADBC6BB-BF83-4BC0-88FC-4D6E929B7D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:5.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5175168C-D623-49AE-9BB6-9DAF8B7C5EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:5.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735F7214-91B5-4BDF-8F98-52249A22AE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E248012-E5EE-4975-8E3B-A05FC5FA4737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C8B779-67D3-43B5-B8F2-C460D5C5906D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:6.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4E2E43-42CC-451E-8F49-E5E6E72D90C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24DD045-751C-4CAA-BDD5-0511FD245651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17409",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.serv-u.com/releasenotes.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.serv-u.com/releasenotes.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.40:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "375B5B66-822B-4142-BAA3-0928DE7A8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05453A15-69B7-40AD-B14E-D00432DC4344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54C74DD-DDF7-4747-8A59-F67114412BFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17361",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2005-2.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2005-2.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in News2Net 3.0.0.0 allows remote attackers to execute arbitrary SQL commands via the category parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:news2net:news2net:3.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0F242D-5CAF-4D8F-A2B8-648DC167E127"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in in the authenticate function in MailWatch for MailScanner 1.0.2 allows remote attackers to execute arbitrary SQL commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC20ABC-5295-4E12-92B7-A29A845CF68F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=367923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=367923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-02T23:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the ruleset view for MailWatch for MailScanner 1.0.2 allows remote attackers to access arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mailscanner:mailscanner:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC20ABC-5295-4E12-92B7-A29A845CF68F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=367923",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=367923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_communications_express:2004q2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D5E8CB-3378-4267-B8B5-ED8FC8332EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_communications_express:2005q1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AEF095-3C38-4F6F-987D-557A0DC89FDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17395",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101948-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101948-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry, (2) blog_subject, and (3) blog_text parameters (involving the temp_subject variable) in (a) preview_cgi.php and (b) preview_static_cgi.php, or (4) scheme_name parameter and (5) bg_color parameters (involving the preset_name and result variables) in (c) colors.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B1AB7A-63C5-43EA-8EF0-1934EE174719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0511-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0511-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The aries.sys driver in Sony First4Internet XCP DRM software hides any file, registry key, or process with a name that starts with \"$sys$\", which allows attackers to hide activities on a system that uses XCP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:first4internet_xcp_content_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA20833-5C2C-427D-84F7-028321D6A78B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hasbani Web Server (WindWeb) 2.0 allows remote attackers to cause a denial of service (infinite loop) via HTTP crafted GET requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasbani_web_server:hasbani_web_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3286E84D-D569-4FBB-A703-2CBAE81FC860"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0572.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15225",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.x0n3-h4ck.org/index.php?name=news&article=92",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0572.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.x0n3-h4ck.org/index.php?name=news&article=92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP OpenVMS Integrity 8.2-1 and 8.2, and OpenVMS Alpha 7.3-2 and 8.2, allows local users to cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:openvms:7.3-2:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "CF201B37-9A76-400E-B389-B4E58B3F0356"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:openvms:8.2:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "B97FF973-660F-42E5-9D13-7AFF27547AD5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:openvms:8.2:*:integrity:*:*:*:*:*",
            "matchCriteriaId" : "A0313D6F-853D-4CB9-98C5-3430A54756D4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:openvms:8.2-1:*:integrity:*:*:*:*:*",
            "matchCriteriaId" : "625F0471-75C1-495C-887A-1147E27BA057"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17402",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML or script in an image whose type does not match its extension, which is rendered by Internet Explorer due to CVE-2005-3312.  NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in Invision Gallery."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E58AA0-90BF-497D-B296-845DAAFFE20A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0519.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17393",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0519.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in PHPCafe.net Tutorials Manager 1.0 Beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcafe:tutorial_manager:1.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E1C16B-C265-4D9F-9E8C-CDB90F9EBCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/22795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435206/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15244",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435206/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.asp in Ringtail CaseBook 6.1.0 allows remote attackers to inject arbitrary web script or HTML via the users parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ringtail:casebook:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05FE8BD7-9366-4540-A8A1-33781F294809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17383",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.procheckup.com/Vulner_PR0412.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.procheckup.com/Vulner_PR0412.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ringtail:casebook:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05FE8BD7-9366-4540-A8A1-33781F294809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17383",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.procheckup.com/Vulner_PR0413.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.procheckup.com/Vulner_PR0413.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue does not correspond to a specific vulnerability, rather a general weakness that only increases the feasibility of exploitation of any vulnerabilities that might exist.  Such design-level weaknesses normally are not included in CVE, so perhaps this issue should be REJECTed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F86F790-6247-42F2-9487-3D60A2842F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12434A88-88C6-4749-981F-E2B4D725F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6B0C2F-2FBE-4422-AD30-305100C595CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932C1AC0-0BD1-46DF-A241-AA71BBD785BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEA01D2-B985-4575-AF00-144CE2E3024D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11A2BE-19E7-4148-B3CC-B4956B07273E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7F94E8-86FC-456B-A7BB-57953F67F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0w5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A92DCEF-C205-4145-91B0-DB9991130457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B5CC91-144D-4818-871E-E6120A7E1050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1050ACB3-E5B2-4710-910B-F3DF4B49907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABE71F9-17D4-47C4-A762-18CC8716E477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7977DA9F-41DE-4482-B0CD-896EEEFB5689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADAB898-7728-4C14-B69A-7B8B06AFC894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBE69A0-85B1-423B-88FB-CDA80E9186EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54424787-34AC-410D-985F-511ADB2BB144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F54F0C-AC91-4CB7-9FEB-257F03547864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0D017-F26F-4429-891E-C7E1C66B6588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA075D-4A9E-44EE-90CF-23947C9040EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3DFAEC-4534-4A8D-9886-0723F57C7A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5451772-87D4-42E2-8F48-D137670DA3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D162976F-87A3-42BF-8C9F-A981B14F4673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43581A57-418A-4A35-ACF2-1380A8DA8A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC17E231-9256-4600-A33B-238E7E83CF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6D5468-BB6A-4665-964F-D8F636359CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442972CD-50D3-4C46-AB73-44AED94B9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19077C39-A27B-4EC3-A882-9AC826E61570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B31AFC-9C72-4737-B6B7-E938C13695BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEF6AED-4477-4AAC-9759-1996B77DFEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9427851-B0DC-4CE6-8BFA-60619D1DC87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D07DD94-0925-4FEE-9565-5F36B9AAF448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3A67F5-05C6-4097-A88E-0A0F165C12EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C0554-1A50-4341-AB07-80AA854673D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8C5149-40F8-40C9-9FC3-7E7C68801320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FF39C5-CC37-4573-BB18-36254D38509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B377A8B9-90F2-41B7-9098-5ABEB621E2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896A71EC-9508-406F-8DE8-58953D9A30FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B15FCC-1BB3-41CA-9550-6D55DD381F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A85892-C3AB-4920-A949-A71BD0332D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6330829-9A7B-479D-B38B-BC64148EC172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F1E38-3482-4EAC-8654-EBC004B9344B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297FAD97-60C0-473D-A18D-03657B81B7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD4A33B-B13E-40C6-B47F-A406ACC6664F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E488E6E-87F0-4292-B97B-31087FDB4655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D199CB1-A2A3-4678-9503-C5B61281755C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19952DC6-1186-4754-BB1E-BA1D78A19C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E8AF76-0A1D-4BAE-BF10-D63080352E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B674647-4438-4450-9DCA-25184D4E2682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB7128-CF11-4903-97D7-418403A03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EFB20A-78E2-4BA1-B87C-BB74E8982D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A273401-9394-4BC3-879C-DE3EFC09B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DABF911-FCDF-4095-A95D-4BB73628FCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77886493-C30E-439E-BBB4-3D34A8938378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DC4B6-8B3D-4A0D-9934-743FD7494DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E272881F-0804-4190-A21D-3D0B9A774F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F084DA16-24CB-41D1-92B7-C6E0499AAD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF3601D-DF44-4A10-A424-8E97C65A36A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1835410-77EB-46F2-ACF0-379759D4B0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88DCCDE-6A81-473F-B4FE-95A84F8DF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7C6FB8-8393-4916-BB2B-3097B1995C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D57BED-1D99-4077-941C-E60BEA65324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B9E2C6-0E23-4AC9-906F-28BBC15868DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9F8FF-94EA-4D1D-93AE-623075014426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912492E-565A-4559-ABB8-D2898F06CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD6421A-D8C4-4A3E-9497-4AC130CFE597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F44EC8-13BF-4032-9EBA-0D50C6A353BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EEE74-3DAA-4BB2-9192-66672229DC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF74B28-CD95-4BC6-97D4-D529D30E1509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98E703A-717D-4997-AFBC-CAE4B644025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4BC2FA-19F0-41FC-9786-8006B1D2E7DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B27825D-099A-4733-8D3F-8EF2B050E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1579A2D-955F-4CC6-9F94-9D40C669D903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85ABE5E-7900-4A9C-A945-48B293EF46B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A9400-571E-4955-AB84-C49A4255A5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A68D177-B028-4025-BD7B-82ACDB2D1E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485ACF9E-1305-4D71-A766-5BE1D748AAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C1C831-556D-4634-AA24-6D64943ED275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D717498-4DF9-4D15-A25B-D777FF460E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB42063-9DB5-42DB-825A-53C6DBB51A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7918C59-1678-4F24-A7C2-68824D1B59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5B9BAF-59BA-4282-B387-489264D44429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56365432-1E57-4D35-B764-DDDA878B96ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB57AAA9-4715-468F-A734-A12209A6069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17413",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051102-timers.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/562945",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051102-timers.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/562945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC address of an authenticated end host."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1131:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA740581-ED86-4822-9516-BCCA4C267561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8B5553-7295-4786-9F81-B4527EAD4F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1240:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AAA8DE4-4E1D-4286-846D-0381BF68632F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051102-lwapp.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051102-lwapp.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in GO-Global for Windows 3.1.0.3270 and earlier allows remote attackers to execute arbitrary code via a data block that is longer than the specified data block size."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphon:go-global:3.1.0.3270:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F05F8E6-7C90-4EE7-BCB0-0351E86351B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/ggwbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113095918810489&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17424",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20464",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15285",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2290",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/ggwbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113095918810489&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in NeroNET 1.2.0.2 and earlier allows remote attackers to read arbitrary files with certain file extensions (such as ZIP, AVI, JPG, TXT, and HTML) via \"..\" and hex-encoded (1) slash \"/\" (\"%2f\") or (2) backslash \"\\\" (\"%5c\") sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nero:neronet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0.2",
            "matchCriteriaId" : "05901785-5CAF-4D3A-A4EA-D46196EB17DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/neronet-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096009930152&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/neronet-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096009930152&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Glider Collect'n kill 1.0.0.0 allows remote attackers to execute arbitrary code via a gl_playerEnter command with a long player name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glider:collectn_kill:1.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC89BC6A-F9A1-49EE-B328-1F19807C050E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/gliderbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113095975721571&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17422",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/gliderbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113095975721571&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog functions, and possibly other unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scorched_3d:scorched_3d:39.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B0B253-41E0-4787-8C01-7CF5B94917A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/scorchbugs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113095941031946&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/scorchbugs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113095941031946&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog functions, (4) a long command that is not properly handled in ComsMessageHandler.cpp when generating an error message, (5) a long UniqueID value in Logger.cpp, and possibly other unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scorched_3d:scorched_3d:39.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B0B253-41E0-4787-8C01-7CF5B94917A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/scorchbugs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113095941031946&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/scorchbugs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113095941031946&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-03T22:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Scorched 3D 39.1 (bf) and earlier allows remote attackers to cause a denial of service (long loop and server hang) via a negative numplayers value that bypasses a signed check in ServerConnectHandler.cpp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scorched_3d:scorched_3d:39.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B0B253-41E0-4787-8C01-7CF5B94917A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/scorchbugs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113095941031946&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/scorchbugs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113095941031946&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2974",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libungif:libungif:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "1070FA43-866E-406F-8FA5-DB2C88B4667E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libungif:libungif:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A83A5DD-40E7-431E-9ADC-59B4985F5F42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=109997",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-007.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17436",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17438",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17442",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17482",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17488",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17497",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17508",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34872",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35164",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015149",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=364493",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-890",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:207",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20470",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-828.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0444.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9636",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9637",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428059/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428059/30/6300/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15304",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-214-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2295",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=171413",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10994",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00771.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=109997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=364493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-828.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0444.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428059/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428059/30/6300/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-214-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=171413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00771.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3350",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libungif:libungif:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "1070FA43-866E-406F-8FA5-DB2C88B4667E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libungif:libungif:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A83A5DD-40E7-431E-9ADC-59B4985F5F42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=109997",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-007.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17436",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17438",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17442",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17482",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17488",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17497",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17508",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34872",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35164",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015149",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=364493",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-890",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:207",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-828.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0444.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428059/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428059/30/6300/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15299",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-214-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2295",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=171413",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9314",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00771.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=109997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=364493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-828.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0444.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428059/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428059/30/6300/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-214-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=171413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00771.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Asus Video Security 3.5.0.0 and earlier, when using authorization, allows remote attackers to execute arbitrary code via a long username/password string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asus:video_security_online:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.0.0",
            "matchCriteriaId" : "397FEC74-5E96-4A12-A200-BC2ED63147BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/asusvsbugs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096055302614&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17419",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15279",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/asusvsbugs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096055302614&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the web server in Asus Video Security 3.5.0.0 and earlier allows remote attackers to read arbitrary files via \"../\" or \"..\\\" sequences in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asus:video_security_online:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.0.0",
            "matchCriteriaId" : "397FEC74-5E96-4A12-A200-BC2ED63147BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/asusvsbugs-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096055302614&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17419",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/asusvsbugs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096055302614&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:johannes_f._kuhlmann:flatfrag:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF7F25D-0B89-434B-AE63-E9CD67F6CB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/flatfragz-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096078606274&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415636/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/flatfragz-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096078606274&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415636/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FlatFrag 0.3 and earlier allows remote attackers to cause a denial of service (crash) by sending an NT_CONN_OK command from a client that is not connected, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:johannes_f._kuhlmann:flatfrag:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF7F25D-0B89-434B-AE63-E9CD67F6CB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/flatfragz-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096078606274&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415636/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/flatfragz-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096078606274&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415636/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Battle Carry .005 and earlier allows remote attackers to cause a denial of service (inaccessible port) via a large packet, which triggers a socket error and terminates the socket that is listening on the server's UDP port."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:afsl_games:battle_carry:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : ".005",
            "matchCriteriaId" : "651E4C17-B450-4D68-89AE-216AED85068E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/bcarrydos-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096122630102&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/bcarrydos-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113096122630102&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Ar-blog 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog comment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ar-blog:ar-blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "315029CB-7460-4E01-9D66-48D966DC6250"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038133.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015100",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038133.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ar-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ar-blog:ar-blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "315029CB-7460-4E01-9D66-48D966DC6250"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038133.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015100",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038133.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHP Handicapper allows remote attackers to inject arbitrary web script or HTML via the msg parameter to msg.php.  NOTE: some sources identify a second vector in the login parameter to process_signup.php, but the original source says that it is for CRLF injection (CVE-2005-4712).  Also note: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.  If so, followup investigation strongly suggests that the original report is correct."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_handicapper:php_handicapper:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974BBD4D-4995-471D-A1D8-63BE4450D739"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17412",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2292",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=8360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=8360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to execute arbitrary SQL commands via the serviceid parameter.  NOTE: on 20060210, the vendor disputed this issue, saying \"this is 100% false reporting, this is a slander campaign from a customer who had a vulnerability in his SERVER not the software.\"  However, followup investigation strongly suggests that the original report is correct"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phphandicapper:php_handicapper:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8767EAF6-EB3F-4D94-88C2-C831CD95C6C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17412",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2292",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=8360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=8360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled, records a full URL including the queryString in the trace logs when an application encodes a URL, which could allow attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.02.15",
            "matchCriteriaId" : "71878DAD-3853-4021-8729-D26B6AB5741E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.1.8",
            "matchCriteriaId" : "7CEB1E39-C4D9-4A5E-BD0A-19A84A7B4525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.2.5",
            "matchCriteriaId" : "141E2224-879A-441C-9946-8D0BEE118960"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015134",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27004980",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24010781",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15303",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2291",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27004980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24010781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-04T00:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frisk F-Prot Antivirus allows remote attackers to bypass protection via a ZIP file with a version header greater than 15, which prevents F-Prot from decompressing and analyzing the file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:bsd:*:*:*:*:*",
            "matchCriteriaId" : "7CB63A0B-8BDD-493D-B72E-A259B338A67D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:exchange:*:*:*:*:*",
            "matchCriteriaId" : "8890BCB6-16C0-4B87-8EBF-085C05B90C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6FE056A8-DE51-497C-8C08-2E7F484714BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "742F2EFE-9552-4847-B240-F1C28118D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:win:*:*:*:*:*",
            "matchCriteriaId" : "7D226CC7-3D1A-4131-8F89-91C8FA414D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:3.12b:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5364E8CA-BE8E-4F54-BCBC-F0F1939EC5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:3.12d:*:bsd:*:*:*:*:*",
            "matchCriteriaId" : "4B0D4518-FF5C-49E7-B56F-9095621D0311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:3.12d:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "97D86CC7-3607-433C-A3ED-9BC4E0DB5A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:3.16c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A72DD59-9C97-4832-BAD2-794CD495E361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:4.4.2:*:bsd:*:*:*:*:*",
            "matchCriteriaId" : "3652900A-0BE8-4AEF-B0D1-32C2788BA107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frisk_software:f-prot_antivirus:4.4.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "F1B98500-FE5C-4664-961B-3B792FFD0577"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0073.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://thierry.sniff-em.com/research/fprot.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415637/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502370/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zoller.lu/research/fprot.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://thierry.sniff-em.com/research/fprot.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415637/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502370/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zoller.lu/research/fprot.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Macromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8A8FD0-F9C9-4125-B682-A7F2B73D9BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2A9976-1883-4D49-A512-C66FF12FDDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20DFF23-6215-4860-B091-ECC1C1C08DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1B943A-38AD-4472-B143-B66567EBC9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.65.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F64-5EDD-450D-A244-124366AD5800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.79.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44A2955-F536-4EA5-8D1E-94D35EE10B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:7.0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA559D4-7887-4518-BAE4-17A60297014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:7.0_r19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E436A0-D128-4225-8238-79E80353541D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17437/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17626/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/146284",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-835.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415789/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15332",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-129A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17437/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17626/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/146284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415789/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-129A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file that causes a sign extension of the length element in a Pascal style string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "7.0.2",
            "matchCriteriaId" : "F683586B-0172-4F04-870A-DD1A4AA38DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*",
            "matchCriteriaId" : "B821AA3F-98E4-4AF2-8E7F-52D5FF8F5000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "D8239EEC-A7FA-45FC-8AE8-793A1F46B34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "3195F233-6E2E-47CD-A882-4F01BECC40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*",
            "matchCriteriaId" : "CCD74F99-E8DD-4DF6-91AF-5AA443DB1921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17428",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015152",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20475",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415712/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2293",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415712/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with \"Improper movie attributes.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "7.0.2",
            "matchCriteriaId" : "F683586B-0172-4F04-870A-DD1A4AA38DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*",
            "matchCriteriaId" : "B821AA3F-98E4-4AF2-8E7F-52D5FF8F5000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "D8239EEC-A7FA-45FC-8AE8-793A1F46B34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "3195F233-6E2E-47CD-A882-4F01BECC40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*",
            "matchCriteriaId" : "CCD74F99-E8DD-4DF6-91AF-5AA443DB1921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17428",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015152",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415709/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2293",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415709/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service (crash) via a crafted file with a missing movie attribute, which leads to a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "7.0.2",
            "matchCriteriaId" : "F683586B-0172-4F04-870A-DD1A4AA38DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*",
            "matchCriteriaId" : "B821AA3F-98E4-4AF2-8E7F-52D5FF8F5000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "D8239EEC-A7FA-45FC-8AE8-793A1F46B34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "3195F233-6E2E-47CD-A882-4F01BECC40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*",
            "matchCriteriaId" : "CCD74F99-E8DD-4DF6-91AF-5AA443DB1921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0102.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17428",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015152",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415717/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0102.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415717/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple QuickTime before 7.0.3 allows user-assisted attackers to overwrite memory and execute arbitrary code via a crafted PICT file that triggers an overflow during expansion."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "7.0.2",
            "matchCriteriaId" : "F683586B-0172-4F04-870A-DD1A4AA38DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*",
            "matchCriteriaId" : "B821AA3F-98E4-4AF2-8E7F-52D5FF8F5000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "D8239EEC-A7FA-45FC-8AE8-793A1F46B34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "3195F233-6E2E-47CD-A882-4F01BECC40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*",
            "matchCriteriaId" : "CCD74F99-E8DD-4DF6-91AF-5AA443DB1921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pb.specialised.info/all/adv/quicktime-pict-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015152",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/855118",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415714/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pb.specialised.info/all/adv/quicktime-pict-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/855118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415714/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause \"memory corruption\" and execute arbitrary code via a crafted FSG 1.33 file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330A535-A376-4BFF-BB1B-31E83370FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E2884A-615F-4063-8FB7-EC157C3EC07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BC41B7-272F-44BB-BD48-6C9231402526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0041.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17434",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368319",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-05-002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-05-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9A0FA4-A4AE-4C90-98DA-8AF5ABB03CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E9BC10-5F5B-499A-893C-1EEF6F1180B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A9B47A-8FC3-4BD2-A55F-9150307619B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7068873F-E45D-4471-B55E-BF7B0E3AFEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695F0967-1529-42DB-8978-8B9192F7F615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073BBAA9-7C7B-4D07-8943-7459DD2BAAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB72ED94-7832-43CF-81CF-27F88CAC6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802BFF6B-5D9F-49AE-B96A-86A85E0F1034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7B2943-BC22-4735-8AA5-AADBEA685FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257524-7FC5-40CA-9BDA-82B8565C5BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AACCC-C20A-4BC1-BF62-D40FF71B7360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F52C121-B8B8-43A8-AFAB-E85474021919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659B4C39-0F0F-40C5-9B7E-0D00330611F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508C140C-2F87-4270-85B0-00EA6678A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3033A4A2-47E9-434F-BA0A-0F2476A67899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1EDFB4-B0C8-4832-BCA1-C35D28877581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330A535-A376-4BFF-BB1B-31E83370FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E2884A-615F-4063-8FB7-EC157C3EC07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BC41B7-272F-44BB-BD48-6C9231402526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17434",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368319",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=333&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=333&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted CAB file that causes cabd_find to be called with a zero length."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.87",
            "matchCriteriaId" : "CC49FEEA-FB10-457F-9277-19A75F30D3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EC0AEB-91CF-4A79-AF40-A475E896FB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5935EDE0-9203-4150-9B7A-AB10B377F9F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C2680C-C187-487A-B6C4-F509E0C52436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A796E5E1-6481-49EF-8D97-9EC2A01C712B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FF3AE5-5BD9-43B4-9FB0-6BED8450C9ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "812B11BD-344F-40DC-9996-0CBB4BB143B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22958219-46D6-4868-B324-BFC2F2C893F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4543DDEE-C1D1-428F-91C7-98B8985A5931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FED760C-7106-49CE-B4FE-CA53A1092C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821EF522-A058-4509-A4CB-E9B800E83EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*",
            "matchCriteriaId" : "CABA4177-6B24-4364-BC34-D5ED171E60FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F488ACB2-A013-4BF3-B5AC-897E40BA87F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5799FA-DD99-4A35-BC56-B2FBEB747226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32EA99F-088E-499E-9DCE-EFA9A64D1673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B04C5B-316D-4C6A-96CF-F145F7C9E636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66D5CDE-ED5D-41BA-A4B1-28E8559EC056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20769174-C51F-47D5-A34F-EB772F542A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721B8B46-DFD9-4937-96A3-8D731304415B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF18A59-FB30-45C6-B28E-4499DCD78F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B28E0BE-1E2D-45D2-B483-2D81326BF482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7029650-6DF1-4616-BE9F-DE40E9BBE3A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47FD5DF-F22E-4B78-9B92-A9C41950F836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F9571F-9192-414F-B680-10A22C71CFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7CAC876-9AAC-407C-A34E-98AA6801D25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470FC8FE-785A-4934-8989-D17C1796870E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A6C0FE-2EED-447D-9F62-12CFF1E0918A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0928E05F-92E7-4451-AC11-4E6A014E1154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E7A70A-3584-4259-80CA-03AE290ABAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AF81C1-5B68-4D84-AFB9-C0419B7F98D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27D70A0-EC82-4DC7-A66D-60D263B76E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "28C9C5AD-97A9-42C8-917C-2787785F5BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AB3389-1C30-47BB-9DAE-0F744E7F8877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4D3D3E-067B-4A37-A851-99D2A3E20FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA837A0-C8CB-486B-845E-A370E3137697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235A144A-4AB1-4756-AFB1-58AFFE02649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "767BBE7F-6CC4-42D4-9730-6E617D36AAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA7CD6A-133F-48E4-87BC-77CF21A25940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65A7930-A913-4C3D-95A3-E629D6A468C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "05D1FAF4-B4F8-446F-88C3-01289C01DB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "342A854F-0942-4A3E-AF08-BD41D8F453DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DA6E00-8126-4B62-9E7F-1E3BFC827BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0958CD-187F-4DD0-A31B-5002861F6326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "9C24942D-7AD6-4391-8F05-2827AB6A751E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABA6024-1769-44D9-BF20-215602980A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA719FE4-04E0-4664-8EEC-70CD613408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.81:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7364D6-36F6-4615-95F0-E0B56722DAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C859F864-B68F-4805-B804-E50F2C3FFE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CAFEA5-C062-43EA-A302-38887DA6768C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525DC218-308C-4A0E-96A7-DC74B8973B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A4969C16-F67D-4C30-A537-FE64F4CFC3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D72B20-1F61-4499-9ADE-88AF98C3C19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C71B82-8F84-4855-A138-7E7436788D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "039341D8-8E2B-4901-BFA6-9CCC46A18C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C048A75E-6587-485C-9F2B-E12BED34FF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "97DAD83E-F14F-4B87-B5D8-7BCAD8F446BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC4D448-DDCD-4C0B-AA84-2D054FCF718C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B003639-3228-4AC1-AB46-73481BB5DDA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17184",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17434",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17451",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17501",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368319",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=334&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2294",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=334&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "attachment_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified file_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDBB3C1-CFEE-47DC-8B58-CF090A8A4159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202D6E9A-BB68-4C89-866A-F6E8923D0BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DEA7DE-74BE-4AB4-8885-78E19DDDC065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33548E68-283F-4FA9-B00A-A9B145A97443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517B2EEE-9680-4EE6-B0AC-BFAF275D31C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6F44C4-A739-455A-BCAB-31D451617E8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566189CD-143C-4442-9BB9-CCBAE58E1E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113109433413298&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015153",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113109433413298&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS field, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pwdutils:pwdutils:*:*:suse_linux:*:*:*:*:*",
            "versionEndIncluding" : "3.0.4",
            "matchCriteriaId" : "89E3AC15-6CE0-46F5-8CEC-B0D58539076F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415725/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415725/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in swcons in IBM AIX 5.2, when debug malloc is enabled, allows remote attackers to cause a core dump and possibly execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD01F19-4B30-4147-AC48-7F5C64EE80CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17439",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY78467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY78467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as <b>, which are processed by Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:10.2.0_r82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA952D50-2FB6-4517-98D4-8D345056EF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:10.6.0_r137:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BFD7C-EF52-4B5D-981F-947FB328EE53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0124.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16609",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-56/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415722/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0124.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-56/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415722/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-05T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in proxy.asp in Sambar Server 6.3 BETA 2 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the (1) Remote Proxy Server or (2) Proxy Filter IPs field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sambar:sambar_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "DAA9B0B8-AAE7-4DC0-9F7D-9BFF57270B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sambar:sambar_server:6.3:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB556EC-7C3D-4E4A-B4CF-D238A2CE80D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0038.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17329",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20434",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2272",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3124",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acme_labs:thttpd:2.21b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC6999F-54B3-45D0-A089-018BB469A03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acme_labs:thttpd:2.23b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0058B7F6-FD3B-4CAA-BCA8-2218390DA18C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17454",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17472",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-883",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15320",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2308",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, and gain privileges via \"../\" sequences in the template parameter to (1) show_archives.php and (2) show_news.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "7371D19D-B133-4866-BC63-72931A646021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/cute141.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17435",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/cute141.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in showGallery.php in Gallery (Galerie) 2.4 allows remote attackers to execute arbitrary SQL commands via the galid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:galerie:galerie:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64D7C8C-4016-4C77-A175-75A633317E02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415806/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15313",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415806/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) banner.php or the id parameter to (2) print.php, (3) comment.php, and (4) news.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jportal:jportal_web_portal:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2207ACC-04F8-4960-B5F7-B3779C055B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jportal:jportal_web_portal:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2880CF-460E-448A-89D9-E53E84B1BE93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://foro.elhacker.net/index.php?topic=93436.0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/Kdocument105.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15324",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://foro.elhacker.net/index.php?topic=93436.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/Kdocument105.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E98B82A-22E5-4E6C-90AE-56F5780EA147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34672E90-C220-436B-9143-480941227933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92883AFA-A02F-41A5-9977-ABEAC8AD2970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989A78F8-EE92-465F-8A8D-ECF0B58AFE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFB09F3-32D1-479C-8C39-D7329D9A6623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56581E2-9ECD-426A-96D8-A9D958900AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717F6995-5AF0-484C-90C0-A82F25FD2E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0C01D5-773F-469C-9E69-170C2844AAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5CF79C-759B-4FF9-90EE-847264059E93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/30908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015147",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0161.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415782/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500396/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500412/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1979/references",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415782/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500396/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500412/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1979/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Spymac Web OS 4.0 allow remote attackers to inject arbitrary web script or HTML via (a) the blogs module, including the (1) curr parameter in index.php, (2) inspire, (3) system, or (4) title parameter in blog_newentry.php, (5) entry parameter in blog_newentry_comment.php, (6) entry parameter in blog_edit_entry.php, or (7) caldate parameter in blog.php; and (b) the notes module, including the (1) forwardid parameter in a noteform action; (2) del_folder parameter in a delete_folder action; (3) isread, (4) dateorder, (5) subjectorder, (6) curr, (7) fromorder, or (8) action parameters; (9) ppp or (10) totalreplies parameter in an Inbox action; (11) totalnotes parameter; or (12) touserid parameter in a noteform action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:spymac:spymac_web_os:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED909CCB-354F-4A9C-9B41-BAA476CCC617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/11/spymac-web-os-v4-blogs-and-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2312",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/11/spymac-web-os-v4-blogs-and-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via the t parameter in a newreply action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vubb:vubb:alpha_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5745239-6254-4FF5-91AB-8B3D37B51E8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/152/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113087965608496&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15260/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://irannetjob.com/content/view/152/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113087965608496&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15260/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in VUBB alpha rc1 allows remote attackers to obtain the installation path of the application via a viewforum action with the f parameter set to a single quote (')."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vubb:vubb:alpha_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5745239-6254-4FF5-91AB-8B3D37B51E8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/152/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113087965608496&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/152/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113087965608496&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID parameter to (1) newtopic.php, (2) quote.php, (3) index.php, and (4) reply.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmunk_scripts:chipmunk_forum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67052DBB-4AAA-4627-806D-DA954678493E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/148/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112982490104274&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17239/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/96",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15149/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/148/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112982490104274&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17239/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15149/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject arbitrary web script or HTML via the ID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmunk_scripts:chipmunk_topsites:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D007CF-742C-4FA7-95EC-816F2B278886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/148/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112982490104274&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17262/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/96",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15149/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/148/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112982490104274&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17262/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15149/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to inject arbitrary web script or HTML via the entryID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmunk_scripts:chipmunk_directory:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FE7EAD-E9C7-43B1-88D9-ADB006C0555B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/148/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112982490104274&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17283/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/96",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15149/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/148/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112982490104274&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17283/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15149/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chipmunk Scripts Guestbook allows remote attackers to obtain the installation path of the script via a URL that causes an error message to be displayed, such as a URL that contains a single quote (') in the start parameter of index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmunk_scripts:chipmunk_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB809CC-9FED-4ADE-B1DA-F0F5FC3EA596"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/148/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112982490104274&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/96",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/148/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112982490104274&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the old_searches parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFD4225-32F9-4D62-87C5-9632A1C03326"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112939699128430&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17227/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/87",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-91.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.8_to_1.2.9.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.net/bid/15114/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112939699128430&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17227/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-91.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.8_to_1.2.9.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.net/bid/15114/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysource:mysource:2.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1B0B8-7752-42CA-BD34-4269CDB14CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysource:mysource:2.14.0rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8BD04E-1487-40F1-A5D0-F99AFB1CD500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112966933202769&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16946/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/92",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15133/discuss",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112966933202769&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16946/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15133/discuss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1) the target_url parameter in upgrade_in_progress_backend.php, (2) the stylesheet parameter in edit_table_cell_type_wysiwyg.php, and the bgcolor parameter in (3) insert_table.php, (4) edit_table_cell_props.php, (5) header.php, (6) edit_table_row_props.php, and (7) edit_table_props.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysource:mysource:2.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1B0B8-7752-42CA-BD34-4269CDB14CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysource:mysource:2.14.0rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8BD04E-1487-40F1-A5D0-F99AFB1CD500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112966933202769&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16946/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/92",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15132",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112966933202769&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16946/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers to execute arbitrary SQL commands, bypass authentication, and inject HTML or script via the (1) a_name parameter or (2) user field of the login page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BD5CAD-0EB8-48F2-AF80-510584A83446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E294FE-F0A2-45FC-BB67-D988DD89D2AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e107.org/news.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112967223222966&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17237/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015069",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15125",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e107.org/news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112967223222966&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17237/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the grDisp parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adventnet:manageengine_netflow_analyzer:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC40F64E-B60F-4B1E-BA0C-17B7EB2B1B39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112967149509401&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17253/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015078",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15127",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112967149509401&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17253/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3523",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-07T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in friendsd2 in GpsDrive allows remote attackers to execute arbitrary code via the dir (direction) field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpsdrive:gpsdrive:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.09",
            "matchCriteriaId" : "15F95C63-7C96-4E08-8E57-5AD44F513699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpsdrive:gpsdrive:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10pre2",
            "matchCriteriaId" : "3613DA4B-8C7A-4E80-97F3-4C2EDD5E2A49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Nov/0130.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17473",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17477",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-891",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-1104a%5D.txt",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/20531",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415788/30/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15319",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2307",
        "source" : "security@debian.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Nov/0130.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-1104a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415788/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-07T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-ftpd-ssl:linux-ftpd-ssl:0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A1CDE0-A701-4331-908F-186BF6D13F13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Nov/0140.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Nov/0140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-09T01:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in do_coredump in signal.c in Linux kernel 2.6 allows local users to cause a denial of service by triggering a core dump in one thread while another thread has a pending SIGSTOP."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en do_coredump en signal.c en el kernel 2.6 de Linux permite a usuarios locales causar una denegación de servicio disparando un volcado del núcleo (core dump) en un subproceso mientras otro tiene un SIGSTOP pendiente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git%3Ba=commitdiff%3Bh=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git%3Ba=commitdiff%3Bh=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2659",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la descompresión LZX de CHM Lib (chmlib) 0.35, usado en productos como KchmViewer, con impacto desconocido mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AA0405-EC8B-41A4-977D-32C221EE43AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-index.netbsd.org/pkgsrc-changes/2005/09/12/0010.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17325",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17494",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17775",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-886",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15338",
        "source" : "security@debian.org"
      }, {
        "url" : "http://mail-index.netbsd.org/pkgsrc-changes/2005/09/12/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3344",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access."
      }, {
        "lang" : "es",
        "value" : "La instalación por defecto de Horde 3.0.4 contiene una cuenta administrativa con una contraseña en blanco, lo que permite a atacantes remotos ganar acceso. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E3B91F-F391-4126-832C-C5582F5D6FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2005/dsa-884",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networkscanning.com/Horde-Default-Admin-Password-Vulnerability-VSS_20171.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/24117",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15337/",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24576",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networkscanning.com/Horde-Default-Admin-Password-Vulnerability-VSS_20171.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15337/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2023-11-07T01:57:52.460",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3508.  Reason: This candidate is a reservation duplicate of CVE-2005-3508.  Notes: All CVE users should reference CVE-2005-3508 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the forum_ids parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en Phorum 5.0.0alpha a 5.0.20, cuando \"register_globals\" está habilitado, permite a atacantes ejecutar órdenes SQL de su elección mediante el parámetro forum_id si register_globals está activado en PHP.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26E2C5A7-8B52-4BDF-80F1-5D45AEBE6E25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8DF602-0A22-45A9-A286-C237180701C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB109C36-BF0F-41E3-A1F4-0DB264BD4A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A31EA2D-2B01-4928-9B3E-9D666FD2758B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87DE16C-7C68-4DA8-9BD9-C61D74E61D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.4a_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5001527E-FE93-4BE7-BF79-7717D64CAF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15ED599-6B84-4E03-8BA4-36E1D55F1F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D491A2B9-949A-4A56-A41F-23A222C03BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CFDB0B-6FBD-49F3-8238-81E92661297E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.7a_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC73A23F-2399-41B0-B6BD-289DF63F2C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.8_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD59DD99-1FC7-498B-9EA1-1AA8FE132EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1655572D-7D56-4D9D-9E0F-A67DF23FC934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387E0B83-B240-4922-8C57-CE0CDB000888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5B09FF-92DF-4F8D-9A7B-E5086E2B954D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02321D7-2F3E-40F9-9A76-CFF339C93199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B908D49-F64A-488F-95F3-163AB9DAB02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.13a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A26F8E5-0FFE-473D-BDA1-2D5340B5A4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF0655C-7C83-4363-A444-993B35D7A7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D0F7C4-902D-4186-8EFF-3876D6D6633E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F87C476-6A55-4B19-97B0-24204E96A63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACC6DD4-384B-44DE-9BC7-6F1DD374E6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D0AC3E-97F7-4A13-8E65-7E424D055E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B508F8-CFCC-4841-BF70-1ABB28EB1ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C365D62D-ACB1-44D3-935D-F79A79642684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B45305-FF8B-42F8-A726-F8604BADC323"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113122911424216&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phorum.org/story.php?57",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17456",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-43.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113122911424216&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://phorum.org/story.php?57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-43.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de scripts en sitios cruzados (XSS) en u2u.php de XBM 1.9.3 permite a atacantes remotos inyectar sript web de su elección mediante el parámetro username.\r\n\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D520E1A-920A-4BC9-931F-29A38B263D71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17458",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415800/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415800/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "XMB versions 1.9.8 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2021-04-23T12:34:37.593"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en index.php del módulo de informes de ibProArcade 2.5.2 y anteriores permite a atacantes remotos ejecutar  órdenes SQL de su elección mediante el parámetro usuario.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibproarcade:ibproarcade:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.2",
            "matchCriteriaId" : "2CD3CC35-436E-4B38-8328-301E0B765562"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/20514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17457",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibproarcade.com/index.php?showtopic=7575&pid=47370&st=0&#entry47370",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.ibproarcade.com/index.php?showtopic=7576&pid=47373&st=0&#entry47373",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15333",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibproarcade.com/index.php?showtopic=7575&pid=47370&st=0&#entry47370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.ibproarcade.com/index.php?showtopic=7576&pid=47373&st=0&#entry47373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege."
      }, {
        "lang" : "es",
        "value" : "Los scritps suid.cgi en F-Secure (1) Internet Gatekeeper para Linux anteriores a 2.15.484 y (2) Anti-Virus Linux Gateway anteriores a 2.16 son instalados con SUID y con permiso de ejecución para todo el mundo, lo que permite a usuarios locales ganar privilegios.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_gateways:*:*:*:*:*",
            "matchCriteriaId" : "F83DDDED-51E8-43DE-BBA8-4AD36F920BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:*:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A4C973E1-597B-4D5C-B8AA-DCCEE4FC3480"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17467",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2005-3.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2005-3.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Invision Power Board 2.1 permite a atacantes remotos inyectar web scritp o HTML de su elección mediante los parámetros (1) adsess, (2) name y (3) description en admin.php, y (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, y otros múltiples campos de entrada.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05FA7E1F-D9D2-419F-A9DE-7BE4253F897E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://benji.redkod.org/audits/ipb.2.1.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17443",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415801/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://benji.redkod.org/audits/ipb.2.1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415801/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Task Manager in Invision Power Board (IP.Board) 2.0.1 allows limited remote attackers to include files via a ..  (dot dot) in the \"Task PHP File To Run\" field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesammiento de directorios en Administrador de Tareas de  Invision Power Board 2.0.1 (IP.Board) permite a atacantes remotos limitados incluir ficheros mediante un .. (punto punto) en el campo Task PHP File To Run."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77C15A2-9A9D-4C3F-8A62-18C54941B79C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17443",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/35429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415798/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/35429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415798/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in \"Task PHP File To Run\" field and selecting \"Run Task Now\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección directa de código en Administrador de Tareas de Invision Power Board 2.0.1 permite a atacantes remotos limitados ejecutar código de su elección referenciando el fichero en el campo Task PHP File To Run y seleccionando Run Task Now."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77C15A2-9A9D-4C3F-8A62-18C54941B79C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17443",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415798/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415798/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the id_user parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.1",
            "matchCriteriaId" : "8A649927-0229-442E-BE82-838BE01C1290"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17471",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415975/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415975/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.1",
            "matchCriteriaId" : "8A649927-0229-442E-BE82-838BE01C1290"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17471",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415975/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415975/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple vectors in (1) login/profile.php, (2) login/userinfo.php, (3) admin/admin.php, (4) imcenter.php, and the (5) referer statistics, the (6) HTML title element and (7) logo alt attributes in forum postings, and the (8) Homepage field in the Guestbook."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "6770D817-F1BA-4286-A9CB-3F855CE6E5EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.80.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2344",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.80.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in include.php in PHPKIT 1.6.1 R2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in conjunction with the login/userinfo.php path and (2) the session parameter (aka the PHPKITSID variable)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "6770D817-F1BA-4286-A9CB-3F855CE6E5EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.80.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2344",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.80.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C962F520-4E73-459D-8C5C-9E85426D9B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:1.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F42F08A7-AF6B-4642-8172-6B4C564FBCB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:1.6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C5DDE2-0978-41D2-BCCF-A70BC6CE841A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:1.6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD305C66-3B8B-468E-945A-DFEE09E6FB8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17479",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.80.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2344",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.80.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the (1) editattributes or (2) admin page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.1",
            "matchCriteriaId" : "11661E35-EB3F-4506-BD01-862966F11BF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/20567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17476",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416005/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416005/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listname parameter in (a) admin/editlist.php, (2) title parameter in (b) admin/spageedit.php, (3) title field in (c) admin/template.php, (4) filter, (5) delete, and (6) start parameters in (d) admin/eventlog.php, (7) id parameter in (e) admin/configure.php, (8) find parameter in (f) admin/users.php, (9) start parameter in (g) admin/admin.php, and (10) action parameter in (h) admin/fckphplist.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.1",
            "matchCriteriaId" : "11661E35-EB3F-4506-BD01-862966F11BF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/20570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17476",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416005/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416005/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) in the selected%5B%5D parameter in an HTTP POST request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.1",
            "matchCriteriaId" : "11661E35-EB3F-4506-BD01-862966F11BF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/20569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17476",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416005/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416005/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file inclusion vulnerability in index.php in OSTE 1.0 allows remote attackers to execute arbitrary code via the (1) page and (2) site parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oste:oste:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C284137-4116-42C9-A97B-8203F75E66B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/20578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415963/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15340",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415963/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. (dot dot) in the folder parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864D95C2-9B1B-4EB4-82CD-3BA5E063FEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FB4B52-69CA-45DA-AE22-E6667E8B98FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FF789-3B09-4974-B62F-CCD7F5AA2BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4FA92F7-46BB-444C-ADAB-4B550CD0B69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A003A2C3-1C4F-4A76-BABE-C55A761E3321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A063E6CD-16F8-42E0-A9A2-4D33C10F7EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBC7FE3-D810-487C-8FD3-27B8729DCA41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08E661-23D9-437F-844F-6BE8183CF3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D030C12-C2C6-4714-B776-2EF7ECF1A591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5A8210-2E7C-465C-9751-CB362AADC224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DBCFB5-65BF-46FE-AC19-2557B6C0BD01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C185C9-9592-43A1-9811-80E16032F396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD696CD-3B63-4C8B-966E-EE00F44CA44C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE096C63-221B-4746-B8B6-9314C4CD6FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CE1C95-D4C7-4662-AD0D-5219335BAF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9149505F-D47B-40C3-93EB-A3C647A1AC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FC8F82-D648-4127-9914-27414358AC33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCCA63B-AB59-4827-BD6F-4AF0155151F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FC9C13-ADDD-4F09-B977-EE0DEF598B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C20296F-F70A-4D3C-A062-B6054617841C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A92B4D-16A7-4D99-8F3A-2E5D3B12C86B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16783925-8EC5-431F-90B5-93B16DCC10B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C59AF9E-FEC7-44AB-B392-49DB11BAEB0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325C4452-6541-46F6-A86C-6D6987583FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5424B5B4-99B3-4695-8E0D-7E8DC8B88C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BDF9F0-1AFD-47E6-9054-A9FC6D422DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8D2125-019A-4B73-9E1A-98E745148803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C60C04-EF59-4F5C-96E5-A6E693EA9A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3636BB44-DF4D-40AB-8EBB-1EC5D911E4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B3C254-29D9-4911-89A9-AC0CD9EB13F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49F2D76-DC82-4289-8891-4982795D896A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203237E0-BB44-42D0-B65B-CBDAAA68A1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4042CC21-F3CB-4C77-9E60-AF8AA9A191C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/20577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17459",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.assurance.com.au/advisories/200511-asterisk.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415990/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.assurance.com.au/advisories/200511-asterisk.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415990/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the \"Advanced Program Control and OS Firewall filters\" setting via URLs in \"HTML Modal Dialogs\" (window.location.href) contained within JavaScript tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A762470F-AD26-478D-8B83-9723061D2AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm:6.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "280E308A-F446-461F-9C20-92F8E83649E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm_anti-spyware:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659C03E1-3F79-415C-8EF2-6CAB6158157D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm_anti-spyware:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC6FED8-87AC-47FF-B43B-7C096182E8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm_antivirus:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7106B34-09D7-4B92-BDF0-82DE97984333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm_security_suite:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE7D92E-950B-49FB-B6CD-8E870BBAD56A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17450",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15347",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2023-11-07T01:57:52.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2954.  Reason: This candidate is a reservation duplicate of CVE-2005-2954.  Notes: All CVE users should reference CVE-2005-2954 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2023-11-07T01:57:52.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2955.  Reason: This candidate is a reservation duplicate of CVE-2005-2955.  Notes: All CVE users should reference CVE-2005-2955 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2023-11-07T01:57:52.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2956.  Reason: This candidate is a duplicate of CVE-2005-2956.  Notes: All CVE users should reference CVE-2005-2956 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "envd daemon in HP-UX B.11.00 through B.11.11 allows local users to obtain privileges via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17506",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00547561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00547561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00547561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00547561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in remshd daemon in HP-UX B.11.00, B.11.11, and B.11.23 while running in \"Trusted Mode\" allows remote attackers to gain unauthorized system access via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/20679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17507",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015173",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00543854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00543854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00543854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00543854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F804BEB2-6746-4E09-B74F-654DBBE3B48B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:2.2_linux:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0772A28C-68C1-47CF-BDAA-BC0E900A77BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:2.2_linux_mp1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF2B817-5F85-49E4-BB06-C744EAE20FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:2.2_mp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70FBFB8-68DB-47AD-856D-8E893FDDCB6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:2.2_mp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1025ACEA-8762-4D86-91CC-EA64F01074D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C920F9-9D6B-42DB-9B70-7F14082B5C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_aix:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA14BE-2F40-4195-818C-9C6E80B5AD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2DD961-3C4C-483E-932D-7B19CC3CC1FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux_update_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49FB7E6-CBD3-424E-BBE2-684B5934F84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux_update_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB31E8E7-FDD9-4684-A794-6CC5E2B9ABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270B6EE8-E7F5-467D-9363-304088A9192E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp1j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAD4F45-25AD-4BF4-AD4B-07B3C8BCEB5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9B676F-53FC-4CA9-8FA2-E0274A8CD2A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C17C170F-7CE0-4F3C-B6B1-4F0318B18E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42673130-3B5B-412B-B25C-6D62AC7C9B4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F04E991-2C3D-4566-B5F1-B370603045E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B1E0306-DAB2-44E6-9091-F9AF7E3094B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2272678-1BDA-4BAA-88BA-9742B8246F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81EFE6E3-E19B-4CF9-B8B7-DDA31138B9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:4.0_aix:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC7F1B0-5952-42C7-80EB-C1F2B3412D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:4.0_aix_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F762CE91-CE7F-4DD1-BC51-DB7F94EBED2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:4.0_linux:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6940C1-2810-42BB-9E90-D22905B052EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:4.0_linux_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37A3D7F-EE69-49E4-AC98-F20ECAC74805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F15C22-CF20-4C19-9B50-84F5EB9093EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C944D168-5A6A-4B3D-A62F-E4B33E72D7C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris_mp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A48F34-B71B-4693-A32E-69767789BC24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:sanpoint_control_quickstart:3.5_solaris:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0B43BB-9412-4A1D-B7A4-897C58165510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation:1.0_aix:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005AAE24-73CC-4919-83F5-E81C8C2F8F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation:2.2_linux:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A52C93D-58A7-4F92-8C2E-5D05058AAF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation:2.2_vmware_esx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2DA5A9-58C3-4E84-87FA-66E72361FC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation:3.0_aix:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899C48A6-EB2F-458C-832E-B216DC8C9F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation:3.4_aix:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034323B5-C618-4289-A9A5-0110AA83351E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation:3.5_hp-ux:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FEC93E3-0501-417D-821C-23DF313C7805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation:3.5_solaris:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E159E08-DF77-4140-8E3F-162CC785CE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation:4.0_aix:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A00A4C71-307E-448D-AA5D-B08C1F3FC4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation:4.0_linux:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AAC81F-E1C5-47B4-B63E-3EA2A3297694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation:4.0_solaris:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C776029-A6BC-4EC3-BB7A-A3E52E41ADBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation_cluster_file_system:4.0_aix:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CE863-1018-4B58-BB93-FFDA16572CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation_cluster_file_system:4.0_linux:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0604C6-FDE6-4FCD-AF4C-106E6081F868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:storage_foundation_cluster_file_system:4.0_solaris:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4686EC86-36EE-4250-94FD-261CE14E7F22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113199516516880&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17502",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08a.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015169",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15349",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113199516516880&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35E1DF05-5CE8-4782-9F65-B01464985908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17484",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015171",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21222159",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/194753",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20672",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15367",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2356",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21222159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/194753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "db2fmp process in IBM DB2 Content Manager before 8.2 Fix Pack 10 allows local users to cause a denial of service (CPU consumption) by importing a corrupted Microsoft Excel file, aka \"CORRUPTED EXEL FILE WILL CAUSE TEXT SEARCH PROCESS LOOPING.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp1:*:*:*:*:*",
            "matchCriteriaId" : "04B2A390-CF19-4F22-8380-3C82411DDD01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp2:*:*:*:*:*",
            "matchCriteriaId" : "2A96D7FF-9865-481D-AC36-8DB3BB6B3C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp3:*:*:*:*:*",
            "matchCriteriaId" : "42D88B74-B2FA-4B6F-B56E-F5F3071D9A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp4:*:*:*:*:*",
            "matchCriteriaId" : "BCB38F0F-8F07-4C0C-A95C-D02376E81312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp5:*:*:*:*:*",
            "matchCriteriaId" : "657AEFB3-FFDF-4214-81E6-9DCEFABABB26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp6:*:*:*:*:*",
            "matchCriteriaId" : "731A9929-4F27-4C33-9A01-4C9EA72A7A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp7:*:*:*:*:*",
            "matchCriteriaId" : "B07706D5-3FD3-4654-96A7-D8052DD5A71F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp8:*:*:*:*:*",
            "matchCriteriaId" : "AE94A135-8F67-4A03-8F53-ABD8A49A2EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp9:*:*:*:*:*",
            "matchCriteriaId" : "4F678A20-2CE3-46EC-9358-5B736D4AE563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17388",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IO00737",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IO00737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "INSO service in IBM DB2 Content Manager before 8.2 Fix Pack 10 on AIX allows attackers to cause a denial of service (application crash) via unknown attack vectors involving LZH files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp1:*:*:*:*:*",
            "matchCriteriaId" : "04B2A390-CF19-4F22-8380-3C82411DDD01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp2:*:*:*:*:*",
            "matchCriteriaId" : "2A96D7FF-9865-481D-AC36-8DB3BB6B3C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp3:*:*:*:*:*",
            "matchCriteriaId" : "42D88B74-B2FA-4B6F-B56E-F5F3071D9A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp4:*:*:*:*:*",
            "matchCriteriaId" : "BCB38F0F-8F07-4C0C-A95C-D02376E81312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp5:*:*:*:*:*",
            "matchCriteriaId" : "657AEFB3-FFDF-4214-81E6-9DCEFABABB26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp6:*:*:*:*:*",
            "matchCriteriaId" : "731A9929-4F27-4C33-9A01-4C9EA72A7A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp7:*:*:*:*:*",
            "matchCriteriaId" : "B07706D5-3FD3-4654-96A7-D8052DD5A71F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp8:*:*:*:*:*",
            "matchCriteriaId" : "AE94A135-8F67-4A03-8F53-ABD8A49A2EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.2:*:fp9:*:*:*:*:*",
            "matchCriteriaId" : "4F678A20-2CE3-46EC-9358-5B736D4AE563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17388",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27005891&aid=3#wq213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27005891&aid=3#wq213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote attackers to inject arbitrary web script or HTML via \"not properly escaped error messages\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064985D4-266B-4EEF-9BA2-B4F6EF22665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03528181-D73F-473B-BA15-9052228690BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C592CD2-2836-4892-BB78-E794E5169009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E41299B1-934C-4CD8-A956-D12EFA0B1916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D3EBB9-CB0F-4C5A-BED1-0DF781197E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A94F9F-C39E-4A31-87DD-CA1248FAC299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0116F7F-D0EF-4E1A-97F8-F9D8BD0364EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94B640CC-3623-4D11-A542-02A401AC814D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC11155-F78F-4C6A-B5CF-AA757996320A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.207.2.109&r2=1.207.2.111&ty=h",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000231.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17468",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17702",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17794",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-914",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-20.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15409",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2403",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.207.2.109&r2=1.207.2.111&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000231.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently 2.0, (d) PHPFanBase 2.1, and (e) PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when register_globals is enabled.  NOTE: It was later reported that PHPFanBase 2.2 is also affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codegrrl:phpcalendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "24B7C89C-7458-466C-91B1-DDA354FE4F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codegrrl:phpclique:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "CF9DA482-08DF-4857-B377-E271A207A10F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codegrrl:phpcurrently:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "FC225CF6-E48A-43CE-B5ED-1DE376E4AF4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codegrrl:phpfanbase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "D8BFBCF4-3EFD-4096-8C89-5EABA3261D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codegrrl:phpquotes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "531A83B0-FF3A-45AA-80BD-CFEB23D072EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113199214723444&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17542",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/21664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2402",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113199214723444&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peel:peel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C82B22-874E-4374-AC6D-1817FCBE5EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peel:peel:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A64CF2A-E3A0-431E-928F-6BE731892F7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17536",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6B30F6-70A8-43C7-BA5C-6DD8A6ED829D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "767101D3-ABB0-4D34-AA28-75F78A392F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB60D06-E9D0-4949-8542-334D180F491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F884774-D1A1-42A6-A3FE-9B0500725666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C56B981-FD66-46F2-806A-3FFDEC520482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3E1994-6CAC-48E9-8438-0D894A76FE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8742B0-A91D-457D-BF57-06AFC5219BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F04EDBE-4B04-4B4C-A2BE-5286AC7C8952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615566E3-9EBD-49B3-9727-0883D3F0334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59D0CCF-3CD0-4D99-B1F1-38F331422801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADF5CE8-D072-4CFE-8A96-BA86187B478B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72278005-5F2A-4459-8813-DF7EC2D1F063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E39A909-E266-4BA9-87C6-DE26052433E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA16FD9-0625-4D3D-9F10-130A28C88DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE33EFBF-E155-4C3B-93CC-63AA1266A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F2FB70-7EB9-4AA7-9E85-C151C3CC8104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F9AC7B-C0EB-4B7F-8997-1491301D0EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D6A976-FFEA-4DB6-B002-8036E778C78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3AFFFD-1BDC-4511-9DA0-56ACD337F56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1500D8-952A-46C6-920C-096760C36A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503D7346-4891-40B1-A0CD-0FACC5359431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643610C6-99A9-43C9-A8FC-463A244C08DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C53260-503F-4934-B1FE-9FACD8E0EE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C670F583-6B60-4D80-A75F-CD53FDDF27D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17511",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0204.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0012/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-242-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0204.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0012/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-242-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icms_content_management_systems:icms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60FE13BA-5632-4191-9A99-FB2C06ABCFC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hackers.by.lv/showthread.php?p=416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/20/20820-icms-file_inclusion.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hackers.by.lv/showthread.php?p=416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/ref/20/20820-icms-file_inclusion.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cynox:cyphor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.19",
            "matchCriteriaId" : "1B6F40B5-7567-49E8-8877-8CE8F07C7828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/unixfocus/6P00F1FEKC.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416562",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/unixfocus/6P00F1FEKC.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ts.exe in Walla TeleSite 3.0 and earlier allows remote attackers to access privileged information by entering the article number in tsurl parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:walla_telesite:walla_telesite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "21AC76D9-A865-4D50-B388-28B49D337775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416581/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15419",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416581/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability (XSS) in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the sug parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:walla_telesite:walla_telesite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "21AC76D9-A865-4D50-B388-28B49D337775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17547",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015204",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416581/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15419",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416581/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to inject arbitrary SQL commands via the sug parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:walla_telesite:walla_telesite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "21AC76D9-A865-4D50-B388-28B49D337775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416581/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15419",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416581/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary local files via the querystring."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:walla_telesite:walla_telesite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "21AC76D9-A865-4D50-B388-28B49D337775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416581/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15419",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416581/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QDBM before 1.8.33-r2 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdbm:qdbm:1.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B284E5-7F4F-451E-9B16-B7619C135420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdbm:qdbm:1.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2148A42A-9773-46D4-A0B5-58781104A322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdbm:qdbm:1.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3147D0-CD3F-4502-AFE7-5C1625DA1829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdbm:qdbm:1.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5123ED-8839-464A-B160-E39FFEDF1657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdbm:qdbm:1.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B984407B-1013-4309-86E9-0D61C330889C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdbm:qdbm:1.8.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20151592-32C9-467A-BDA9-1AD2D55A5E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdbm:qdbm:1.8.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E4BDCDD-B33F-483B-9368-CB4C12738146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdbm:qdbm:1.8.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3B9A70-8642-45A0-9103-0F420A634522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdbm:qdbm:1.8.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA037D29-185C-4F25-B2BD-5DB19893D252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17427/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17427/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdal:gdal:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E795D1-D929-4C0E-950E-9D42490A46CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdal:gdal:1.2.5_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E541DE14-A138-4D68-A3C9-1E0AE6EDE0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdal:gdal:1.2.6_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA0D862-B837-4808-816B-4F5EADC08F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdal:gdal:1.2.6_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE24FBEE-0804-40A0-AD10-BEB93C45CBA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdal:gdal:1.2.6_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6325E3-9F64-4EEA-8D19-64A12D56819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdal:gdal:1.2.6_r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCEE526-6BF2-46F3-A6D4-56C1B4148CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdal:gdal:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621B66E5-AB3E-450B-BE4E-81E1F3871D70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17427/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17427/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick before 6.2.4.2-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6453D6A0-DF88-4850-B5EC-26D3459783E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5249DA0D-1580-4209-BF96-619A2E476BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5102CCA1-31F6-4CCE-BAF9-C7D30FDD24E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA00DF-D99F-4C77-9466-44ECB7411584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99ECD9C7-3E03-4D52-B6C9-BF702208C228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7AAE3F-5E24-4688-B00B-B5C8A0021877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01173B1A-AA23-476D-A3F9-6B5728E6A273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D83FADC-4C7F-4C16-BBAA-9883D7449744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46159EE9-4059-436B-9C6B-41C059827204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76BD93B-D3AA-4BDF-99DA-ED9485FA7246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D654459-4B94-4339-A037-29734BFD6774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DB259A-4F68-411B-9990-F4D01DF2F82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BC01FE-874F-42BC-8D81-40A288317640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0751A64A-3668-469D-A984-FA1F06BC1D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982B2F93-71E9-4261-906E-7A466B22D3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB06B25-300F-4B91-86B5-CF0FF9C01982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2563ABE-D1C3-4AB8-BC41-8029E358C2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CBAAEC-AF7B-4375-B1C5-617EF6692DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6534A963-C0A7-47D6-8E1B-B8D0F3933428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4234EA44-0B0A-461A-97AD-2C18E3B5C25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D46680-F10C-436E-B949-366921E4AE59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC49C98-950B-4646-969B-3C10037EA00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D688BCB-7B72-4546-BA3C-44B9157FCD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBC9032-497C-4B24-9B90-7A3374668C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAEBFAC-52E9-4BD4-BAA9-2007095EB260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E5FC41E-5E0E-4357-AE31-EF9742A155B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F108FC3C-FE51-450E-BB70-93C29B874EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C698D6A2-17AD-4898-AA87-5FDC78B9ED4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2CBD232-B9CD-4EF1-A090-535E713EAAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02E4063-E2B2-4EC5-9864-D2FB3E73F574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF74EDCA-F81A-423A-AEA2-833039400309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF62FDF-E55E-4B1E-8D84-73C44992FD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7q8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B358AFB2-347E-4FEC-B1B1-BA1AF49961F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7q16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F03436CB-798E-4196-B5BA-A23149034570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A27CAC75-BFE8-4865-A6AE-20225BFCDBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FF60EE-CFFA-43AD-AA46-004EBBFF3765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B851A570-B5D4-4562-8FD2-3211E6A6C19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882E6544-A384-41C8-BEFA-62771D72906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6741F75-E6B1-4FCE-9C57-C912816C7F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6E66D8-BEC4-4E0D-BAAE-979618405C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8AE39C-9F96-43AB-843E-42B931154B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91C63C5-765B-4511-B6CF-CA09433DE051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8DB31B-68ED-4538-B2F4-6A9188B2969D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48A747E-27D5-4275-ACB9-E978AB383D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD85045-0175-4270-9EC4-01236158A71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12378D7-6A7E-4636-9551-C224907A3219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4464D0E1-BAA9-479F-814A-17DE99BE7D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4644A7F5-57D9-4558-A1AA-D55516FD56B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505A3675-8DA4-4AFD-9A56-13A95B1D0174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338F37B1-0A4C-4600-88FE-F86A020A1239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE671263-8471-4ED5-A836-B7F7D64D8DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF1B109-2299-4AB2-AB82-D73669F1EA7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0EE6928-6449-4241-8DC5-082009724A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8973BA-CC26-499E-A5AB-35B5BD7DAF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C8CA07-E1D3-427B-AFA0-4110868D00DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2F16E9-D441-45F6-B27A-9CB6D19A26BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F50C03E-B94A-47C5-B394-3636BEE34EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D85FBFE-9674-4ADF-887B-0D985CDC88EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17427/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17427/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue is caused by the way ImageMagick was packaged by Gentoo and does not affect Red Hat Enterprise Linux packages.",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of service (JVM unresponsive) via a crafted serialized object, such as a font object as demonstrated on JBoss."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63978872-E797-4F13-B0F9-98CB67D0962A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.5.0_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2696F2-B8ED-439A-A602-B6B721E65FF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113113125121878&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17478/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113113125121878&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17478/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E79A6-ABC9-4804-B016-7049F13C905C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113122187101383&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15276",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113122187101383&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E79A6-ABC9-4804-B016-7049F13C905C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113122187101383&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17410/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113122187101383&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17410/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EE93EF-D273-4DEC-A85C-76290FEE40A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC21C1E-131A-4366-8741-7BE7594B6F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "993587DE-DA24-4D52-B190-AB236327D687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16ED2979-BB01-44E7-A0A3-D1B7F550F538"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/153/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113106195532404&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/153/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113106195532404&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9A0FA4-A4AE-4C90-98DA-8AF5ABB03CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E9BC10-5F5B-499A-893C-1EEF6F1180B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A9B47A-8FC3-4BD2-A55F-9150307619B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7068873F-E45D-4471-B55E-BF7B0E3AFEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695F0967-1529-42DB-8978-8B9192F7F615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073BBAA9-7C7B-4D07-8943-7459DD2BAAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB72ED94-7832-43CF-81CF-27F88CAC6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802BFF6B-5D9F-49AE-B96A-86A85E0F1034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7B2943-BC22-4735-8AA5-AADBEA685FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257524-7FC5-40CA-9BDA-82B8565C5BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AACCC-C20A-4BC1-BF62-D40FF71B7360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F52C121-B8B8-43A8-AFAB-E85474021919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659B4C39-0F0F-40C5-9B7E-0D00330611F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508C140C-2F87-4270-85B0-00EA6678A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3033A4A2-47E9-434F-BA0A-0F2476A67899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1EDFB4-B0C8-4832-BCA1-C35D28877581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330A535-A376-4BFF-BB1B-31E83370FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E2884A-615F-4063-8FB7-EC157C3EC07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BC41B7-272F-44BB-BD48-6C9231402526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368319",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=368319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the username field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_guestbook:advanced_guestbook:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30BA24F-6517-457E-870E-E71CC8D99D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113140938101756&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113477483705918&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/15892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113140938101756&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113477483705918&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/15892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filezilla:filezilla_server_terminal:0.9.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8351A4-40CB-4EFC-B9BE-FEA472C5BAF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ingehenriksen.blogspot.com/2005/11/filezilla-server-terminal-094d-dos-poc_21.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ingehenriksen.blogspot.com/2005/11/work-in-progress-filezilla-server.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113140190521377&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=298735",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417307/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ingehenriksen.blogspot.com/2005/11/filezilla-server-terminal-094d-dos-poc_21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ingehenriksen.blogspot.com/2005/11/work-in-progress-filezilla-server.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113140190521377&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=298735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417307/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8A8FD0-F9C9-4125-B682-A7F2B73D9BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2A9976-1883-4D49-A512-C66FF12FDDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20DFF23-6215-4860-B091-ECC1C1C08DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1B943A-38AD-4472-B143-B66567EBC9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.65.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F64-5EDD-450D-A244-124366AD5800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.79.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44A2955-F536-4EA5-8D1E-94D35EE10B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:7.0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA559D4-7887-4518-BAE4-17A60297014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:7.0_r19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E436A0-D128-4225-8238-79E80353541D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113140426614670&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17430/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17437/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17481/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17626/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17738/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/910550.mspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.sec-consult.com/226.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15334",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2317",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113140426614670&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17430/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17437/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17481/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17626/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17738/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/910550.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.sec-consult.com/226.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php CuteNews 1.4.0 and earlier allows remote attackers to obtain the path of the installation path of the application by triggering an error message, such as by entering multiple ../ (dot dot slash) in the archive parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "79E0694F-9C99-4DC3-90A3-3957ABBBBF57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113140342029880&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityinfo.ru/2005/11/____cutenews_140.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113140342029880&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityinfo.ru/2005/11/____cutenews_140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "game_score.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $player_name, $player_score, and $game_name variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED52F96-48B9-4111-AAEB-4E9190114802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113141422014568&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113141422014568&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to gain control of the computer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:ibm_oem_version:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96ADB2B-8EF4-4EBD-A007-E3CC7223608B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:ibm_oem_version:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "1F928472-8B88-49CF-8F92-502A98FB71DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113147602208113&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.microsoft.com/windowsxp/using/setup/getstarted/installqa.mspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/375335",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11199/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113147602208113&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.microsoft.com/windowsxp/using/setup/getstarted/installqa.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/375335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11199/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T07:42:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iisworks:aspknowledgebase:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59D7663A-0FA8-4E6C-905E-D70A032F01C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113156859811594&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17517/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15364/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113156859811594&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17517/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15364/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3621",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-16T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de CRLF en phpMyAdmin anteriores a 2.6.4-pl4 permite a atacantes remotos conducir ataques de separación de respuesta HTTP mediante scripts no especificados.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3663CE-AF25-4A0A-811E-DE58B7E5D934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDE752A-19A1-4910-9C56-0FDFFA367E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E7577-5F89-4B2C-9C28-A5268B539968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6E3468-78AF-471C-A09E-1ACCC6867256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794AE77E-843C-4CB4-9462-E4FE8C4C2896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE1E983-6EA4-4E0F-B7F8-B0070F8A3752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600D28-5583-4FA2-835F-BCE10813DB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17578",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/22781",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1015213",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1207",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3622",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-16T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to multiple scripts in the libraries directory."
      }, {
        "lang" : "es",
        "value" : "phpMyAdmin 2.7.0-beta1 y anteriores permiten a atacantes remotos obtener la ruta completa del servidor mediante peticiones directas a varios scripts en el directorio de bibliotecas.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3663CE-AF25-4A0A-811E-DE58B7E5D934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDE752A-19A1-4910-9C56-0FDFFA367E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E7577-5F89-4B2C-9C28-A5268B539968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6E3468-78AF-471C-A09E-1ACCC6867256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794AE77E-843C-4CB4-9462-E4FE8C4C2896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE1E983-6EA4-4E0F-B7F8-B0070F8A3752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600D28-5583-4FA2-835F-BCE10813DB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3C5C9D-A802-40F3-B3CE-593CFED745CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892F5D72-1814-48A5-8CCA-A74EE9D633CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113208319104035&w=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securityreason.com/securityalert/185",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1015213",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.fitsec.com/advisories/FS-05-02.txt",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20911",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/20912",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/20913",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/20914",
        "source" : "security@debian.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113208319104035&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fitsec.com/advisories/FS-05-02.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T21:22:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de separación de respuesta HTTP en frameset.htm de SAP Web Application Server (WAS) 6.10 a 7.00 permite a atacantes remotos inyectar cabeceras HTML de su elección mediante el parámetro sap-exiturl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5FAC41-5C2B-4653-A757-ADBFD37E716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E0969-971D-4D97-97EE-F901B05885DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B41DF7D3-9EF1-4F5B-870E-5D1FDF095509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F89AF4D-B15A-4D91-B6A4-0A206772BC69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113156438708932&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17515/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_HTTP_Response_Splitting_in_SAP_WAS.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15360/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Nov/1015174.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113156438708932&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17515/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_HTTP_Response_Splitting_in_SAP_WAS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15360/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Nov/1015174.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T21:22:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter."
      }, {
        "lang" : "es",
        "value" : "frameset.htm en soporte de tiempo de ejecución BSP de SAP Web Application Server (WAS) 6.10 a 7.00 permite a atacantes remotos cerrar la sesión de otros usuarios y redirigirlos a sitios web arbitrarios mediante un comando de cierre en el parámetro sap-sessioncmd y una URL en el parámetro sap-exiturl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5FAC41-5C2B-4653-A757-ADBFD37E716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E0969-971D-4D97-97EE-F901B05885DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B41DF7D3-9EF1-4F5B-870E-5D1FDF095509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F89AF4D-B15A-4D91-B6A4-0A206772BC69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113156525006667&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17515/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15362",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Nov/1015174.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113156525006667&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17515/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Nov/1015174.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T21:22:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTEM PUBLIC test application."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de scripting en en sitios cruzados (XSS) en SAP Web Application Server (WAS) 6.10 a 7.00 permiten a atacantes remotos inyectar scritp web arbitrario o HTML mediante (1) sap-syscmd y (2) el campo BspApplication en la aplicación de prueba SYSTEM PUBLIC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5FAC41-5C2B-4653-A757-ADBFD37E716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E0969-971D-4D97-97EE-F901B05885DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B41DF7D3-9EF1-4F5B-870E-5D1FDF095509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F89AF4D-B15A-4D91-B6A4-0A206772BC69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113156601505542&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17515/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15361",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Nov/1015174.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113156601505542&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17515/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Nov/1015174.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T21:22:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en SAP Web Application Server (WAS) 6.10 permite a atacantes remotos inyectar script web arbitrario o HTML mediante Error Pages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5FAC41-5C2B-4653-A757-ADBFD37E716E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113156601505542&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17515/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15361",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Nov/1015174.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113156601505542&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17515/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Nov/1015174.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T21:22:00.000",
      "lastModified" : "2023-11-07T01:57:53.727",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3530.  Reason: This candidate is a duplicate of CVE-2005-3530.  Notes: All CVE users should reference CVE-2005-3530 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T21:22:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in profile.php and (2) titles of posts."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Ekinboard 1.0.3. permite a atacantes remotos inyectar script web de su elección mediante (1) el parámetro id en profile.php y (2) títulos de mensajes enviados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekinboard:ekinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970D5C94-E0CB-43F2-8FF4-449FAC3E5766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/162/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015207",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15447",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/162/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T21:22:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "78B89BA1-9698-4241-B3E7-49139D13693C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17580",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T21:22:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:floosietek:ftgate:4_4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9365495-F14E-467F-882B-42231AB02823"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17609",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.lucaercoli.it/advs/FTGate4.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15449",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2478",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.lucaercoli.it/advs/FTGate4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T21:22:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD33B90-AC5F-42B2-9876-F1649D1CB574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:7.0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D8FF8C-87B9-47E8-8525-81090D736C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6BB5FC-0E9D-4E94-B358-D95C7E3A7A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66ABE31-E910-40D3-A570-F06ADDBDE42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE5CF5D-4649-4E3A-9328-47224065384F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE07BAF7-3A9A-426B-9536-72EAB8984A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104552F-31AD-4CBE-8F6E-5E410D2F9EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3651861-9C23-4AB1-B795-E44C912B8AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F232E30-578B-440E-98FE-A52FF171F11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7675AD-40A0-4BC5-9823-3AC330EE95CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92829B90-6F6A-4FAF-85A9-731D4F3212C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC6CED6-002B-4C69-A700-70FE667BAB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C84852A-1153-46A7-9B82-D05F4A6043D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACC77BE-277F-47F9-B50A-2E9CF5D4A965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB401046-E029-4CD1-A937-E9E70A081BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "453891B9-C354-461F-97FA-330165B92255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED700CB5-6896-41D1-ABEF-98FC159940F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server_lite:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E33A069-8301-4AD5-BDD3-8371DA394EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server_lite:5.0.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6093302F-EE5E-4B62-8A23-D5D961C79874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server_lite:5.0.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB6A60B-69A5-4659-B8DC-9BC8A2ED9CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server_lite:5.0.2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAB55DF-D6DE-48EC-9AE3-478E49137339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC89D14C-4E08-475C-953C-D85A9EDFFEC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E604B-6C0D-474F-A3A9-B07EF0A7D2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8667E51F-86A9-4181-8FCC-BECC6F50913B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA52C2C2-64C3-40BA-86A1-C4A14BEB8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_9.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A9B45B4-47D3-4803-9BDF-783E7CD3A522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84E349-48A8-4800-A300-AACEC8659656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323353FE-7ECD-4668-BDB1-3E5CA8F3F9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4237F0-BE51-4FCD-9CF1-83E54723390A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33627F4-3E7D-4181-8171-2B65F8C60E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_9.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4FB153-9C3F-4E22-BB42-D99793D4920F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8975840-9843-4034-BBED-B31A9BA16DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A39665-BB49-4135-9850-8CF9E69546FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2764001-8B54-47AD-A265-0C0B0F691A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B5ED54-BAF4-41B3-8B09-F9795AB7A18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EA2727-2F53-470F-AF58-1B33B7A5B7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BFD76C-1BB0-4227-AD6E-D6CBC426900B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390EFE5A-C0D0-4BC0-9B27-3D8D3039A651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C0CBCA0-A0D1-4B0D-ABA5-2DF86294259C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49EB78D7-01BA-4903-A7F7-F12608112E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34DC1C91-85DC-440C-8928-990496D74F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62770611-5C6E-487F-A21D-5BA839466CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7210473-5E57-47A3-ADDE-9E8C4B3121B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CFD69-2241-4065-8BE2-F654B640EED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D7AA72-29C3-45FB-87EF-D9AD087774FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AB4EEE-706E-4CB0-B805-63F514A6073E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3E2494-5BAE-425B-8F32-A4D2532B10C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65C2671-2FFE-4461-A570-72E3BBC312D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0C29E8-E7CA-4C96-B32F-695808B99AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB4061-855C-4DAA-BDAD-AA1E68EFC1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F81AC9-DEBD-4B04-8753-C68BAE509B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0785C55D-183D-42D8-A9F9-DBD297FE7F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.1.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA38C05-F2C0-435E-B4CC-4CF2C9733CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1AEB7-AD53-463F-86F1-FD66F29672BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA45BE-C7AB-429C-A0A3-928BEC3E78E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4991B9-67A9-4EE9-A30F-27950BF3A3DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2201796B-013B-4440-B366-1F2966AA86FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90F6C4F-CEF5-4172-97FC-617B71EAA636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5_fips:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61ECB215-482D-4E47-A1CE-169ADE17812B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6B754E-B3FB-4ECA-A166-B3C4AB900573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E121A29C-C1EB-47F9-B220-5B5C9EFA9A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFA2A5C-B289-4505-85F5-7F6F0222B552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E876825-D6E5-4958-B737-4CE43A32BEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E07567-754A-40C0-9428-D151880EE6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6233345D-5100-404A-9B61-524D9679D9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9B1EAF-ED2D-4B3A-9EB7-5FEB9E6B684C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D7A3CB-54CC-4CD9-9672-366233BF0CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DB0B6B-EB97-448A-B63E-E5997382DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA77BC6D-661F-46E9-B144-1587C1192B8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F9C7F3-8140-4FEF-8319-64CE51B830AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5_fips:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F843A2C-2FC8-44E0-84C0-E20186A979CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C654BD-6BD7-47C1-9C6D-B488A10ABDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957E3BDA-D69B-4FD8-B72A-E8D7C3AB5833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68286D06-9EBA-4FBD-AB0B-D80993895416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C059683-E0A1-4E97-B393-CB6B0EACF7C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5675664-7036-48D0-9524-0350F626D4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597EE9ED-6A95-46C7-BE83-ADEC6AA65341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50411FCF-8173-458D-B18A-4F7DE7E81A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAD9D1D-A7E5-4D88-B93B-C518BF1986AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65D66A0-23F7-4110-AF71-05CBFB3F92F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F207CBC6-D186-418D-8F11-3E623530E00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB2708A-58D1-4F17-8504-3748D6667788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83B1C7A-287A-405F-B44E-85F891183D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5_fips:*:*:*:*:*:*:*",
            "matchCriteriaId" : "015C96B0-1B89-4ECA-B1BB-AEFFC398088C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC1E19-8F20-4215-8D90-E42EF7126BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A313CB63-641A-4984-88ED-FBAEB44AE0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE456956-255F-4BA6-B830-356512B5D2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB172848-A873-4137-A335-AD034806A5EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78BD7D2-7B48-438C-8C24-01C4007C1A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61851FB-AC6F-4E56-8CA8-F8CE97D65364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99255D3E-41FF-4D2F-A11B-9563997F4110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ngssoftware.com/papers/database-on-xp.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ngssoftware.com/papers/database-on-xp.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T21:22:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3FE6E0-7446-45C2-84DA-72C558F2F899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A9BF3A-5DB9-4CB4-B7F7-848FFDF73D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC93597-82DD-486C-B277-DCBB45406A8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28ED4E07-1195-4831-89A1-8E3F836B76E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ngssoftware.com/papers/database-on-xp.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ngssoftware.com/papers/database-on-xp.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-16T21:22:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account without supplying a password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "56D0096E-8145-4A36-BC18-A9C5C780D1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "80DE2026-D9F0-4AAA-97E6-F4FB0EBDB265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFE3DF2-216B-4E71-99BA-7955E44D853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CFC92D-19AC-4515-A4F0-3744C335D975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BDA3DD-24B4-4D91-969E-2E779A7EB1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E8AF18-6E6D-4923-9303-A082D4D47B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D309A217-6A82-4B5C-9C5B-ABD6E27457EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79242DD-F95B-4038-B6D9-4ABBE3F51836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302D906F-312A-4042-976D-6998178102E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280064D8-0605-488F-AC2D-C2D238F3A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA1AE7F-2417-43FD-9CFC-B17D6D4C6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8F7EC6-B67C-470F-8EC3-BC3C72A7989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ngssoftware.com/papers/database-on-xp.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ngssoftware.com/papers/database-on-xp.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3644",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-11-17T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120."
      }, {
        "lang" : "es",
        "value" : "PNP_GetDeviceList (upnp_getdevicelist) en UPnP de Windows 2000 Server SP4 y anteriores, y posiblemente Windows XP SP1 y anteriores, permite a atacantes remotos causar una denegación de servicio (consumo de memoria) mediante un petición RPC DCE artesanal, posiblemente incluyendo una lista de dispositivos inválida o mal formada, una vulnerabilidad distinta de CVE-2005-2120.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.eeye.com/html/alerts/zeroday/20051116.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17595",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015233",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.frsirt.com/exploits/20051117.Win_upnp_getdevicelist.c.php",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/911052.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/6V00C15EKM.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15460",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1328",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://research.eeye.com/html/alerts/zeroday/20051116.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.frsirt.com/exploits/20051117.Win_upnp_getdevicelist.c.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/911052.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/6V00C15EKM.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-17T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php."
      }, {
        "lang" : "es",
        "value" : "phpAdsNew y phpPgAds 2.0.6, y posiblemente versiones anteriores, permiten a atacantes remotos obtener la ruta de instalación de aplicaciones y otra información sensible mediante peticiones directas a (1) create.php, y si la visualización de errores está activada, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, y (9) graph-daily.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.4_pr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B033DF7-892C-4257-986E-E717C89053DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CE9A50-87BA-4BEC-9076-9E0C24B2E972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8259F494-DF09-40A0-8D4C-6C1892FDF598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC61A97-7253-4ED3-A01F-8F76E77C391A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C79911F-DF47-4794-B2D4-8EF23D05E350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2_dev_2001-09-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282BB921-4677-44C8-B21A-B3F3D11FA5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2_dev_2001-10-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B27D5E0-0A62-407E-9597-F9B6E79BE929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgads:phppgads:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B2B92E-5A28-4E0C-A3C9-37E6E6770314"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113165036315035&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0189.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17464/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fitsec.com/advisories/FS-05-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113165036315035&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0189.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17464/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fitsec.com/advisories/FS-05-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to phpAdsNew version 2.0.7 :\r\nhttp://sourceforge.net/project/showfiles.php?group_id=11386\r\n\r\nUpgrade to phpPgAds version 2.0.7 :\r\nhttp://sourceforge.net/project/showfiles.php?group_id=36679\r\n\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-17T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en lib-sessions.inc.php en phpAdsNew y phpPgAds 2.0.6 y posiblemente versiones anteriores permiten a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro sessionID en (1) logout.php y (2) index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.4_pr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B033DF7-892C-4257-986E-E717C89053DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CE9A50-87BA-4BEC-9076-9E0C24B2E972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8259F494-DF09-40A0-8D4C-6C1892FDF598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.7_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D6D4FC-2780-4145-BE3B-B5633AD36DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC61A97-7253-4ED3-A01F-8F76E77C391A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C79911F-DF47-4794-B2D4-8EF23D05E350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2_dev_2001-09-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282BB921-4677-44C8-B21A-B3F3D11FA5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2_dev_2001-10-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B27D5E0-0A62-407E-9597-F9B6E79BE929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgads:phppgads:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B2B92E-5A28-4E0C-A3C9-37E6E6770314"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113165036315035&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0189.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17464/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17579",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fitsec.com/advisories/FS-05-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15385/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zone-h.org/en/advisories/read/id=8413/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113165036315035&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0189.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17464/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fitsec.com/advisories/FS-05-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15385/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zone-h.org/en/advisories/read/id=8413/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-17T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory."
      }, {
        "lang" : "es",
        "value" : "Folder Guard permite a usuarios locales evitar protecciones ejecutando desde o instalando en el directorio de archivos temporales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winability:folder_guard:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1EA56C1-480D-4DA1-9069-844CAC52ABE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113165092919948&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113165092919948&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-17T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en la función get_record en datalib.php de Moodle 1.5.2 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro id en (1) category.php y (2) info.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E38AF73-EA00-485F-A63B-7C05AD9C948E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113165668814241&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/20748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/moodle16dev.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17526/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15380/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113165668814241&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/20748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/moodle16dev.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17526/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15380/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-17T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter."
      }, {
        "lang" : "es",
        "value" : "jumto.php en Moodle 1.5.2 permite a atacantes remotos redirigir usuarios a otros sitios mediante el parámetro jump."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E38AF73-EA00-485F-A63B-7C05AD9C948E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113165668814241&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/moodle16dev.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17526/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113165668814241&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/moodle16dev.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17526/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-17T11:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CodeSupport.ocx ActiveX control, as used by Sony to uninstall the First4Internet XCP DRM, has \"safe for scripting\" enabled, which allows remote attackers to execute arbitrary code by calling vulnerable functions such as RebootMachine, IsAdministrator, and ExecuteCode."
      }, {
        "lang" : "es",
        "value" : "El control ActiveX CodeSupport.ocx, usado por Sony para desinstalar el programa DRM (Administrador de Derechos Digital) First4Internet XPC, tiene activado seguro para scripting, lo que permite a atacantes remotos ejecutar código de su elección llamando a funciones vulnerables, como se ha demostrado con RebootMachine, IsAdminstrator, y ExecuteCode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:first4internet_xcp_drm:first4internet_xcp_drm:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F63CDF-09CA-4D7F-893F-44D196A032C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hack.fi/~muzzy/sony-drm/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17610",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.freedom-to-tinker.com/?p=927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/312073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2454",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hack.fi/~muzzy/sony-drm/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.freedom-to-tinker.com/?p=927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/312073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email messages via \"..\" sequences in the SELECT command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualcomm:worldmail_imap_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2153B0FD-781B-4167-BB3F-ED0286FA3CDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=341&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=341&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3347",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-18T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egrouwpware before 1.0.0.009, allow remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) sensor_program parameter or the (2) _SERVER[HTTP_ACCEPT_LANGUAGE] parameter, which overwrites an internal variable, a variant of CVE-2003-0536.  NOTE: due to a typo in an advisory, an issue in osh was inadvertently linked to this identifier; the proper identifier for the osh issue is CVE-2005-3346."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3FE8A4-497F-4282-828F-C14BB01B553D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17441",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17570",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17584",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17616",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17620",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17643",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17698",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-897",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-898",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-899",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.81.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416543",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15396",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15414",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23107",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.81.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3348",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-18T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsysinfo:phpsysinfo:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2A6B77-B7B5-46E3-A8E4-B689CB7E6723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsysinfo:phpsysinfo:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99B269E-1C24-45F7-8B35-E24D462CFE60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsysinfo:phpsysinfo:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3AC363-8AE4-493D-8FDB-A8CBE03AD389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsysinfo:phpsysinfo:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16643FCE-2156-4FF7-89CF-652F40648602"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17441",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17570",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17584",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17616",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17620",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17643",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17698",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-897",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-898",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-899",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.81.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416543",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15396",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15414",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23107",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.81.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3662",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-18T02:02:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:pnmtopng:2.37.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA4F312-62BF-4FDD-AD4A-818310354ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:pnmtopng:2.37.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253A6CAA-682C-4386-97BF-35F3DFDD67E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:pnmtopng:2.37.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D99684-0627-4556-BBCA-E6625B4DF80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:pnmtopng:2.37.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2E9945-4EB5-43B8-BFF6-34B8064C993F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:pnmtopng:2.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF808666-9DC5-40DE-AF38-DA902D243911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17544",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17671",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17679",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17828",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18186",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=370545",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-904",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:217",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-843.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15427",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2418",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9583",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/218-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=370545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-843.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/218-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands via (1) the suck_url parameter to tiki-editpage.php or (2) language parameter to tiki-user_preferences.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.0",
            "matchCriteriaId" : "B9879799-409B-4DA4-8216-025CC6CE8D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB63DA4-E9B5-4BDF-A4E5-54F4EE4E94AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE04A29-E90B-41E1-A8B4-462B54C079B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2540703B-63B8-41F4-A17A-0274A7DE7E63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=335&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=337&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=335&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=337&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_kansas:lynx:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA62F01-C6E9-4A3D-806A-AED37BF452C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_kansas:lynx:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95B11DF-213D-4CD0-8AFD-8978FF296481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_kansas:lynx:2.8.6_dev13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "080A2C3A-3842-41E6-9997-AA21E0C36E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.55/SCOSA-2005.55.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17372",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17512",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17556",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17576",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17666",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17757",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18051",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18659",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-035.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=338&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-839.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419763/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2394",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.55/SCOSA-2005.55.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-035.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=338&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-839.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419763/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, and RealPlayer 8 before 20060322 might allow local users to gain privileges via a malicious C:\\program.exe file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6051B4-1B15-44C0-B2CD-5504E68C60F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1348:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB407A17-771F-4F46-A5F9-2458358C47AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19358",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://service.real.com/help/faq/security/security111605.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.service.real.com/realplayer/security/03162006_player/en/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1057",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://service.real.com/help/faq/security/security111605.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.service.real.com/realplayer/security/03162006_player/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\\program.exe file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00EDB73-7A1B-4847-903A-88729269E1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "23C49853-8616-4769-90BC-B6D85B24A36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2443",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in VMWare Workstation 5.0.0 build-13124 might allow local users to gain privileges via a malicious \"program.exe\" file in the C: folder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.0.0_build_13124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B54C61-FB19-4900-A635-2F6B63BEC88C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1) might allow local users to gain privileges via a malicious \"program.exe\" file in the C: folder, involving the programs (1) GIANTAntiSpywareMain.exe, (2) gcASNotice.exe, (3) gcasServ.exe, (4) gcasSWUpdater.exe, or (5) GIANTAntiSpywareUpdater.exe.  NOTE: it is not clear whether this overlaps CVE-2005-2935."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:antispyware:1.0.509:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C700747-C9D6-42FE-BF6B-7DCA9F3F7DAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2975",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-18T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service (infinite loop) via a crafted XPM image with a large number of colors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdkpixbuf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52EEDADC-8BA4-4C16-BC21-12D38E160C7B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.7",
            "matchCriteriaId" : "4171FF4C-86AE-47F4-A39B-A4B2822C90A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17522",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17538",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17562",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17588",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17591",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17592",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17594",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17615",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17657",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17710",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17770",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17791",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-229.pdf",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-911",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-913",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:214",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_65_gtk2.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-810.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-811.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428052/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15429",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-216-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2433",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9697",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-229.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_65_gtk2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-810.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-811.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428052/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-216-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2976",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-18T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdkpixbuf:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A033173F-C1F9-48D3-8506-CF4A901FFE14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.7",
            "matchCriteriaId" : "4171FF4C-86AE-47F4-A39B-A4B2822C90A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17522",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17538",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17562",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17592",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17594",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17615",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17657",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17710",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17770",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17791",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-229.pdf",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-911",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-913",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:214",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_65_gtk2.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-810.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428052/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15428",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-216-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2433",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11370",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-229.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_65_gtk2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-810.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428052/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-216-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:5.0_with_mp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C2D4E7-E69F-4856-9A55-A0CE2E7A0EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:5.0_with_mp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4772C897-31EF-40D9-A06B-0069800E8555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:5.0_with_mp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FCDA77-5438-416C-AA74-2805236D6873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:5.0_with_mp4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8202F4F2-20D2-4F9C-AF48-4ECF3679C867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:5.0_with_mp5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA195E-9AB8-4735-9C98-6A4512C035F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:5.1_with_mp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F065C70A-EB65-4409-B237-D1B17C721DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:5.1_with_mp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90673C92-DDE7-43BB-BE1C-D9A0A3B52AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:5.1_with_mp3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15966A96-F374-4CF0-ACE1-4D90DCDA0E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup:5.1_without_mp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CB7DE9-3089-4DC0-9BC4-BF9CFD345061"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17503",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015170",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/279553.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=336&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/574662",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20674",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422066/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422157/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15353",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seer.support.veritas.com/docs/279553.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=336&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/574662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/20674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422066/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422157/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Failed exploit attempts may result in a denial-of-service condition."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdkpixbuf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52EEDADC-8BA4-4C16-BC21-12D38E160C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gtk:gtk\\+:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB061F1-A3F0-4763-84C3-AC5C4F2BA40E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.8/SCOSA-2006.8.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-229.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=339&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_65_gtk2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-810.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-811.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428052/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-216-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.8/SCOSA-2006.8.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-229.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=339&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_65_gtk2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-810.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-811.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428052/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-216-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T06:04:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 might allow local users to gain privileges via a malicious \"program.exe\" file in the C: folder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0:*:windows_file_servers:*:*:*:*:*",
            "matchCriteriaId" : "DFD8A5C2-DC03-4605-B502-3A895B7D377C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T06:04:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Kaspersky Anti-Virus Engine, as used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50 allows remote attackers to execute arbitrary code via a crafted CHM file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.50:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "55C7A7CD-1BAB-475A-BEC1-3AFD15366103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.5:*:linux_servers:*:*:*:*:*",
            "matchCriteriaId" : "5A3B9DBA-58A9-4E15-8B22-67795D047278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.5:*:linux_workstations:*:*:*:*:*",
            "matchCriteriaId" : "A4C38ABE-5C16-4DD0-88A4-21597315567F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.227:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E101D150-B268-43AA-9876-469DF471DFC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=318&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=318&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_key_exchange:internet_key_exchange:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CADA641-1232-4EB0-A067-F0132A93A204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.  In addition, since \"denial of service\" is an impact and not a vulnerability, it is unknown which underlying vulnerabilities are actually covered by this particular candidate."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_key_exchange:internet_key_exchange:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CADA641-1232-4EB0-A067-F0132A93A204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_key_exchange:internet_key_exchange:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CADA641-1232-4EB0-A067-F0132A93A204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the Cisco advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A9CB22A-21E0-46F6-B6CD-BB38A80FA7A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CAFC15-178C-4176-9668-D4A04B63E77B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8D6949-89F4-40EF-98F4-8D15628DC345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:1.1_\\(3.005\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DB2AEE-FB5C-42B7-845B-EDA3E58D5D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:2.1_\\(0.208\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6479D85C-1A12-486D-818C-6679F415CA26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923949D1-06EC-462F-A3BC-FCAB448042A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901B1838-7169-41E5-80EF-29BB680BF937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAEAA5F-0A98-48B7-8012-9B9909243135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB38834B-E4AB-43F4-888B-14B088C95594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F8059B-3968-4D63-B1B3-74E545C918D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701CDA0D-F932-4251-B484-8F20F0AE9003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E674AA43-905E-40E0-A70F-77D05C62C18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AB682-2965-4C8D-B323-AB510E424407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F7F019-A0A4-49CD-BB28-24BF7725AC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175CD875-3402-4B06-A3FA-7DFFCBB44056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9017BB-5848-4361-ABB9-C69FB3AB90FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "207034E8-35F7-4E78-A3FC-C86D20EB8D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C544E523-15E5-4CE5-8113-53454F5D9973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09F6EBD-C3FC-4680-BE31-A766D863237D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8C3FDA-D321-4202-A8EA-6C1464558A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B68705AB-A133-401F-9F41-64594E071816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9092680-E154-4EAB-A2D5-B692073F894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF5F3FA-5FA4-408E-BA62-3943C5DFD859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC9764-5BF5-449F-9200-5569C13F8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80709CB0-D386-4C4F-B3EE-7A0501FD7248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36291ADE-3D5A-4E49-8BA7-B71CAAA226B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D953DA9F-B54E-4941-85BE-48933C98DB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E298AD-26AC-4E1D-83D8-5C2016CC6559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DAF71-5763-44D8-AD1E-5ADE8BC15120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA54782-93A8-47BE-863D-89CA3678BF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F66A10-246D-447B-941F-F1175684F0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82435757-D892-4298-9176-5EC1FEC93037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A90348C-94E2-4F04-A887-E7EFFC1ACF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5E136E-9215-46A8-A40A-AE964C588A38"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB57AAA9-4715-468F-A734-A12209A6069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8711A47-ABD5-40ED-847A-8D1663E3D819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED2D96-5CC9-4851-986A-C9ED5E2D96CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.2.3_\\(110\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "900DC321-4CEF-4810-8247-B82FE93F48BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.3.3_\\(133\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "422F8E64-2376-4E82-A1A2-916BFB7172AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:mds_9000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2ED90B-DDBA-49DE-AC78-20E7D77C8858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:mds_9000_san-os:1.3\\(3.33\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E572F2-64A1-4188-B8BF-56B7DAFAD2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:mds_9000_san-os:1.3\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "994EF979-3A4A-4910-8CE7-C15BC0D05A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:mds_9000_san-os:2.0\\(0.86\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92F3035-2D2A-475E-98A7-35FE965138A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026A2C0D-AD93-49DC-AF72-8C12AD565B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920FAF7C-2964-497B-B1F8-3B060AAB4C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D499F38-A34C-44D0-A061-C3AE08CF178B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E564B5-A39F-4837-93B8-1331CD975D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.1\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEDB9DD-C862-4783-9F96-88836424B298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.1\\(6b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD36C4A-4B90-4012-B4A5-6081C413E302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39A993C-5A36-4D3F-B8B6-9B3252713127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C4F7D5-DCD0-409C-86BF-A96A5253DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8198D129-76D0-4983-BFC4-8EC724FE1B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEECFAA-9DD5-4950-B9F1-CF8582225314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49566EAC-05AF-4880-8000-351AF538E4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E9FBEE-3213-47FA-8CBA-C285533265FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "118CBF59-DAD8-468E-B279-F6359E4624F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(7.202\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "957E6F8F-6881-44DE-A687-9D1E0C13F6CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56328FE-F499-4325-AFEC-45BFEAB7662D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA2E425-904C-4070-8F5F-B81BCF3147F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604CF950-5D4B-4DC6-819E-0528B22CB05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12887E5-A2BB-4B1E-9621-2961458BCE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1\\(4.206\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5BE2F7-687C-477B-818B-A102526DF36D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999A0969-60EB-4B2E-A274-9F05D9F840E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "626E41D2-A5EF-493D-9486-3D9BC3793EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA31E4D-2215-4E4A-BCCC-B3D922CB752D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(3.210\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F16AD2C-1CC1-43D9-A944-F67071B62E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A42FFBF7-9ADB-4F14-BED8-F2E53BEE7B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D16481-CA9A-4B4D-AC9D-3A4F0387FF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E4588E-6C1F-4720-8082-0EF299435CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24E0E92-59D7-4B16-8B0D-2FD0EE821D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED24C763-7558-4AC0-AE10-FDA3D3078D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC85ED3-B598-4A87-A2B8-8D3B52ECC2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(1.200\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84CE24E-4ED6-43D0-A234-FBD24D22A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF84B9FE-7C6C-4578-A5A9-EF0D5EEEEC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3E2B4-3A36-44B5-90D3-1BF9FAD98579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C558CED8-8342-46CB-9F52-580B626D320E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F85D19E-6C26-429D-B876-F34238B9DAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09063867-0E64-4630-B35B-4CCA348E4DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F98CD7-A352-483C-9968-8FB2627A7CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97FE485-705F-4707-B6C6-0EF9E8A85D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B925E8-D2C2-4E8C-AC21-0C422245C482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9170562-872E-4C32-869C-B10FF35A925E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0927A68-8BB2-4F03-8396-E9CACC158FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "559DDBA3-2AF4-4A0C-B219-6779BA931F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1.5\\(104\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76AED68-8304-4BC6-9D98-64231B08A6A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5226C9CC-6933-4F10-B426-B47782C606FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "757DAE9A-B25D-4B8A-A41B-66C2897B537E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3DC170-E279-4725-B9EE-6840B5685CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8091EDA9-BD18-47F7-8CEC-E086238647C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F867890-74A4-4892-B99A-27DB4603B873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE05B514-F094-4632-B25B-973F976F6409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3392428D-1A85-4472-A276-C482A78E2CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40954985-16E6-4F37-B014-6A55166AE093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.109\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C097809-1FEF-4417-A201-42291CC29122"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051114-ipsec.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051114-ipsec.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in HP HP-UX B.11.00, B.11.11, and B.11.23 running IPSec, HP Jetdirect 635n IPv6/IPsec Print Server, and HP Tru64 UNIX 5.1B-3 and 5.1B-2/PK4, allow remote attackers to cause a denial of service via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the HP advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:jetdirect_635n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CAD6AD-6E4B-4356-9CE7-BCA400ED7926"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1b1:pk4:*:*:*:*:*:*",
            "matchCriteriaId" : "B1EFE691-90F1-40A8-BB83-BB5D9BADA584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02E8BEA-D9EC-4375-917F-BAF20CA79FD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17598",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19174",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015227",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015229",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015727",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6J6QS4",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6J6QS4",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6J6QS4",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2462",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?admit=-1335382922+1141762289787+28353475&docId=c00602119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?admit=-1335382922+1141762289787+28353475&docId=c00602119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6J6QS4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6J6QS4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6J6QS4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?admit=-1335382922+1141762289787+28353475&docId=c00602119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?admit=-1335382922+1141762289787+28353475&docId=c00602119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frees_wan:frees_wan:2.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C84C1F-2804-4E5F-B34E-D75530CD5A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openswan:openswan:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A9EABDE-514F-42BA-A335-135209605981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openswan:openswan:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2425AF51-C42B-4EAA-A619-EE47EAFCBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openswan:openswan:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892D939B-4649-4B90-A2C0-6C2E4DDF7DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openswan:openswan:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A321B57-5E08-48C8-9288-A92342770FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openswan:openswan:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54780B50-9CFE-43B6-8BB9-C7246F817773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openswan:openswan:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "001E2700-CE33-495A-8F8A-81E2E550CFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openswan:openswan:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A628FE6-A042-4DF9-A141-8BE65FD236C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7841F42-1226-43C4-A007-88847925D872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-12/0138.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_70_ipsec.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openswan.org/niscc2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00057.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00058.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15416",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-12/0138.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_70_ipsec.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openswan.org/niscc2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00058.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1 allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the Stonesoft advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stonesoft:stonegate_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.0",
            "matchCriteriaId" : "779A22D5-3BF5-4736-9E60-F3ECA44376A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.stonesoft.com/support/Security_Advisories/7244.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.stonesoft.com/support/Security_Advisories/7244.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:check_point:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E831-062A-48FC-ADA4-708C0B20855F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:express:ci_r57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF028A2C-4AC6-425F-AD89-DC40ECD41501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:firewall-1:3.0:*:gx:*:*:*:*:*",
            "matchCriteriaId" : "3E85186A-CD5E-4781-80EA-EE87239B13CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1:ngx_r60:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "95028F5A-F2DB-4440-B6BB-3F4A0C8C1FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1_firewall-1_next_generation:r54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CE9BDF-A5D0-411D-963E-44093488E02C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1_firewall-1_next_generation:r55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59F8FDC-9F16-4DF9-B23A-F5D912E2A33B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1_firewall-1_next_generation:r55p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF54C5A6-5312-45E5-ACFA-90639581021A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1_firewall-1_next_generation:r55w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1973A5EA-E715-44A8-B782-3B2C90A301E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secureknowledge.us.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?id=sk31316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secureknowledge.us.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?id=sk31316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Sun Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked crash) via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102040-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102040-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via \"long verb arguments.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:e-ftfl:*:*:*:*:*:*",
            "matchCriteriaId" : "36CAB36C-7E40-4DE2-BC52-CDF5BE5C1371"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17641",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972665.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972672.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972673.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2494",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-05-003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972665.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972672.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972673.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-05-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3349",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-18T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.7",
            "matchCriteriaId" : "6D8CF159-A4B3-493E-957F-C9B856ACE404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B30C1E-E26C-4208-96E0-10B46FF4D0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ED7127-4906-4C95-8180-57E7276FD760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9841DC70-40C0-4BC9-A541-76ED29D17825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0215148C-BC39-43D9-992B-60AF00250234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967F0E62-2613-49B5-8607-BE28491574AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9BF88B-E1F1-4E90-87F1-D6C186EECE89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53064746-D281-4E47-B147-8AC75C7B4DC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17646",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17647",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17656",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-901",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-16.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gnu.org/software/gnump3d/ChangeLog",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gnu.org/software/gnump3d/attacks.html#temporary-files",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15497",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2489",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gnu.org/software/gnump3d/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gnu.org/software/gnump3d/attacks.html#temporary-files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3355",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-18T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in GNU Gnump3d before 2.9.8 has unknown impact via \"CGI parameters, and cookie values\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B30C1E-E26C-4208-96E0-10B46FF4D0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ED7127-4906-4C95-8180-57E7276FD760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9841DC70-40C0-4BC9-A541-76ED29D17825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0215148C-BC39-43D9-992B-60AF00250234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967F0E62-2613-49B5-8607-BE28491574AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9BF88B-E1F1-4E90-87F1-D6C186EECE89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53064746-D281-4E47-B147-8AC75C7B4DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnump3d:2.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291414E2-7280-4542-8891-F560436603F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17646",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17647",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17656",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-901",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-16.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gnu.org/software/gnump3d/ChangeLog",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15496",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2489",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gnu.org/software/gnump3d/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:1.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "E290CDC0-738D-447C-BD21-95D6843BB480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:1.0.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "91EF8E27-2DEC-4F46-9FEF-9FDE4327783D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:1.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "988391F6-F8D4-43A0-A423-DC93CD5ED301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:1.0.3:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "108C2C6B-B626-44CF-AFBB-F4F867A4E91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:1.0.4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "315A22F8-692F-4D51-ABE2-A564A7111521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:1.0.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "51D19434-B812-48FA-829E-A91910BA8941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "19BC5A59-BCBD-4859-8329-B4974D43DB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "003D7E29-9970-4984-9756-C070E15B7979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "63F83DBE-F01B-4D6B-9CC4-D5170C2C1D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "EB23A853-3AD4-4EB9-B178-12B5E6E93BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348F3214-E5C2-4D39-916F-1B0263D13F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336246FA-A06F-4792-9923-E6948F3494FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C7BF07-8B9A-4BDF-BEA9-C55ABDEA8165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1059:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC15988-96A0-4EBE-BF99-14D46F5A9553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F65BDA-393F-4274-B193-B578255DB013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4CADDC-84D2-45D9-99BA-A662D7490154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113166476423021&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17514/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17860",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://service.real.com/help/faq/security/051110_player/EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-915",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051110a.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15381/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113166476423021&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17514/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://service.real.com/help/faq/security/051110_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051110a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15381/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "19BC5A59-BCBD-4859-8329-B4974D43DB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "003D7E29-9970-4984-9756-C070E15B7979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "63F83DBE-F01B-4D6B-9CC4-D5170C2C1D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "EB23A853-3AD4-4EB9-B178-12B5E6E93BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348F3214-E5C2-4D39-916F-1B0263D13F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336246FA-A06F-4792-9923-E6948F3494FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C7BF07-8B9A-4BDF-BEA9-C55ABDEA8165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1059:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC15988-96A0-4EBE-BF99-14D46F5A9553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F65BDA-393F-4274-B193-B578255DB013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4CADDC-84D2-45D9-99BA-A662D7490154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113166519206033&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17514/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://service.real.com/help/faq/security/051110_player/EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051110b.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113166519206033&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17514/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://service.real.com/help/faq/security/051110_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051110b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3353",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-18T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.php.net/bug.php?id=34704",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-831.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17490",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17531",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22713",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/525",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1206",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.php.net/ChangeLog-4.php#4.4.1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15358",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24351",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11032",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.php.net/bug.php?id=34704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-831.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-4.php#4.4.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service (bandwidth consumption) by sending ACK messages for packets that have not yet been received (optimistic ACKs), which can cause the sender to increase its transmission rate until it fills available bandwidth."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E69CF1-D657-4511-8726-D122211B9002"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cs.umd.edu/~capveg/optack/optack-extended.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/102014",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15468/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cs.umd.edu/~capveg/optack/optack-extended.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/102014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15468/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E79A6-ABC9-4804-B016-7049F13C905C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113198898514200&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15399/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113198898514200&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15399/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in RealNetworks RealPlayer 10 and 10.5 allows remote attackers to execute arbitrary code via a crafted image in a RealPlayer Skin (RJS) file.  NOTE: due to the lack of details, it is unclear how this is different than CVE-2005-2629 and CVE-2005-2630, but the vendor advisory implies that it is different."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336246FA-A06F-4792-9923-E6948F3494FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C7BF07-8B9A-4BDF-BEA9-C55ABDEA8165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1059:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC15988-96A0-4EBE-BF99-14D46F5A9553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F65BDA-393F-4274-B193-B578255DB013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4CADDC-84D2-45D9-99BA-A662D7490154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113181464921104&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17514",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/051110_player/EN/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15398/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113181464921104&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://service.real.com/help/faq/security/051110_player/EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15398/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Talk before 1.0.0.76, with email notification enabled, allows remote attackers to cause a denial of service (connection reset) via email with a blank sender."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:talk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.64",
            "matchCriteriaId" : "DF2F4B41-DCAC-4168-87B3-EC9B9AE27B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:talk:1.0.0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785FAE82-0D8A-41DE-BDD1-609860BF044A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:talk:1.0.0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B1378E-5800-41B4-829A-89FEA95AEA96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:talk:1.0.0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB0546A-FA39-4AB3-A190-EE772B99389A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:talk:1.0.0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45421D-7594-4659-8B3F-66ABD3E2EE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:talk:1.0.0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E737C1-83FC-4C0E-A41B-3A0BF7A68436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:talk:1.0.0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987053D2-BBFE-4F4B-B318-82AEE5FA8F76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113156797404902&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113200923423283&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113156797404902&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113200923423283&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:1-2-all_broadcast_email:4.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7FFB51-DD99-4FB3-BEFE-B8836BE7B5D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113201260613863&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15400/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113201260613863&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15400/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713C2C5D-E858-45CD-9FE5-2940528749F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113199244824660&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17573/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15406/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113199244824660&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17573/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15406/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote attackers to execute arbitrary SQL commands via the list parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:wf-downloads:2.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8438CF-244B-4C5E-8CC1-24C4D22A29E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113199244824660&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15406/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113199244824660&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15406/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-18T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (1) the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in (2) ForumTopicDetails.php and (3) ForumReply.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wizz_forum:wizz_forum:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7215D4C1-BC2B-4E69-805E-E5D6A3C40879"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113201564319843&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17548/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15410/references",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113201564319843&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17548/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15410/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-19T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USER command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93234FE4-29E3-4AAD-AD51-AA8B41868FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E484E64-D102-487A-9173-827A84B3814D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBDEC13-C442-430C-BC04-9B79264FBEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85586560-092C-427A-A055-5F3E684DD79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E191956D-41A2-4221-B062-1C0AB5C8E8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4A98D6-1AFA-44C3-AE3E-BAAC1DD26081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DEE8F25-6191-4F85-BC2D-885DB5FAA47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3641D082-2ABA-4A1F-908B-2CB6188DC7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C49B65A-695D-4E29-84C8-07CF90AAA43A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeftpd.com/?ctt=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113213763821294&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113216611924774&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17583",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015230",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20909",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15457",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeftpd.com/?ctt=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113213763821294&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113216611924774&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-19T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via long (1) MKD and (2) DELE commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C49B65A-695D-4E29-84C8-07CF90AAA43A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113222358007499&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20909",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113222358007499&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-19T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_programming:vp-asp:5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E21A539-E5C4-4E52-ABB9-0CC7323438B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://membres.lycos.fr/newnst/exploit/VPASP%20Shopping_By_ConcorDHacK.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17602",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15490",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://membres.lycos.fr/newnst/exploit/VPASP%20Shopping_By_ConcorDHacK.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-19T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands via the (1) DateFrom or (2) DateUntil parameter to forum.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsboard:unclassified_newsboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.3_patch3",
            "matchCriteriaId" : "2E634182-9142-4810-A36F-61FB91DCA873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0511-exploits/unb153pl3_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/unb153pl3_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17614",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2487",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0511-exploits/unb153pl3_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/unb153pl3_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-19T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cancel_account.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C809BDA5-4EA2-4516-B223-BCB1D0541837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ABB33-2ABE-4FDD-9EEC-6D9D6BAA92DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48737172-4BC5-4914-8A5F-112737A96A19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF07989C-FE1F-4F83-A84F-B1C7C2CF55D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:whm_autopilot:whm_autopilot:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD78498-0A0D-402D-8C9F-9383FADE063D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:whm_autopilot:whm_autopilot:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580F4F5E-15AE-4A4D-B7C2-1E719EF123C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17630",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-19T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the \"Your Current Mood\" field in the registration page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.3",
            "matchCriteriaId" : "9E1D3271-7AF8-4993-95A1-AA4A0323E31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.8_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A6D868-8DB9-40AF-82C5-D9697876F91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.8_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5016F4A0-C50A-4B27-B0E3-4FAA4D1645EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.8_sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB6F1E0-B54E-4D45-901C-9E2992C98BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6305AB1C-E801-4EF8-8783-01714E6F6D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7605AF8-2AF5-447D-8D63-32327899623D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.9_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC06BDA0-F6D1-4B0D-B807-40B5A3F36B52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/163/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17642",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417078/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/163/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417078/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "This CVE is considered invalid because it duplicates CVE-2005-0885, \"XMB versions 1.9.8 and later were checked and are not vulnerable.\" Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2021-04-23T12:34:08.850"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-19T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7605AF8-2AF5-447D-8D63-32327899623D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D520E1A-920A-4BC9-931F-29A38B263D71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/163/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17642",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417078/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/163/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417078/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "XMB versions 1.9.8 SP2 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2021-04-23T12:33:29.607"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-19T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the (1) select, (2) create, (3) delete, (4) rename, (5) subscribe, or (6) unsubscribe commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "7D7F1033-3C99-4E4F-8068-910B23C0673F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "4B880760-D0E3-46C6-A12F-3D9A444C92C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0581.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17633",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-59/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0581.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-59/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-19T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the (1) create or (2) rename commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAA0B95-5875-41CF-90BA-EF07D240FF08"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45540A37-2CBF-453F-8EFF-696B9318499F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724E8638-CF5A-480B-89D7-0E029A0C5965"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B664B5-EEF9-4C5F-B23C-E4D54DBF2EC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27EEFD5-19B1-4F0C-BD52-257594C37310"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB6A16-65D3-43CF-BFB4-E0616476A979"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "4B880760-D0E3-46C6-A12F-3D9A444C92C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17633",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-59/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-59/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-19T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) retid parameter in badlogin.php, (2) Content-Type headers in HTML mails, and (3) HTML mail attachments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amax_information_technologies:magic_winmail_server:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC14BC46-E12C-43A5-9C6E-7CC97DA08360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16665",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-58/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-58/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-19T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AxWebRemoveCtrl ActiveX control for uninstalling the SunnComm MediaMax DRM allows remote attackers to download and execute arbitrary code, a similar vulnerability to CVE-2005-3650."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunncomm_mediamax:axwebremovectrl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F9459F8-B8B7-402E-91BC-1A047BB5BA68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17639",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.freedom-to-tinker.com/?p=931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.freedom-to-tinker.com/?p=931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3694",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-20T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "centericq 4.20.0-r3 with \"Enable peer-to-peer communications\" set allows remote attackers to cause a denial of service (segmentation fault and crash) via short zero-length packets, and possibly packets of length 1 or 2, as demonstrated using Nessus."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centericq:centericq:4.20.0_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663C476C-2226-44A7-930B-A41F5AE40A97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334089",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17798",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17818",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18081",
        "source" : "security@debian.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200512-11.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-912",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/21270",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15649",
        "source" : "security@debian.org"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=100519",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23327",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200512-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=100519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3346",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-20T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form \"$VAR/EVAR=arg\", which cause the EVAR portion to be appended to a buffer returned by a getenv function call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osh:osh:1.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB27B3EC-3B62-4A0C-BC3E-F427817D8AB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338312",
        "source" : "security@debian.org"
      }, {
        "url" : "http://pulltheplug.org/users/core/files/x_osh3.sh",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17527",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17967",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-918",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/20720",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15370",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2378",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23091",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pulltheplug.org/users/core/files/x_osh3.sh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3351",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-20T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients (\"To\" addresses), which triggers a bus error in Perl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spamassassin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B57B2CB-C29B-4385-ABA9-59E51A16F5FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/159300/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/11581",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17386/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17518/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17626/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17666/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17877",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19158",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gossamer-threads.com/lists/spamassassin/devel/62649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0129.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15373",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2364",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/159300/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/11581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17518/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17626/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17666/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gossamer-threads.com/lists/spamassassin/devel/62649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3354",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-20T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the ldif_get_line function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attackers to execute arbitrary code by having local users import LDIF files with long lines."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7919D2-ACA7-4BFF-8D86-C63F76C09B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAAF875-EBB8-4B6C-99CD-503AFAD5633B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E0580E-1F1C-4FF1-80AB-4151CFF6C880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48AA3783-5007-4869-A699-36E1888C16F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49731BBA-CC20-4DA2-9A0B-50E4F3CC0A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49389889-7C64-42FA-A212-6B892C011441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3818AFD5-5667-490A-A6F6-7DC525D56DCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0559156E-5339-4344-AE50-ECB5604E9A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F67B0E-24D6-4B37-93B0-177A1F4D7102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE43A4BB-E5FC-41CF-A4F7-A83FBB3AFD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81DE243-D5C4-4EF3-B29D-7BBACE42F5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30CA4A62-79A8-4739-A76E-3DA3688C107C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DDA2A6C-76B4-4323-9AD3-8C30A9013EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2609F068-6A92-483B-A673-4A4F59EC06C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9288C8D-A66C-4D4B-913C-F1284921657E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D0F0F9-09D2-4789-9BAB-411A91C88631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0931C414-F6FE-4727-8672-AA2D3861E29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7898451-CE65-4D65-B466-59C6BD64FDD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1FF24D-03E5-4058-857C-3F13204CE5EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46696D01-FB72-4073-9C9F-254A18882454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1238E1-EC16-4990-998E-FC326C354F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E2AF3A-C7A7-46ED-8713-D35227E52065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1AC9051-FD50-4A3B-B101-7D2370B01E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA29C52-E039-4829-AA4A-782A73BFC249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E785E2D1-432D-4D6A-AFB8-953C114DC6C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/20675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17492",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17525/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17540/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17678",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17831/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sylpheed.good-day.net/en/news.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-906",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-13.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15363",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2360",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xatrix.org/advisory.php?s=7282",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/20675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17525/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17540/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17831/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sylpheed.good-day.net/en/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xatrix.org/advisory.php?s=7282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2709",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.14",
            "matchCriteriaId" : "3998B876-7B2D-43A0-A2AD-96D7750DCB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:pre-1:*:*:*:*:*",
            "matchCriteriaId" : "BDABE0FE-D729-4C99-BE92-E4BD2B04D540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:pre-2:*:*:*:*:*",
            "matchCriteriaId" : "9A1C416C-AC29-4FA2-8411-CD0DEB042F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:pre-3:*:*:*:*:*",
            "matchCriteriaId" : "9DC485E4-F87E-43E6-95C9-4E26A16F1C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:pre-4:*:*:*:*:*",
            "matchCriteriaId" : "F0AD5203-8A22-4445-9190-A5212F2C9F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:pre-5:*:*:*:*:*",
            "matchCriteriaId" : "AA8D0719-7EA2-40FB-BE3A-E572D3E04E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:pre-6:*:*:*:*:*",
            "matchCriteriaId" : "2A6930AA-02AE-4733-B955-A86D3C51846A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:pre-7:*:*:*:*:*",
            "matchCriteriaId" : "C2CBE6DD-56CD-4B0A-8FB3-3EC05359F9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:pre-8:*:*:*:*:*",
            "matchCriteriaId" : "A5BFE778-4B17-4C2C-8B35-6D71C953DC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:-pre1:*:*:*:*:*",
            "matchCriteriaId" : "A243E5E7-78F3-4C99-8A43-9312D72D7D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:-pre2:*:*:*:*:*",
            "matchCriteriaId" : "B3148015-A85A-4EB8-BB89-32E0E480B5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:-pre3:*:*:*:*:*",
            "matchCriteriaId" : "C88F1AC4-7FFA-48E9-B2F1-4F6A40763801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:-pre4:*:*:*:*:*",
            "matchCriteriaId" : "5483CE1C-1ADC-43DA-A9FB-B24CEA005A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:-pre5:*:*:*:*:*",
            "matchCriteriaId" : "B2106174-8D1B-47C7-83DE-FAED8B005B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:-pre6:*:*:*:*:*",
            "matchCriteriaId" : "A3FF5D34-0201-4E5A-B10E-C5BB94E49E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:-pre1:*:*:*:*:*",
            "matchCriteriaId" : "7FD53989-7B6B-48D9-AE72-442EAE6B1D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:-pre4:*:*:*:*:*",
            "matchCriteriaId" : "EB2E5A41-AB5F-430D-81EC-D16DBF328894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:-pre7:*:*:*:*:*",
            "matchCriteriaId" : "EAF784B6-FFB6-4199-81E5-4037612C6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:-ow2:*:*:*:*:*",
            "matchCriteriaId" : "520A71D8-47A1-4A73-B7BF-EC0806FA44FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:-pre9:*:*:*:*:*",
            "matchCriteriaId" : "FD63C70B-5D7F-4781-BB40-7B20D20D9835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:-ow1:*:*:*:*:*",
            "matchCriteriaId" : "4C949622-A808-4312-B207-070B936C97FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre1:*:*:*:*:*",
            "matchCriteriaId" : "ABF7B810-A31F-4CF4-B79A-94FEB32FFA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre2:*:*:*:*:*",
            "matchCriteriaId" : "E570983E-3FEC-4088-B060-6095BFB7CD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre3:*:*:*:*:*",
            "matchCriteriaId" : "365CADA0-6FC8-424C-8B1C-62ECCC0650E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre4:*:*:*:*:*",
            "matchCriteriaId" : "40EFDC05-BABC-491D-AC13-0ACA7A0CB5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre5:*:*:*:*:*",
            "matchCriteriaId" : "79CFAD9A-FFE9-475E-98D0-9BFF1EC38AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "965725B8-8501-4C33-9B7F-4AC2865616B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED02D9F-6BEE-475F-B080-6F712E176A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550DFE6E-DCE6-4649-8746-522996021DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:-pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A60608B-048D-4EE9-9DAE-0ABFE7B8F75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17BB496-749A-40C8-BAA9-6CFBBE308065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:-pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "A605B506-3609-4E7F-BA2A-0E308272D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:-pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "031C4F91-7CF7-4857-83E5-A3878B1F2187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C30F255-1297-46EA-9FBC-05564792FF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33:p-re1:*:*:*:*:*:*",
            "matchCriteriaId" : "76B2AF49-E732-40B2-9A95-9163189AE076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1757C19-B231-423F-95E9-F9DF1D76FC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934CBC22-864C-468F-B267-3CDE4449DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC432E3-7214-4B61-A666-2DAF5CCAEC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7682650A-8332-484D-874F-2B67246880B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFF499A-6602-4BD3-90B5-E6C4AC888812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843F73D0-2296-45E7-B5D7-BC8C63A8D99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C406D55-D6CF-443B-B5DB-FC69FBEA01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C53EDB2-923D-4860-8251-9A07C9F8FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2A5D6B-7011-40AE-8A94-02B062B19010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E283E518-3A3E-4D39-B11F-E4B71D6ADF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB58C532-186F-4C1F-A107-1BF17C19AA15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A31F446-FB7E-4D6C-8703-0A730E2C71AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BA2E08-09BC-4EE4-822E-0F6FEF92E721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.35.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97AA815F-E07C-4989-B190-D5E52451D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.35.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFCA2ED-2384-4DB7-9634-AEAEDFF57817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.35.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C171597-F06E-48BA-A897-E753ECBEE68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.35.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E0D1AD-E8B0-4125-BCA7-8487D9490EBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.35.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99F78D3-A2FA-4033-8E21-FE3FFCE9D94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E5B7B-A31B-44A1-92CF-D88E118545D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC24F28-2C48-43D7-B8FB-7DCF499C9627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B549FD-5315-4DB1-8A3B-76B2E28DDDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E506CC5-BB82-423E-A99A-F77A4C8CA26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37:-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5561C408-CFDD-47F7-A430-ADF47007F8E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B075A26C-356F-41A5-A2AB-4AB130F4B503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE7521F-BC6A-470A-AF3D-36E9243330E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E510D6-5ED5-4EF8-BEFB-B84FDCF44F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6FEE93-0FCB-4289-9F76-540A1E48950F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A8E327-3DFD-4109-93EB-23A5C12ED933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD9B5D95-0E69-4A33-8A6E-B6FF852A8866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17504",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17541",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17648",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015434",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/20676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15365",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2359",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/219-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to inject arbitrary web script or HTML via the topics_offset parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13501C0-3322-4D0C-8F7F-12535C76CB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1489E8DC-11E7-49A3-84FF-909954147D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035EEFAB-B46C-407F-BF8C-B33756D4EEC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://moritz-naumann.com/adv/0003/tikiw/0003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17521",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416152/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15371",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0003/tikiw/0003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416152/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via an invalid topics_sort_mode parameter, possibly related to an SQL injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13501C0-3322-4D0C-8F7F-12535C76CB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1489E8DC-11E7-49A3-84FF-909954147D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035EEFAB-B46C-407F-BF8C-B33756D4EEC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://moritz-naumann.com/adv/0003/tikiw/0003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17521",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416152/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0003/tikiw/0003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416152/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Antville 1.1 allows remote attackers to inject arbitrary web script or HTML via the notfound.skin error document."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antville:antville:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6709DF7E-1EE3-46A3-B641-0ECB56D2991A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113156739212557&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0004/antvxss/0004.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17520/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15372",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113156739212557&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moritz-naumann.com/adv/0004/antvxss/0004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17520/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:litespeed_technologies:litespeed_web_server:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "254E798D-6FE9-4080-B2AE-40C4C633F059"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17587",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/unixfocus/6S00I1FEKY.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/unixfocus/6S00I1FEKY.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-20T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action (view.php) to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arki-db:arki-db:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81924762-8518-46D6-B48E-C6919F946BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arki-db:arki-db:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6B4044-E8A7-4AE5-B861-37E38845C4C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://addict3d.org/index.php?page=viewarticle&type=security&ID=5268",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17627",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15467",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://addict3d.org/index.php?page=viewarticle&type=security&ID=5268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uresk_links:uresk_links:2.0_lite:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB9822B9-65B1-45C1-A7F7-131394A44E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17625",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Easy Download allows remote attackers to bypass authentication via edit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_easy_download:php_easy_download:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120876AF-D63E-44F6-8B36-47808E8EA800"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17571",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allows attackers to access the phone OS, obtain sensitive information, and cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:senao:si-680h_wireless_voip_phone:1.7.0_firmware_0.03.0839:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A898DA4F-F4A1-4543-AC4D-1C8ED7439434"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038836.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17606",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038836.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that cannot be changed, which allows attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utstarcom:f1000_wi-fi_firmware:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1013A51A-5EAE-4EEA-9058-051B134E02B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utstarcom:f1000_wi-fi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8D25BE-2AAF-4046-AA13-E3891A25653C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17629",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15476",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2472",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username \"target\" and password \"password\", which allows remote attackers to gain full access to the system."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:utstarcom:f1000_voip_wifi_phone:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "216CB879-99BC-492D-A89C-7EEF56BD70F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17629",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow users to disable access to (1) SNMP or (2) the rlogin port TCP 513, which allows remote attackers to exploit other vulnerabilities such as CVE-2005-3716, or execute arbitrary shell commands via rlogin, which does not require authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:utstarcom:f1000_voip_wifi_phone:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "216CB879-99BC-492D-A89C-7EEF56BD70F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17629",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of \"0000\", which allows attackers with physical access to obtain sensitive information and modify the phone's configuration."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BBFE589-8EDC-48DC-81C6-8845875E591A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113217425618951&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17628",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113217425618951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BBFE589-8EDC-48DC-81C6-8845875E591A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113217425618951&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17628",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113217425618951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC706E3-7C59-4142-A99C-7B7B6B6336C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375012B5-4457-4B33-B041-2D6290EDB769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205A7FE1-B5F2-4FA1-9858-413E18B5977A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8366F6CB-8CA5-4A75-BED5-EE66091AD16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BBFE589-8EDC-48DC-81C6-8845875E591A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADD3767-29C7-4DA0-B334-E1AD98762AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5172EE6C-9B8F-4A79-A3B4-C85555536A23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113217425618951&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17628",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113217425618951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC706E3-7C59-4142-A99C-7B7B6B6336C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375012B5-4457-4B33-B041-2D6290EDB769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205A7FE1-B5F2-4FA1-9858-413E18B5977A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8366F6CB-8CA5-4A75-BED5-EE66091AD16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BBFE589-8EDC-48DC-81C6-8845875E591A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADD3767-29C7-4DA0-B334-E1AD98762AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5172EE6C-9B8F-4A79-A3B4-C85555536A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B52CFE1-D1F8-45A7-AE59-30ED8D3E91E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113217425618951&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17628",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113217425618951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which allows remote attackers to modify configuration using CVE-2005-3722, or access the Unidata Shell to obtain sensitive information or cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hitachi:ip5000_voip_wifi_phone:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BBFE589-8EDC-48DC-81C6-8845875E591A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113217425618951&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17628",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113217425618951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:zyxel:p2000w_version_1_voip_wifi_phone:wj.00.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0681881-87D2-46F8-A6DF-A323D2ACB976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:zyxel:prestige_2000w_v.1voip_wi-fi_phone:wj.00.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625CAC3B-ED71-4320-9076-7BCF1CFCC0F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113217443126673&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2476",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113217443126673&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remote attackers to cause a denial of service or hijack Zyxel phones by attacking or spoofing the hardcoded DNS servers.  NOTE: it could be argued that this issue reflects an inherent limitation of DNS itself, so perhaps it should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:zyxel:prestige_2000w_v.1voip_wi-fi_phone:wj.00.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625CAC3B-ED71-4320-9076-7BCF1CFCC0F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113217443126673&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113217443126673&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interspire:articlelive_nx:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E8877B-3358-4C28-A1DD-91660876505B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/20/20833-articlelive-sql.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17585",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/20/20833-articlelive-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in debug/query_results.jsp in Idetix Software Systems Revize CMS allows remote attackers to execute arbitrary SQL commands via the query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revize_cms:revize_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2B0692-D67D-4BCD-81FE-232885E4AD92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17623",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015231",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15481",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote attackers to obtain sensitive configuration information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revize_cms:revize_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2B0692-D67D-4BCD-81FE-232885E4AD92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17623",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015231",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15482",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Idetix Software Systems Revize CMS allows remote attackers to obtain sensitive information via direct requests to files in the revize/debug directory, such as (1) apptables.html and (2) main.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revize_cms:revize_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2B0692-D67D-4BCD-81FE-232885E4AD92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17623",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015231",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the (1) resourcetype, (2) objectmap, and (3) redirect parameters, possibly involving setWebSpace.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revize_cms:revize_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2B0692-D67D-4BCD-81FE-232885E4AD92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17623",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015231",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15484",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to \"certificate chain processing.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349FE3D6-0367-42F0-B467-1BA33D7EBBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4D3578-1ACD-4DEE-BFE5-4181BD40A55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4948DE2-F6EA-404F-A36F-A80721DDB815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309885D3-B1B7-4E54-BBEE-33B5665D2B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2286DF46-1AE1-4BA9-9226-855507E3E4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5753FC86-AA8F-43AF-926A-E1B90402F2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E662C8-D3B7-4AC1-8C12-639B5F2A14E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A85FE6A0-F4CD-404D-9010-6DF2429A5B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB13688-A8E5-4B33-A5EC-C6BC0ECECA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED14B470-5F88-4F47-9FF4-5C217C1EC1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C2D942-8281-4769-B223-A9A72715D63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F78A99-554D-479F-87AC-3891F57788CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8BF4F2-F207-4AF3-80D6-06C46FBFB687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE0ABE3-8EA1-4036-A8A8-5B85CC85ED15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B0FD65-C0DA-42BD-9B3D-7C60EDE34083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06A1AE-16FF-43F0-B8BD-ECEDAE65C4F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C061B4C4-DE42-487E-8BA8-DD10A2339E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C925095E-7BC5-4C8C-8850-4DF510B1BCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yassl:yassl:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C9D93-B27E-4705-A143-5DD5BD432F21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15487",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://yassl.com/release.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://yassl.com/release.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3632",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F53F73-F07D-48A3-B19F-BE0A10BC15A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A654F-2779-4EDB-B3BF-6BB4E60A1B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72046EA-E4D7-42B5-8A5E-E0719D30A063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AE315C-30D3-4FEA-A5A0-00040487E8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:9.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D0B01-B60C-4312-8D23-9DD1A527CD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:9.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A171D13-7A7E-4064-BF96-E99294016AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79F02C3-950F-4D47-971A-3C1367F1642C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17544",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17679",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18186",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-904",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:217",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-843.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15514",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2418",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11165",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/218-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-843.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/218-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3732",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-11-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5630CFB-58BF-4B58-90AB-B44793D91FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "001D8969-A212-4FD5-BF76-0C269EEB0959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA224969-79DD-4908-8B72-ADEEE1126EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7654CC3F-2EA0-484E-BA60-A5051DDB27B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF78AECE-073F-4CDE-B988-47E72637C6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0740E4E3-9888-48E2-B7A3-CF8376FBA90A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/ipsec-tools/ipsec-tools/src/racoon/isakmp_agg.c?r1=1.20.2.3&r2=1.20.2.4&diff_format=u",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0267.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17668",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17822",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17980",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18115",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18616",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18742",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19833",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=9017454&forum_id=32000",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-965",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:020",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_70_ipsec.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436343/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15523",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2521",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9857",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/221-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/ipsec-tools/ipsec-tools/src/racoon/isakmp_agg.c?r1=1.20.2.3&r2=1.20.2.4&diff_format=u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0267.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=9017454&forum_id=32000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_70_ipsec.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436343/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/221-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2339",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-11-21T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), and 1.52(U1) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:msearch:unicode_msearch:1.51_u1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC12278D-F1B3-4E58-B37D-5F7F6F966449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:msearch:unicode_msearch:1.51_u1_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A2D383-5D1A-414D-A637-50255C6F5037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:msearch:unicode_msearch:1.52_u1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A1CA61-A9CF-4F32-B078-498EFEC08E89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2379925E6F/index.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2379925E6F/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-21T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_e:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.0",
            "matchCriteriaId" : "B3347D3B-2EC4-48BE-A7BB-7F9DB06BC29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_j:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "134C4D32-B17D-4964-A6AE-33FEBE50BAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_m:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "9003227E-607A-4DEA-9C53-F9713F091671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_t:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "34005B62-213E-4151-A370-64CD092302E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junose_e:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.0",
            "matchCriteriaId" : "B50B561A-90E2-445B-8F86-0F1C1F6D5CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junose_j:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "0DC7E393-F0CF-4839-A244-F4EF3DBAD2BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junose_m:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.0",
            "matchCriteriaId" : "1B781C0E-A25C-4579-869E-4392F4746E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junose_t:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "0987FBDC-76B7-4BDE-A3FD-9DF34BB95402"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-273756/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the \"add content\" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la página \"add content\" de phpMyFAQ 1.5.3 y anteriores permite a atacantes remotos inyectar 'script' web arbitrario mediante los parámetros (1) thema, (2) username, y (3) usermail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BCB304A-9B0D-4C9F-80FA-5BEDB9753A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E50CE3C-06D9-4543-9966-E277113BAA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A47DF5D-6D36-4C47-9CBB-3FDF383D39E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D1FA39-9778-488F-9582-E37060F3F92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62052CA-95C7-43C9-B65B-C2E01EB0EBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89938096-681A-4D77-8BA2-3F4D0A2424E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8215A5E3-4780-4E45-8B52-F8D00A71D7D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7087AF-0DBF-4287-9B58-EA0C3F9F9134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D419C7-F683-41F5-B8A0-2354F9DDBE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BDAA-4C56-44F8-99E7-FF55283884A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5350F01-DCAE-46D3-82B1-E5A297AA43BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2D8CF4-87AF-47C0-AB37-88F50324AC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F0D935-5A88-457B-959E-4BBC655D3F7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17649",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyfaq.de/advisory_2005-11-18.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417219/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15504",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-004.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyfaq.de/advisory_2005-11-18.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417219/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafriend.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en e-Quick Cart permiten a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro \"productid\" en shopaddtocart.asp, (2) el parámetro \"strpemail\"  en shopprojectlogin.asp, y (3) el parámetro \"id\" en shoptellafriend.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coastal_data_management:e-quick_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688882F7-8F2A-4BE5-824E-535405A8E673"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17652",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015244",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the (1) strgifttoname parameter in shopgift.asp, (2) strfirstname parameter in shopmaillist.asp, (3) strpid parameter in shopprojectlogin.asp, and (4) Custname parameter in shoptellafriend.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en e-Quick Cart permiten a atacantes remotos inyectar 'script' web arbitrario o HTML mediante (1) el parámetro \"strgifttoname\" en shopgift.asp, (2) el parámetro \"strfirstname\" shopmaillist.asp, (3) el parámetro \"strpid\" en shopprojectlogin.asp, y (4) el parámetro \"Custname\" en shoptellafriend.asp.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coastal_data_management:e-quick_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688882F7-8F2A-4BE5-824E-535405A8E673"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015244",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el importador SVG (style.cpp) de inkscape 0.41 a 0.42.2 podría permitir a atacantes remotos ejecutar código de su elección importando un fichero SVG malicioso con valores de hoja de estilos CSS largos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inkscape:inkscape:0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A061EEF7-FBD3-4BBD-BCAA-9F765567C606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inkscape:inkscape:0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57038D30-192C-4899-A705-E951E162B871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inkscape:inkscape:0.42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45441330-3BDD-4F8F-B128-0C431AB9A9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inkscape:inkscape:0.42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4783CB07-5F32-4FF6-85D4-2F3FE21DD75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/inkscape/inkscape/src/style.cpp?r1=1.110&r2=1.110.2.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17651",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17662",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/58",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-22.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15507",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-217-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/inkscape/inkscape/src/style.cpp?r1=1.110&r2=1.110.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-217-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion."
      }, {
        "lang" : "es",
        "value" : "globals.php en Mambo Site Server 4.0.14 y anteriores, cuando \"register_globals\" está desactivado, permite a atacantes remotos sobreescribir variables mediante el 'array' \"GLOBALS\" y llevar a cabo varios ataques, como se ha demostrado usando el parámetro \"mosConfig_absolute_path\" de content.html.php para inclusión remota de PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_site_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4760B9-54F5-493C-A11E-B77DA6EC6C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_site_server:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD99A44A-B0C5-4C4F-A2C5-E887A50D524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_site_server:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB5F323-A895-4392-8801-17A91A3DF23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_site_server:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0ED5902-9239-426B-BAE1-43B0B81D3698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_site_server:4.0.12_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D336F35-29A5-4937-AFD9-A270FBBCAF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_site_server:4.0.12_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99ECD749-5ACB-4322-9176-E2818A375507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_site_server:4.0.12_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93111FE2-AB73-41D4-96B8-6C6FD1C36708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_site_server:4.0.12_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FA85FE-1057-4BA8-B706-7590290E7BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_site_server:4.0.12_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4800B71-007D-41C8-8450-EF06D7920E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_site_server:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE093E4B-37EB-4DB9-A6BD-5C22251E6F88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0520.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://forum.mamboserver.com/showthread.php?t=66154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417215",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426942/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427196/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0520.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://forum.mamboserver.com/showthread.php?t=66154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426942/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427196/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en subheader.php de PHP-Fusion 6.00.206 y anteriores permite a atacantes remotos obtener la ruta completa mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.00.206",
            "matchCriteriaId" : "03E99F80-6543-4A28-885A-DBC8DE47C4DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://myblog.it-security23.net/advisories/advisory-6.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0232.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0237.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17664",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myblog.it-security23.net/advisories/advisory-6.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0232.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0237.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter to options.php or (2) lastvisited parameter to viewforum.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en PHP-Fusion 6.00.206 y anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección mediante \r\n(1) el parámetro \"forum_id\" de options.php, o \r\n(2) el parámetro \"lastvisited\" de viewforum.php.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.00.206",
            "matchCriteriaId" : "03E99F80-6543-4A28-885A-DBC8DE47C4DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://myblog.it-security23.net/advisories/advisory-6.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0232.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0237.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17664",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myblog.it-security23.net/advisories/advisory-6.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0232.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0237.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions."
      }, {
        "lang" : "es",
        "value" : "Almond Classifieds no verifica apropiadamente la contraseña, lo que permite a atacantes sortear las restricciones de acceso.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:almondsoft:almond_classifieds:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E0A5AF-420D-4F14-B5F2-FF7B70D0AD87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15505",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the poll_ident parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Advanced Poll 2.0.3 y anteriores permite a atacantes remotos inyectar 'scritp' web o HTML mediante el parámetro \"poll_ident\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_poll:advanced_poll:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3",
            "matchCriteriaId" : "D26B6FCB-3CD8-4F2F-B55B-3262D3DA2EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_poll:advanced_poll:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A1428F-87C3-4D20-A86E-EEBD68755E55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15506",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via the pollid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en results.php de SimplePolls permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"pollid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplepoll:simplepoll:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21277E11-B29F-416B-B0BA-3CA610B8009D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/21035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15508",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en index.php de phpComasy 0.7.5 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\". NOTA: un examen del código fuente 0.7.5 sugiere que no hay ningún parámetro \"id\" manejado directamente por index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcomasy:phpcomasy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.5",
            "matchCriteriaId" : "A60C2019-A659-4A52-B687-B49F3651D658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcomasy:phpcomasy:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B72B9E0-495E-4389-97BF-3A939F57F758"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/phpcomasy-id-sql-injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17660",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2507",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/phpcomasy-id-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Apache Struts 1.2.7, y posiblemente otras versiones, permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante la cadena de consulta, que no es entrecomillada o filtrada adecuadamente cuando el manejador de peticiones genera un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC81E1A-2779-4FAF-866C-970752CD1828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hacktics.com/AdvStrutsNov05.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0157.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0161.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417296/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15512",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r02c2d634fa74209d941c90f9a4cd36a6f12366ca65f9b90446ff2de3%40%3Cissues.struts.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf482c101a88445d73cc2e89dbf7f16ae00a4aa79a544a1e72b2326db%40%3Cissues.struts.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hacktics.com/AdvStrutsNov05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0157.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417296/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r02c2d634fa74209d941c90f9a4cd36a6f12366ca65f9b90446ff2de3%40%3Cissues.struts.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf482c101a88445d73cc2e89dbf7f16ae00a4aa79a544a1e72b2326db%40%3Cissues.struts.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the start parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en thread.php en APBoard permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"start\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apboard:apboard:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF99A76-8B4C-4105-8720-FC6FCF2153F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417298",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15513",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash (\"%5C\") characters.  NOTE: this might be the same issue as CVE-2006-2758."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Jetty anteriores a 5.1.6 permite a atacantes remotos obtener el código fuente de páginas JSP, posiblemente implicando peticiones de ficheros .jsp con caractéres contra barra URL-codificado (\"%C\"). NOTA: puede tratarse la misma cuestión que en el CVE-2006-2758.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.5",
            "matchCriteriaId" : "95E03CA0-6576-4338-81E9-4FE5A06662B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFAED25-216C-4AB0-BAF4-7ACCC04FFB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2825D2-57A6-4DC7-84DC-608AE123E04A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6500547B-8CDD-4595-AF2D-1A2014B66191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D7BAEA-7F58-4FA3-9F34-CF5CBC4362E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58750CF6-E237-4F28-A446-DE0E882BD6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827C3682-91FA-42D4-A0DD-CC61CB94A9D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45401E9F-9C20-4600-AE6A-CD0A1F30C4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23500C7-2A70-4E28-97E6-13161AE1EBB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8A425F-BBF5-48D2-AD0E-6D97C7808A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916600EC-3D21-4367-878B-8B0E19D10D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4877B638-8D6C-40ED-B6B5-23C8B7787F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "B522D870-8D99-42FB-9F33-4CD314369CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D046A5-C346-4E01-A0B2-0876FD8A3F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A07EEADC-A52B-4F99-9A68-4DED263992BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD72AC80-DA74-4F06-880A-87317917476E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA5A992-A7FF-411F-9D8C-02A08090F9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902C6363-358D-452B-A687-78486B58ABBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279C47D8-6D64-4F70-824F-AA82FDE2BDD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D213EDC8-B7C5-4093-B10B-E7A207F159F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5293F817-6EBB-4B9A-BBA0-852FCC0641B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E067B12-B4D8-4DDB-8F65-63205ABB20E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32EDFC7-58D0-46B6-B946-72AB8C0A7463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD9BC1D-0205-44CC-91BC-6588CDECB800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EEBD3B-19A6-4C35-B823-5F99286FC873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA14BB2-E4C0-494A-98A9-5A9916259583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712FF994-343E-4316-9C6F-B57F95B5FEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C399FBC5-5133-4977-BD55-4AB1C8067CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59244D30-6A90-40D5-8CD7-79EABBC2D58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A004B7E0-158E-49E0-93D8-38B49B2C0448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.b0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218A6DB9-D4A2-4063-B87B-953BDD5360D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4793A285-5346-4812-9C26-271F166C13B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:alpha0:*:*:*:*:*:*",
            "matchCriteriaId" : "2B62ACEB-5F1E-4147-ADB0-B16DFB56171D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "265A00C8-C367-426C-BC5F-DD123F02D461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9EC9F5-A7E9-4118-84A5-068CAD51864B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B6D8AE-47C5-422C-980C-58C60BBDD574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A35F3C2D-DC60-4347-90C1-239B233917A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "21109D6D-063C-4502-BDAB-5D255DAFF8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC65F75-0CD7-4F5A-8BCD-F3F0CD494ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A259BF8E-00DD-4559-9925-FDD7D8C16F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C005200-8957-4A58-B7AE-B645C94C4C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69780249-BE2F-424F-90F6-4CFC43D1DF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD32E82-427E-48F7-8D04-2793C78F855A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2AAA1A-4D81-4B23-88B7-FFD05758A9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9414F1F6-63F9-4F7C-95EF-91CC4322ECE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DE3B94-DF72-4E61-B795-A0CD4A10D349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E5B7F4-5543-43DA-8D26-09AE9D3A74E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E32A34-7C0B-4DF3-8CA7-35057EFD7800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C61055B-E90D-4146-AEF2-B369ACE681CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "453715D7-6E59-432D-B88E-A2573298B35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44D3FB9-7CAA-4D6A-8D69-9E30CA42FFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A70B1E7-48D3-4EEE-9755-CDA6575D1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465F9B9A-C335-4341-A98C-8FECCC018FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DDA3F2-22FA-49EF-8F94-C11495C2CD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E213CE6-0BFE-41DB-82BA-2C6A6D02455C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED8B2C4-1288-4385-B74F-59557F13E1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3511BFF-CFE2-4938-8ACE-3638104CAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36A7783-041F-4FD7-AEE2-5DFCD18E2343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A795AA0C-A893-4BF8-A991-C997AEBF716C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367F4809-D74B-4C05-9AB8-EE89D605A755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93D0813-EC1B-4301-912B-D1C1D4260F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82EC442-85DA-4471-9871-67AFA32E8E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C507301A-FDC0-42A5-A385-A4ADC8D4CD09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843E68E4-CD85-4BCB-8216-034FD1567E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45519B5C-9713-4020-AC9E-95742C585152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E48CA5B-153A-4777-9E26-369C14B00179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843235B9-728A-450B-95D6-1FC694EF6D00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "902945F1-4F11-4577-BD28-BB35E815F125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "20A0597E-CFA6-404C-936E-3A8065FF9145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "40951E40-8E30-465E-B1C0-A0C85ADBE217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "21D5C70A-64E4-434E-93CF-9FC6C510D545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "54D7108A-6CB6-46AC-B9CB-DF33F090C738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "D3254B37-125F-44BA-87B6-0C4DEE0B214C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "78ECE463-E0EA-4691-90CA-E548FCACC4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "F466738D-D94C-4D89-AA2C-BE2E8E16FE1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A320CE-96F5-4B2C-B2C7-7E8A7E5334BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34BBDAF7-EBE4-49B4-860A-3719006FFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8529EC-86A5-444A-8656-760DF95258DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608F3AAA-F5CB-4694-90BB-75C66ACA8755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3A4849-E341-4BE6-84AB-57A24E0922A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE6090A-AD1C-4831-8112-B4462980FAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A840DB6-BAB5-4FA8-B6AE-8DC94A82C791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9094D5D9-B3D4-4050-97C7-6F5FAF49CE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23BF46B5-F614-4074-8C6A-0AE3A8EA3B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2E8FD-6381-43CA-8467-C968DB9A8D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C5F69E-75AF-40A8-9707-F9AEE79A146D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D3A860-1747-47EF-9384-BD83F77E9A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10393155-E386-420A-8699-68A3B49DE29C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9494C7B4-65B0-46E2-B8F4-9325882FCF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EA2E6E-DD73-4245-B9BA-DE7504AC805A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B973C7-CB4D-4E65-8812-19FF963D1D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5620162-7E20-4AC6-BFCD-3302471B21BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B809408-895A-4909-9609-B529C3F9019E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8EEECA-E493-45AE-BF20-466D90628C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB746413-10C2-4A75-9A8A-DEB839140F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94F6250D-6360-4C9F-A124-CF8389084C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0215E5C6-9CC0-41DE-988A-2810ACD8209E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3B5B55-E4D0-4928-B4EA-D95CB28E81AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5705E4-BA21-4320-8230-C6B6C3922338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF706A6-9418-4948-AD1D-989A7A41A464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6196D65-AA3A-46D5-9A59-30846832D4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CB6CA5-FDF5-495F-A631-ED43DC41C2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA22B8BC-52C4-4792-8804-24E5B87F701D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC5AFE5-D0AC-4619-9C60-D151AEDBC27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5689AB8-C02B-4F97-9AC7-A3EDDE7DB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1AA7EE-75BD-4D35-A071-D5F25080CE0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "71684452-6A1D-4023-A10A-D078F24DC7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28F3815-B209-4409-82EA-A083096F56D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A547D1F8-3916-4D78-8ED6-0B2E1EB87BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4CFA43-DC62-42B5-8E96-9D6EFDF73145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "D117126F-306B-44C7-A2BE-0A114E658847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6B826E-E97E-4287-B604-8810F79DDDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "12CE9A9F-1118-4C96-B37B-8D9D9E53228E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "6F0F93DB-CE46-42C9-A059-8F27FCC59FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9D25B8-D48B-43C5-A5AB-3D60C00A6DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE783D81-02E5-4D78-A65C-572A69765D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F236E4-2FB8-434E-A4AE-F5DA7CC94AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F92CFF11-E18D-4D07-81D5-9ACE41084AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54087E79-2212-4B35-A631-6C15AC70D413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E22496A-C88C-47D5-9F29-29CB184A626C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139D9B00-5FDB-48E1-AFB3-098184E73318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1512F40A-E056-42BD-A733-CBA4929CD2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE25824-2C05-4F96-BA2B-2EE0923CA35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BEAC38-360A-4F4A-B3A2-DA5EF5310ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34896B7F-3BA0-4D14-A6A8-042DDAE4B787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A926CADB-EE62-4F54-9905-A8900103DBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEF6355-DE50-4C9F-B96A-92F35714480B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "866E2E49-24D8-4216-9477-0C949EF8AC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEC910E-A2FA-403D-B59C-AFD2BBFBD088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D9F4F9-89A8-4884-9716-EF9FDA250120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0646AD-13A6-40A4-B06A-9BF6B1B8064A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B71502-C203-41B0-A9F4-652A274660A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A92E5-5779-4C54-B7E7-6A056B3998C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D306CD82-93BB-4CF1-80EB-B567E9155395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAA932D-35F9-4052-A3FA-2FB09ED6A19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03BEBC5F-26C8-480A-B986-64655DED1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1738719-44A2-44D5-973E-F90282A9B9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E912CA35-FCF6-4F06-9974-CCE2F246D570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBA3DFC-F229-49A6-9191-6A3975C18416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.b0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8CCB26-4831-47D4-86B3-D15915E18246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8847B6C-6011-44DC-B97D-9D61354D9F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A5135B-C30A-41A3-9E22-97451AAE1931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583918DB-2E06-4AB0-BCFC-A373C40D72DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "507E24BC-6C1F-4CAC-B942-15293341162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ADAC7B-3CE6-444B-BE8A-35B945B028B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1346595C-0416-40C7-9450-F4F1D17B647C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C1FB85-81DC-44FB-9960-FC7E2BB0B871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07610E5-454A-44A9-B341-B9642FA56EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "30E203AE-92EF-40EA-B7CD-8BFB88B4256E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE29CB8-80EE-4849-ACC1-A42AD07FEA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE47A5EA-A381-497F-B046-CA34A8940886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "900CA07F-B7CE-4809-A6B6-1F24F7C10313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "C39F3BB4-D4B7-4512-A86B-CB771233DD95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "6A333033-ACCB-4E0C-AF00-C419DEADEC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "EE935CEE-7B99-42EE-AE64-5EBCB776B20D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB0FA4D-E6B1-4495-9D48-245D584F6DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8D7C9F-5E0E-491B-A585-81BC09CA1893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5ABD34-B873-425B-A518-AABB7998C3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D448AAA-51AC-4374-9E31-4FE78C65DF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.b0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1F5F9A-A55C-4FBA-8D79-1C84F3C8E2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5579C03D-B65E-4579-B549-01C1BD339EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.d0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63404EA-0893-487F-AAEC-EF477E7B5B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.d1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE7F716-4C1B-4BF9-BC5C-B44CFA797412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.d2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737FCDCE-43BB-4DE4-8082-E501EE26BA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C11BF71-05F5-471A-ACB7-9E0BF740487E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D274307-4D78-4F4E-8F0C-2CE51D4EF0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "60C25402-0A69-470B-8C9F-580BCC8E704A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4AC5EC-4EE1-4641-A2D7-8D80E53A3800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD698C-9DB0-4D41-98D9-286DABB51CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F92C801-9C82-4174-A65E-9B6E9D97F5DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBDAE22-A78D-43EC-BC66-07A571DCB995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE25A6C-CAEE-463A-A0B4-763058A5F199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93784446-870F-4714-A18C-EE7CF09E9A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.4:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6F6DA2-FF77-45C7-82DB-7699ED4AB1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B32D70B-89DD-4A48-AEBC-0E6E93354808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51419B6C-A11C-4080-A8EE-FDB6E21269A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F37AA5-2602-42BC-9CB0-C6E53335D897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.8_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28527C05-D797-4E26-8BC9-57DD30F3F5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E758E39E-4CAA-438A-B21A-00826C4000CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "829F2EA3-DF4F-4329-96EC-F8DDFD3018A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4FE910-DF31-4CF9-9D20-6D4CD847D423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8F5AB5-8402-49C5-A28D-433B0227DD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "A64CB9CA-BBA1-4863-B54E-1097C8E3851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B933981-DE49-4407-BCD5-E5FAC0583B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "42385DC4-BE2D-4156-8B65-EB0860A36EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB54339-FADF-47F5-B171-7F5E50CCA4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6437A8AB-462B-4C4E-B189-58026AE78804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1339AF7-DCCF-449A-A875-AF0AB5118569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "0499A6D8-43CB-49AA-A1E7-0EE28956E894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C12E374-9B1B-4952-9631-14143261E938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BAE0E2-B245-46D8-AA11-D9BF40158A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.15:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "C6446496-9842-4677-8076-E3A720D37100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "535ADA05-0809-4631-8CFD-ED22711995CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8649DCC7-2A43-419C-AAD1-10290034A923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06E26FA-88DF-4F05-B08B-B0D760844453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2218730A-4DC2-492B-A1ED-7721D53CA1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27BC968-7D4B-4661-9316-DA548BD0F52E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.20:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "E926E761-FD3A-4156-8365-2FA3433D22F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E87A10C-A28D-46C8-B11D-301451FA969C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174E3F20-6784-485A-922F-676FFE5BF406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B09CD0-9523-4333-BD5E-B8DF4AF201B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.23:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "E47CE334-8E29-4063-8957-BAA83B49FDED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B098A9-F324-49A0-9ACB-3E22D9C9F7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.24:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE4C864-32A3-4507-977B-64D583AF74E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E062D526-F046-4CC4-85B5-68AAF90F50AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A6E02-1969-4F4F-82B6-7508C86FB9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE48DB9C-E0B4-403C-8D02-E7C3D6A6EFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D19EB77-8D76-4B64-B715-8F57358CAECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha0:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2DBF03-E810-4AE2-9A71-AEF6EA4E536B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "040585FC-6BE9-4B71-AD86-0D61FDEDB6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "7B891FCB-0633-4C08-B16F-0A664D2DCE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "54292E8D-D579-4589-BA95-E451C5C8E555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0FB14F-7024-4E40-9F02-CE368A813E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5AAAABB-E5FA-4459-BDEE-FF9CD52CAF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "5884BEE2-3697-4B0E-83E5-1A198323B878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A569C44-3A0B-4909-B649-4CF2E4933DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7904365A-D0A6-4D28-9FAB-341FE331B075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "23A02116-6B1A-4F9F-8A63-C241ABD070D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70C6274C-1F51-4FDD-BEC2-46B282F1F1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DAACAF6-7CA4-40A2-A9D0-65671FCC56E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E4471A-F016-4B23-A67E-BF25953D325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A39819-5A0A-4413-9803-11451AF0143D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AAA2A-0601-4ACD-BD48-369C95626A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C4BFAA-1661-4EAA-840E-AC95B99E39D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "54CE8D50-4F58-4857-8580-84EAD15B73B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8911C3D3-CE91-4F09-AFAF-F27AEA70D744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF1A9C9-8F21-4A10-A801-AA29BC8AA509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.2:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EC919B-EA06-48DE-B3FC-C50396232C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A32E32-3E8B-46F4-865E-4FCD9DBD3FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE35011-D35C-4B9C-9A79-962D7DD0DB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0591418E-F324-4061-9719-90B64122FC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B367B4F4-4D87-4BDA-B0A1-2603AA85B52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "37E42FDB-3F1C-4810-91F2-2E7292A3C425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FF735C84-651F-4971-A7EE-C73CE79828B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E3BF8D-CE7D-4810-B4C2-F7D1ACC5A350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.4:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "B865666D-3AD2-4F8E-9371-A2CFB40DDE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.5:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "36D7DF04-644D-4DF3-9005-6C52B00D0A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "224559B0-1A22-427A-AB55-51D6E7084617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AAEF6E-A978-4C2A-BBCB-1726C76E4DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.11:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "785057A7-9ECA-4A8C-8497-3AC344D69BD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17659",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22669",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=372086&group_id=7322",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15515",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2515",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=372086&group_id=7322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en el módulo de búsqueda de Tru-Zone Nuke ET 3.2, y posiblemente versiones anteriroes, permite a atacantes remotos ejcutar comandos SQL de su elección mediante el parámetro \"query\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tru-zone:nukeet:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2F14C5-6990-49F8-B009-1017D717096B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tru-zone:nukeet:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF251E2C-EA78-4C4B-88AB-35A1077BC4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tru-zone:nukeet:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362853AC-2DA6-4A6E-856D-8615266B95EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/11/nuke-et-search-module-query-variable.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17638",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21002",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15519",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2516",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/11/nuke-et-search-module-query-variable.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified \"absolute path vulnerabilities\" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "\"Vulnerabilidades de ruta absoluta\" no especificadas en el comando \"diagela\" (diagela.sh) de IMB AIX 5.2 y 5.3 tienen impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17474",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015212",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78800&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78801&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78926&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2392",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78800&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78801&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78926&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters (backticks) in a URL that another product provides in a command line argument when launching Opera."
      }, {
        "lang" : "es",
        "value" : "Opera anterior a 8.51 en sistemas Linux y Unix permite a atacantes remotos ejecutar código de su elección mediante metacaractérs de 'shell' ('backticks') en una URL que otro producto provee en un argumento de línea de comandos cuando se lanza Opera."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.51",
            "matchCriteriaId" : "B7667829-A033-4153-A997-703668EF5C2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0677.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16907",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18111",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-57/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/199",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015253",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-10.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/851/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/21003",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417393/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15521",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2519",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0677.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-57/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/851/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/21003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417393/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apsis:pound:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.3",
            "matchCriteriaId" : "74C9DD01-8352-4591-8C78-040A48834545"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18367",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18381",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20215",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20510",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.apsis.ch/pound/pound_list/archive/2005/2005-10/1129827166000/index_html?fullMode=1#1129827166000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-05.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_19.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.apsis.ch/pound/pound_list/archive/2005/2005-10/1129827166000/index_html?fullMode=1#1129827166000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ldapdiff before 1.1.1 has unknown impact and attack vectors, related to \"ldapdiff.conf path construction\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ldapdiff:ldapdiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "72C0EB81-D269-4651-8F1A-4D6EB332533E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://webtomware.rhoen.de/ldapdiff-1.2.1.tar.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://webtomware.rhoen.de/ldapdiff-1.2.1.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oops) via certain IPSec packets that cause alignment problems in standard multi-block cipher processors.  NOTE: it is not clear whether this issue can be triggered by an attacker."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=5194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=5194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via the proxystylesheet variable, which will be executed in the resulting error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:mini_search_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DADCA8-2FA0-4170-AB18-6256E2BBFC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:search_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F926EE9D-3C4C-429F-9961-8B31A88494A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://metasploit.com/research/vulns/google_proxystylesheet/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17644",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015246",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20978",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417310/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15509",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/google_proxystylesheet/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417310/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to determine the existence of arbitrary files via a relative path from a style sheet directory, then comparing the resulting error messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:mini_search_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DADCA8-2FA0-4170-AB18-6256E2BBFC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:search_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F926EE9D-3C4C-429F-9961-8B31A88494A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://metasploit.com/research/vulns/google_proxystylesheet/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17644",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015246",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20977",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417310/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15509",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/google_proxystylesheet/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417310/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine open and closed ports."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:mini_search_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DADCA8-2FA0-4170-AB18-6256E2BBFC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:search_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F926EE9D-3C4C-429F-9961-8B31A88494A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://metasploit.com/research/vulns/google_proxystylesheet/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17644",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015246",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20979",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417310/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15509",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/google_proxystylesheet/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417310/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as (1) system-property, (2) sys:getProperty, and (3) run:exec."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:mini_search_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DADCA8-2FA0-4170-AB18-6256E2BBFC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:search_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F926EE9D-3C4C-429F-9961-8B31A88494A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://metasploit.com/research/vulns/google_proxystylesheet/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17644",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015246",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20981",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417310/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15509",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/google_proxystylesheet/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417310/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:mini_search_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DADCA8-2FA0-4170-AB18-6256E2BBFC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:search_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F926EE9D-3C4C-429F-9961-8B31A88494A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://metasploit.com/research/vulns/google_proxystylesheet/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17644",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015246",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417310/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/google_proxystylesheet/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417310/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3759",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) gzip/tar and (2) css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8695C97E-2E1A-480D-9DC9-8AD981B72CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0CF9DF-AD61-458E-B421-4A8A286D501C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB79656-9923-4360-97DA-1A45CB7CD2B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10D5E41-1C2C-4AD7-B172-D09F02CC9130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5BC2A4-5F78-413A-B12D-7B901DDDF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C10EAB2E-1E4C-4BBE-8E0C-9DE80CB2123D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61320CF4-7945-41EA-872F-017D7AE03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64629495-1CFD-4831-87BF-8C5EFACE1073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB4BE889-59D4-46FB-AB59-02E6D427E54E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CE13CB-7F98-4AB5-970D-564A192D4143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7B6F5D-813B-48D2-85D4-C310D87E8581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF3B9E5-23C4-4236-BDA4-E5A65E35AF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064985D4-266B-4EEF-9BA2-B4F6EF22665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03528181-D73F-473B-BA15-9052228690BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C592CD2-2836-4892-BB78-E794E5169009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E41299B1-934C-4CD8-A956-D12EFA0B1916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D3EBB9-CB0F-4C5A-BED1-0DF781197E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A94F9F-C39E-4A31-87DD-CA1248FAC299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0116F7F-D0EF-4E1A-97F8-F9D8BD0364EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94B640CC-3623-4D11-A542-02A401AC814D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC11155-F78F-4C6A-B5CF-AA757996320A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BDB951-607D-4502-85E3-0629F958B0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF82BE80-C62C-4E1A-8AB9-5773E49142B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DEABE1-B6C4-4C6F-A098-D5BC9F3C65A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E486E1-3BC7-444A-8BBB-6571CCF44E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8E2B1E-C3C7-466D-982C-36FC51D0BE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E3B91F-F391-4126-832C-C5582F5D6FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2912428D-9A74-48C2-8866-669355CAB535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A17589E-AAD1-432A-A5E3-623A8EF66572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA1F0BF-6F17-4062-86B0-83EEDA5EAC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505DFF07-4F63-4A0E-87E4-DC899F345307"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.horde.org/archives/announce/2005/000232.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17599",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17703",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-909",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-20.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417436/30/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15535",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2536",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000232.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417436/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in the BBOORB module in IBM WebSphere Application Server for z/OS 5.0 allows attackers to cause a denial of service (ABEND)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0:*:z_os:*:*:*:*:*",
            "matchCriteriaId" : "72F933CA-57D7-41BF-AF99-DA95D47FC46D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17658",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK13936",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK13936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to inject arbitrary web script or HTML via (1) Javascript in forms produced by the form generator or (2) the parameters to the installer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09503570-A3FD-4692-87F8-795D2F07ACF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03041476-37D5-4DEB-8392-42806DF3DC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44A782D-CEA9-4C60-B855-D6CBEFF68C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D560E5-82C3-4E4F-8F7A-757BA5F464FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8675231-650C-4653-9C8D-7BE79DE83E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09503570-A3FD-4692-87F8-795D2F07ACF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03041476-37D5-4DEB-8392-42806DF3DC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44A782D-CEA9-4C60-B855-D6CBEFF68C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D560E5-82C3-4E4F-8F7A-757BA5F464FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8675231-650C-4653-9C8D-7BE79DE83E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers to obtain sensitive information.  NOTE: this might be resultant from an absolute path traversal vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09503570-A3FD-4692-87F8-795D2F07ACF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03041476-37D5-4DEB-8392-42806DF3DC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44A782D-CEA9-4C60-B855-D6CBEFF68C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D560E5-82C3-4E4F-8F7A-757BA5F464FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8675231-650C-4653-9C8D-7BE79DE83E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involving injection of HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09503570-A3FD-4692-87F8-795D2F07ACF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03041476-37D5-4DEB-8392-42806DF3DC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44A782D-CEA9-4C60-B855-D6CBEFF68C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D560E5-82C3-4E4F-8F7A-757BA5F464FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8675231-650C-4653-9C8D-7BE79DE83E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09503570-A3FD-4692-87F8-795D2F07ACF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03041476-37D5-4DEB-8392-42806DF3DC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44A782D-CEA9-4C60-B855-D6CBEFF68C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D560E5-82C3-4E4F-8F7A-757BA5F464FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8675231-650C-4653-9C8D-7BE79DE83E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access control even though certain permissions are specified, which allows attackers to access the pages by browsing uploaded files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09503570-A3FD-4692-87F8-795D2F07ACF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03041476-37D5-4DEB-8392-42806DF3DC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44A782D-CEA9-4C60-B855-D6CBEFF68C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D560E5-82C3-4E4F-8F7A-757BA5F464FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8675231-650C-4653-9C8D-7BE79DE83E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows remote attackers to upload and execute PHP files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09503570-A3FD-4692-87F8-795D2F07ACF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03041476-37D5-4DEB-8392-42806DF3DC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44A782D-CEA9-4C60-B855-D6CBEFF68C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D560E5-82C3-4E4F-8F7A-757BA5F464FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8675231-650C-4653-9C8D-7BE79DE83E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3531",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miklos_szeredi:fuse:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1523A90C-1372-4BE1-AA85-216F06D1DB0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miklos_szeredi:fuse:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D11519-8B49-4DAF-AE88-2B8452DCFDA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miklos_szeredi:fuse:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5D92B1-A258-433E-ACA8-2535153DAE1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miklos_szeredi:fuse:2.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E247AA97-481F-41F9-B688-7D3C61660F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miklos_szeredi:fuse:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0ADC-AEB4-4001-BF6F-02B18347537E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17691",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17695",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-17.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:216",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15529",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2529",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:enterprise_firewall:8.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "F66D6BB6-2355-4644-8A18-725F9E970EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:enterprise_firewall:8.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "055150B1-5B11-48D1-932C-26C85DF44E07"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:firewall_vpn_appliance_100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5851263-81A6-40AE-8486-E919D5279CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:firewall_vpn_appliance_200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0D3199-365E-4D26-8D23-6492832EF096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security_300:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F982965-056D-4253-9CEA-31424AF4B55F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security_400:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF372CA-8FC2-47DD-A3A1-E437CC7D80CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security_5000_series:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2362A590-7443-4E50-8F8F-D89165B4F2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security_5100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82B2D6F-EF56-4B62-9784-CF826AC480CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security_5300:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDDB133-A6C8-45B4-9988-3D3D2F3952E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security_5310:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DA55C0-AD93-429D-AC52-E1E0F35C25D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security_5400:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA896DF0-76AD-4CEE-9FE0-5E6758FC9A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17684",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.11.21.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015247",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015248",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015249",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.11.21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_download_manager:php_download_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B301F9E7-C73B-46DB-AF7B-EBD56193F1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_download_manager:php_download_manager:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F366BA-18DC-491F-9717-D24374331794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_download_manager:php_download_manager:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6E3921-9C9D-4839-8E1F-4ADFE1B7C4C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/22827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15517",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the subject in a post, or the user parameter to (2) profile.php and (3) mail.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppost:phppost:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB62BCD2-2D9B-4E7D-ACE7-1815163E97B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/168/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17706",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417434/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15524",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2533",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://irannetjob.com/content/view/168/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417434/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) \"GET and other variables\" and (2) \"SEF\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9709F901-EDD2-4369-89F0-8AF3A63655E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17675",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/499/66/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15526",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/499/66/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the (1) Itemid variable in the Polls modules and (2) multiple unspecified methods in the mosDBTable class."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9709F901-EDD2-4369-89F0-8AF3A63655E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17675",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/499/66/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15526",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/499/66/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Joomla! before 1.0.4 has unknown impact and attack vectors, related to \"Potential misuse of Media component file management functions.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9709F901-EDD2-4369-89F0-8AF3A63655E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17675",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/499/66/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15526",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/499/66/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of \"meaningless data,\" or (3) a TTL that is one less than needed to reach the internal destination."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10C3812-2BA0-4DE3-8793-8F89AD342E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508DECFB-F334-409F-911B-BF8D842D3556"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038971.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038983.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_security_notice09186a0080624a37.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20051122-pix.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/853540",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417458/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426991/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427041/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038971.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038983.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_security_notice09186a0080624a37.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20051122-pix.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/853540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417458/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426991/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427041/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in pollvote.php in PollVote allows remote attackers to include arbitrary files via a URL in the pollname parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pollvote:pollvote:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52DBC83F-752F-4ECC-9E4F-EB0D95F1FDCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113199182125058&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17574/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15439/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2430",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113199182125058&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17574/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15439/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via (1) the subject field when creating a new thread and (2) information passed to the Reputation system."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:preview_release_2_rev_686:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BB76EE-D834-4CD1-BCB8-4820A72EB0EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113198945111329&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17577/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113198945111329&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17577/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:preview_release_2_rev_686:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BB76EE-D834-4CD1-BCB8-4820A72EB0EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113198945111329&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17577/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113198945111329&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17577/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:preview_release_2_rev_686:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BB76EE-D834-4CD1-BCB8-4820A72EB0EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=4507&pid=27223#pid27223",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17577/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=4507&pid=27223#pid27223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17577/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in xterm for HP-UX 11.00, 11.11, and 11.23 allows local users to gain privileges via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113200458417719&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113200458417719&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17545/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015197",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2414",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113200458417719&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113200458417719&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17545/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in IPUpdate 1.1 might allow attackers to execute arbitrary code via (1) memmcat in the memm module or (2) certain TSIG format records."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipupdate:ipupdate:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D41E97B7-1677-4E7F-AB38-5AF1CA423ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipupdate:ipupdate:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD785AA0-4D47-493C-BDCF-A7A568311A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipupdate:ipupdate:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80916200-EEA0-4445-8829-184634268EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipupdate:ipupdate:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D74886-A685-4465-9028-0D30D783C52F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17681",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=372666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=372666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.named to \"make unnecessary queries.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17460",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015191",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102030-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20752",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102030-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE_THREAD, does not use the thread group ID to check whether it is attaching to itself, which allows local users to cause a denial of service (crash)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git%3Ba=blobdiff%3Bh=fcfc4568b45f3f190ba320b0d5853836921cb8bc%3Bhp=019e04ec065a55d8f28157d3a1f7ba06cafd347f%3Bhb=082d52c56f642d21b771a13221068d40915a1409%3Bf=kernel/ptrace.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git%3Ba=commit%3Bh=082d52c56f642d21b771a13221068d40915a1409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git%3Ba=blobdiff%3Bh=fcfc4568b45f3f190ba320b0d5853836921cb8bc%3Bhp=019e04ec065a55d8f28157d3a1f7ba06cafd347f%3Bhb=082d52c56f642d21b771a13221068d40915a1409%3Bf=kernel/ptrace.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git%3Ba=commit%3Bh=082d52c56f642d21b771a13221068d40915a1409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash) and gain root privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17786",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed0175a462c4c30f6df6fac1cccac058f997739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439623/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2649",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed0175a462c4c30f6df6fac1cccac058f997739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439623/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:linux_eix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "6D75F1C4-95B4-4FA3-941E-37A737DB205C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=112061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17699",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-19.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=112061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200511-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-23T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C0F6C2-8583-4CE7-A95C-59EB4C948F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks_desktops:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79D1539-0284-4861-852D-D07AD9A538F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks_servers:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7306E34-AFF4-40D8-BD03-F199FF5893C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17700",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl4 allow remote attackers to inject arbitrary web script or HTML via (1) the cookie-based login panel, (2) the title parameter and (3) the table creation dialog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3663CE-AF25-4A0A-811E-DE58B7E5D934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDE752A-19A1-4910-9C56-0FDFFA367E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E7577-5F89-4B2C-9C28-A5268B539968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6E3468-78AF-471C-A09E-1ACCC6867256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794AE77E-843C-4CB4-9462-E4FE8C4C2896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE1E983-6EA4-4E0F-B7F8-B0070F8A3752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600D28-5583-4FA2-835F-BCE10813DB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423142/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423142/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service (standby firewall failure) by sending spoofed ARP responses from an IP address of an active firewall, which prevents the standby firewall from becoming active, aka \"failover denial of service.\""
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), Y 7.0(4), cuando corre una configuración Activo/En Espera y cuando la interfaz LAN de reserva falla, permite a atacantes remotos causar una denegación de servicio (fallo de cortafuegos en espera) enviando respuestas ARP suplantadas de la dirección IP de un cortafuegos activo, lo que impide que el cortafuegos en espera se vuelva activo, tcc \"denegación de servicio de reserva\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "15ECB359-7290-4732-96F2-AFCEE21C7899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA2F01C-ECF1-477B-A413-75D0EB817079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC150564-7413-401A-9DD8-8AD773F1D8F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113199814008230&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113201784415859&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17550/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015205",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113199814008230&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113201784415859&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17550/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) form_lang parameter in login.php and (2) the imgdir parameter in random_image.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de atravesamiento de directorios en phpwcms 1.2.5 permite a atacantes remotos leer ficheros arbitrarios mediante un .. (punto punto) en (1) el parámetro \"form_lang\" de login.php y (2) el parámetro \"imgdir\" de randon_image.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwcms:phpwcms:1.2.5_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9634FD91-CA79-4153-AC1A-C34A69057049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113207712719472&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17590/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15436/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113207712719472&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17590/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15436/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in act_newsletter.php in phpwcms 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) i and (2) text parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en act_newsletter.php de phpwcms 1.2.5 permiten a atacantes remotos inyectar 'script' web arbitrario o HTML mediante los parámetros (1) \"i\" y (2) \"text\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpwcms:phpwcms:1.2.5_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9634FD91-CA79-4153-AC1A-C34A69057049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113207712719472&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17590/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15440",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113207712719472&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17590/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP response splitting vulnerability in phpAdsNew and phpPgAds 2.0.6 and earlier allows remote attackers to inject arbitrary HTML headers via adclick.php and possibly other unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de separación de respuesta HTTP en phpAdsNew y phpPgAds 2.0.6 y anteriores permite a atacantes remotos inyectar cabeceras HTML de su elección mediante adclick.php y posiblemente otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.6",
            "matchCriteriaId" : "FE7F04D7-559F-4AFF-8CF5-F086E610A331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgads:phppgads:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.6",
            "matchCriteriaId" : "02936373-3385-4B34-8019-05A27D3ADCE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113208152409526&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17464/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113208152409526&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17464/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en el módulo de Busqueda de PHP-Nuke 7.8, y posiblemente otras versiones anteriores a 7.9 con el parche 3.1, permite a atacantes remotos ejecutar comandos SQL arbitrarios, como se ha demostrado mediante el parámetro \"query\" en un tipo 'stories'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E16D17-B704-4ADA-8F91-B7D96FB52909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1BC17-2A99-495A-B462-D02B66F00D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9A4F5F-31CB-4097-85E9-B08B2530E9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0454.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113210758511323&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17543/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_exploitalert/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425508/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425627/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15421",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-46.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0454.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113210758511323&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17543/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_exploitalert/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425508/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425627/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-46.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to bypass authentication and execute arbitrary SQL commands via the (1) username or (2) password to admin/admin_validate_login, or the (3) login, (4) password, and (5) flag parameters to login_validate.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en AlstraSoft Affiliate Network Pro 7.2 permiten a atacantes remotos sortear la autenticación y ejecutar comandos SQL de su elección mediante los parámetros (1) username o (2) password de admin/admin_validate_login, o  los parámetros (3) login, (4) password, y (5) de login_validate.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:affiliate_network_pro:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265CB451-3957-4F23-8C6E-78B553513B6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113209435819541&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17605/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113209435819541&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17605/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AlstraSoft Affiliate Network Pro 7.2 allows remote attackers to obtain sensitive information via a direct request to scripts such as (1) togateway.php and (2) other unspecified scripts."
      }, {
        "lang" : "es",
        "value" : "AlstraSoft Affilitate Network Pro 7.2 permite a atacantes remotos obtener información sensible mediante una petición directa a 'scripts' como (1) togateway.php y (2) otros 'scripts' no identificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:affiliate_network_pro:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265CB451-3957-4F23-8C6E-78B553513B6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113209435819541&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17605/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113209435819541&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17605/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via (1) the Err parameter in admin/index.php and the (2) firstname and (3) lastname parameters in index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en AlstraSoft Affilite Network Pro 7.2 permite a atacantes remotos inyectar 'scritp' web o HTML mediante (1) el parámetro \"Err\" en admin/index.php y los parámetros (2) \"firstname\" y (3) \"lastnamme\" en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:affiliate_network_pro:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265CB451-3957-4F23-8C6E-78B553513B6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113209435819541&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17605/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113209435819541&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17605/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter.  NOTE: it is not clear from the original report whether administrator privileges are required.  If not, then this does not cross privilege boundaries and is not a vulnerability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático directo en admin_options_manage.php en AlstraSoft Affilita Network Pro 7.2 permite a atacantes ejecutar código PHP de su elección mediante el parámetro \"number\". NOTA: no está claro en el informe inicial si son necesarios privilegios de administrador. Si no, esto no cruza límites de privilegios y no es una vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:affiliate_network_pro:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265CB451-3957-4F23-8C6E-78B553513B6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113209435819541&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17605/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113209435819541&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17605/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in payment_paypal.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary PHP code via the config[basepath] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP remoto en payment_paypal.php de AlstraSoft Template Seller Pro 3.25 permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro \"config[basepath]\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:template_seller:3.25:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "77E3C762-3CFC-402A-AEC6-B6FCE85DEDB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113209710803581&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17603/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15441",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113209710803581&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17603/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary SQL commands via the username field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en admin/index.php de AlstraSoft Template Seller Pro 3.25 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el campo \"username\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:template_seller:3.25:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "77E3C762-3CFC-402A-AEC6-B6FCE85DEDB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113209710803581&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17603/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15442/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113209710803581&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://myblog.it-security23.net/?postid=6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17603/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15442/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpBB 2.0.18 allows remote attackers to obtain sensitive information via a large SQL query, which generates an error message that reveals SQL syntax or the full installation path."
      }, {
        "lang" : "es",
        "value" : "phpBB 2.0.18 permite a atacantes remotos obtener información sensible mediante una consulta SQL grande, lo que genera un mensaje de error que revela la sintaxis SQL de la ruta de instalación completa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E7ED09-FDD7-4FC2-AD0F-4B31E170F3F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113200740718682&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113210133012767&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/achievement_exploitalert/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113200740718682&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113210133012767&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_exploitalert/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Macromedia Contribute Publishing Server (CPS) before 1.11 uses a weak algorithm to encrypt user password in connection keys that use shared FTP login credentials, which allows attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Macromedia Contribute Publishing Server (CPS) anteriores a 1.11 usa un algoritmo de cifrado débil para cifrar contraseñas de usuario en claves de conexión que usan credenciales de inicio de sesión FTP compartido, lo que permite a atacantes obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:macromedia:contribute_publishing_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F27BA4-C4D9-404C-932C-15C3B14DBE92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:macromedia:contribute_publishing_server:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB46674-FD07-4CDB-8F61-062D4B99AA87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17613/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-08.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15438",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17613/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against a subset of the stored key data without performing the more expensive key derivation function (KDF) function, which reduces the search time in brute force attacks."
      }, {
        "lang" : "es",
        "value" : "CounterPane PasswordSafe 1.x y 2.x permite a usuarios locales probar posibles claves de cifrado contra un subconjunto de los datos de claves almacenados sin realizar una función de derivación de clave (KDF) más cara, lo que reduce el tiempo de búsqueda en ataques de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C57891A-6C9F-4AAD-B7BF-07274EFD954C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:1.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDBEF7D-899B-4E69-9CC8-6BF1DAFBCB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703F94CC-3C4B-4277-8659-411EB8086B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:1.9.2-dk_experimental:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A516722F-CA83-4EBA-A649-FCAB7DD06322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:1.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C35C7B7-27FB-4E37-B2F2-7FAF08B33804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:1.9.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FF8A0D-0F5C-4E91-A2FF-5E00F62D1969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:1.9.2b_ppc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB5B9726-442B-4CEF-BF11-FAD313CE9C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:1.9.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828A6392-CD29-4E1E-B01A-DD23F1E92410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:1.9.2c.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4671228-6585-49A9-B11B-68708F06EDDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:1.9.2c.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282EAC0D-536D-436B-98CE-655C76B725F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D7C5ED-0568-4DED-8815-D93CA9D997D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8DB62-9A77-4182-A2D6-9E3949EA8603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC5E3DE-46E2-45CB-B811-C976674A7FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20362768-75FA-46CE-BABA-FD9D47843AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A79273-33B7-437C-8443-A82BC2380B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD1E7F2-150B-481D-ACC6-5B4EF746B4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5A0E88-E94E-4FDE-8D95-CE35527459C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220ACCC1-E1C8-4A98-9E95-1EC6F3D692B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC5F204-D66C-4563-8FDB-FF504057D69D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C629B087-FDE5-4FB4-9533-941CAFA1D244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "890A2AFE-E3CB-4BCB-96C2-DF2EC6819763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316B0240-3E68-4BC6-9E4F-3115A8A73B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6FABCB0-EFA9-4D3C-BE63-0A9C247ADCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7E941B-3D62-4FC5-8604-F027BA57E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6655E78-5643-45E0-8E09-F2BB0AA748D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113217074200452&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113217074200452&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Belkin F5D7232-4 and F5D7230-4 wireless routers with firmware 4.03.03 and 4.05.03, when a legitimate administrator is logged into the web management interface, allow remote attackers to access the management interface without authentication."
      }, {
        "lang" : "es",
        "value" : "Los 'routers' inalámbricos Belkin F5D7232-4 y F5D7230-4 con 'firmware' 4.03.03 y 4.05.03, cuando un administrador legítimo ha iniciado sesión en el interfaz de administración web, permiten a atacantes remotos acceder al interfaz de administración sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:belkin:f5d7230-4:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "655DF82D-E55F-4851-940E-6D9A7BD0DD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:belkin:f5d7230-4:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8C11D7-AA9E-44E1-B9D1-AF65F97DFB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:belkin:f5d7232-4:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8476964D-AA53-4F8A-BD91-3EF8F1AE6412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:belkin:f5d7232-4:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6104FE04-C4C4-4825-9E64-3F399566F8D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0489.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113209977115233&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17601/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15444/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0489.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113209977115233&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17601/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15444/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IP Phone (VoIP) 7920 1.0(8) contains certain hard-coded (\"fixed\") public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Cisco IP Phone (VoIP) 7920 1.0(8) contiene ciertas cadenas de comunidad SNMP fijas que no pueden ser cambiadas, lo que permite a atacantes remotos obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:unified_wireless_ip_phone_7920_firmware:1.0\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "180F4593-7F86-4702-B248-A3D0AB20D675"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:unified_wireless_ip_phone_7920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDDEF21-AD60-4F0C-9F59-BF34788D026B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17604/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015232",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051116-7920.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20966",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15454",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23067",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/17604/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051116-7920.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-24T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IP Phone (VoIP) 7920 1.0(8) listens to UDP port 17185 to support a VxWorks debugger, which allows remote attackers to obtain sensitive information and cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Cisco IP Phone (VoIP) 7920 1.0(8) escucha en el puerto UDP 17185 para soportar el depurador VxWorks, lo que permite a atacantes remotos obtener información sensible y causar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:7920_wireless_ip_phone:1.0\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC49CD76-8263-4F8A-830E-A96F64B180F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:7920_wireless_ip_phone:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B09F198-C6DD-4C9F-9285-DC80C09FBDF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17604/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015232",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051116-7920.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17604/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051116-7920.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-25T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A locking problem in POSIX timer cleanup handling on exit in Linux kernel 2.6.10 to 2.6.14, when running on SMP systems, allows local users to cause a denial of service (deadlock) involving process CPU timers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=25f407f0b668f5e4ebd5d13e1fb4306ba6427ead",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=25f407f0b668f5e4ebd5d13e1fb4306ba6427ead",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-25T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 6.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550DFE6E-DCE6-4649-8746-522996021DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17BB496-749A-40C8-BAA9-6CFBBE308065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-25T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dc15ae14e97ee9d5ed740cbb0b94996076d8b37e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113190437101622&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-231-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dc15ae14e97ee9d5ed740cbb0b94996076d8b37e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113190437101622&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-231-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-25T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows local users to cause a denial of service (hang) via 64-bit mmap calls that are not properly handled on a 32-bit system."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/linux-kernel/2005/Nov/7839.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/hg/linux-2.6/?cs=6d5ffbb49406",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/linux-kernel/2005/Nov/7839.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/hg/linux-2.6/?cs=6d5ffbb49406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-25T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nfattr_to_tcp function in ip_conntrack_proto_tcp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service (kernel oops) via an update message without private protocol information, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=113269476105016&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113269476105016&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-25T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ip_conntrack_proto_icmp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service (kernel oops) via a message without ICMP ID (ICMP_ID) information, which leads to a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=113269476307795&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113269476307795&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-25T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amax_information_technologies:magic_winmail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "69C54601-98DE-42E6-99A3-E410A4493A25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16665",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-58/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15493/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-58/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15493/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "freeFTPd 1.0.10 allows remote authenticated users to cause a denial of service (null dereference and crash) via a PORT command with missing arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F34D7A-D6EB-4818-83AD-0A6B40F4F37E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17737",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417602/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15557",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417602/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service (application crash) by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45540A37-2CBF-453F-8EFF-696B9318499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6DCAFE-CAC2-4B36-B3E1-FA2B490424EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113285451031500&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17740",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417589/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15556",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zur.homelinux.com/Advisories/MailEnableImapDos.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113285451031500&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417589/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zur.homelinux.com/Advisories/MailEnableImapDos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SmartPPC Pro allow remote attackers to inject arbitrary web script or HTML via the username parameter in (1) directory.php, (2) frames.php, and (3) search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitscripts:smartppc_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA3BA80-4BB6-4057-AD67-CD756CE2D797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nightmaresecurity.net/index.php?showtopic=1015",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17736",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5359",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nightmaresecurity.net/index.php?showtopic=1015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in forum.php in Orca Forum 4.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greywyvern:orca_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3b",
            "matchCriteriaId" : "E2C4295D-C117-40FE-AA01-B0788D8D8D72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/orca-forum-43x-msg-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17721",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15565",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/orca-forum-43x-msg-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter or (2) thread parameter in thread mode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "599F223E-AB55-4FB9-9DA5-2E2C9D10B477"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17720",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter in search_result.php, (2) sbres_id parameter in review.php, (3) cid parameter in browsecats.php,  (4) h_id parameter in email.php, and (5) an unspecified parameter to the search module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbiz:web_hosting_directory_script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "C842FB40-BDA6-4077-8B34-8D2DAA138EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/web-host-directory-script-multiple.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17724",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2557",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/web-host-directory-script-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) various input fields, including the contact, lead, and first or last name fields, (2) the record parameter in a DetailView action in the Leads module for index.php, (3) the $_SERVER['PHP_SELF'] variable, which is used in multiple locations such as index.php, and (4) aggregated RSS feeds in the RSS aggregation module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "136EE594-73FB-4218-921E-0F5BEEE9F23B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_232005.105.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417730/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15562",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_232005.105.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417730/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass authentication via the (1) user_name and (2) date parameter in the HelpDesk module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "136EE594-73FB-4218-921E-0F5BEEE9F23B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_232005.105.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417730/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15562",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_232005.105.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417730/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in index.php in vTiger CRM 4.2 and earlier allow remote attackers to read or include arbitrary files, an ultimately execute arbitrary PHP code, via .. (dot dot) and null byte (\"%00\") sequences in the (1) module parameter and (2) action parameter in the Leads module, as also demonstrated by injecting PHP code into log messages and accessing the log file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "136EE594-73FB-4218-921E-0F5BEEE9F23B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113290708121951&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_232005.105.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417711/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417730/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15562",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113290708121951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_232005.105.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417711/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417730/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in vTiger CRM 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via multiple vectors, including the account name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "136EE594-73FB-4218-921E-0F5BEEE9F23B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113290708121951&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417711/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113290708121951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417711/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username in the login form or (2) record parameter, as demonstrated in the EditView action for the Contacts module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "136EE594-73FB-4218-921E-0F5BEEE9F23B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113290708121951&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417711/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113290708121951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417711/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "136EE594-73FB-4218-921E-0F5BEEE9F23B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113290708121951&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417711/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113290708121951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417711/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The uploads module in vTiger CRM 4.2 and earlier allows remote attackers to upload arbitrary files, such as PHP files, via the add2db action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "136EE594-73FB-4218-921E-0F5BEEE9F23B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113290708121951&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417711/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113290708121951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417711/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Comdev Vote Caster 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the campaign_id parameter in a result action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comdev:comdev_vote_caster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "F3911D44-71F8-4C19-B37E-C9B0372D6CD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/vote-caster-3x-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17672",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15563",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/vote-caster-3x-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Ezyhelpdesk 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) edit_id, (2) faq_id, and (3) c_id parameters in a query string, and (4) the search engine, possibly involving the search_string parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezy_helpdesk:ezyhelpdesk:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E02B17-928E-4B5C-9896-CFFE49995E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/ezyhelpdesk-multiple-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/ezyhelpdesk-multiple-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in product_cat in AgileBill 1.4.92 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agileco:agilebill:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.92",
            "matchCriteriaId" : "B87638F5-0668-4AE2-B962-5AA535F05F77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/agilebill-14x-id-sql-injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17723",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015272",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15572",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/agilebill-14x-id-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:knowledgebuilder:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778E063D-9F1F-4C3D-81AD-DB1C3ED0CA8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/activecampaign-knowledgebuilder-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17732",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/activecampaign-knowledgebuilder-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an invalid category parameter, which causes a large number of SQL queries to be processed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:knowledgebuilder:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778E063D-9F1F-4C3D-81AD-DB1C3ED0CA8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/activecampaign-knowledgebuilder-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17732",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/activecampaign-knowledgebuilder-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in ActiveCampaign SupportTrio 1.4 and earlier allows remote attackers to read or include arbitrary files via the page parameter, possibly due to a directory traversal vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:activecampaign:supporttrio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "A7C5E726-DC9D-4CA0-BB79-096730E76D73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/activecampaign-supporttrio-local-file.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17731",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/activecampaign-supporttrio-local-file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in (1) CxZIP60.dll and (2) CxZIP60u.dll, as used in SpeedProject products including (a) ZipStar 5.0 Build 4285, (b) Squeez 5.0 Build 4285, and (c) SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:speedcommander:10.51_build4430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DDD6C4-9A56-479D-8E0B-2FE579C64387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:speedcommander:11.0_build4430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E30983-D8AC-46AE-B779-BCDBC40DF5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:squeez:5.0_build_4285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8A7318-F5C2-4A74-83B5-80BDEFCDF1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:zipstar:5.0_build_4285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC48414-ECB2-42E2-9EBE-F88FA8D1C846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17420",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-60/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015265",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015266",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015267",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417588/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2570",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-60/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417588/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in (1) CxUux60.dll and (2) CxUux60u.dll, as used in SpeedProject products including (a) Squeez 5.0 Build 4285, and (b) SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:speedcommander:10.51_build4430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DDD6C4-9A56-479D-8E0B-2FE579C64387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:speedcommander:11.0_build4430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E30983-D8AC-46AE-B779-BCDBC40DF5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:squeez:5.0_build_4285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8A7318-F5C2-4A74-83B5-80BDEFCDF1C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17420",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-60/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015265",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015266",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015267",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417588/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2570",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-60/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417588/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote attackers to execute arbitrary SQL commands via the song_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30BDD40-CA09-4554-BBE2-613496C841EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E41A5E3-5950-46C8-B131-1A5441CF8074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24AD2A-5939-4956-AB10-AEBC02F802C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9273A6-5096-4D45-A882-3855EFDF9E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB59005-C363-43A6-8EEA-536D4EC9F57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C72869-9711-4A0A-A765-2CB2740B5A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34993A0-D7E5-48C3-B4D3-3C1715E3142A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36EA400E-C3FF-4257-B192-52C41D8BCA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE696D-962B-49B1-8C73-9E56ED22FD1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B28AAB9-7B87-4AD5-A991-A9CE0CEAE2B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D45AA34-03C4-43D0-95CF-9FAE0B6323D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B359908B-462C-41C8-9801-47A58097F2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADD8AF8-F9B5-4F03-98BA-745C4DEFB857"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/tunez-sql-and-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17692",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21062",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15548",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/tunez-sql-and-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30BDD40-CA09-4554-BBE2-613496C841EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E41A5E3-5950-46C8-B131-1A5441CF8074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24AD2A-5939-4956-AB10-AEBC02F802C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9273A6-5096-4D45-A882-3855EFDF9E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB59005-C363-43A6-8EEA-536D4EC9F57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C72869-9711-4A0A-A765-2CB2740B5A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34993A0-D7E5-48C3-B4D3-3C1715E3142A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36EA400E-C3FF-4257-B192-52C41D8BCA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE696D-962B-49B1-8C73-9E56ED22FD1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B28AAB9-7B87-4AD5-A991-A9CE0CEAE2B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D45AA34-03C4-43D0-95CF-9FAE0B6323D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B359908B-462C-41C8-9801-47A58097F2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tunez:tunez:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADD8AF8-F9B5-4F03-98BA-745C4DEFB857"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/tunez-sql-and-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17692",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21063",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15548",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/tunez-sql-and-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:desklance:desklance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "558D17E4-D088-4D55-84B0-F3E1DF2A6432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/desklance-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17730",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2575",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/desklance-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:desklance:desklance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "558D17E4-D088-4D55-84B0-F3E1DF2A6432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/desklance-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17730",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/desklance-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the search module in sCssBoard 1.2 and 1.12, and earlier versions, allows remote attackers to inject arbitrary web script or HTML via the search_term parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:scssboard:scssboard:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE860EAD-17FE-46FF-9455-4E908C966763"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:scssboard:scssboard:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89CD9D3A-9018-4981-9084-66ABCE42A8FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/scssboard-xss-vuln-in-search-param.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17716",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/scssboard-xss-vuln-in-search-param.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) lorder, (2) Priority, (3) Status, (4) Category, (5) searchvalue, and (6) field parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isolsoft:support_center:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3872C4-3A91-4998-BCFE-B9AA24C37B96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/isolsoft-support-center-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17728",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015270",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15570",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/isolsoft-support-center-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SupportPRO Supportdesk allows remote attackers to inject arbitrary web script or HTML via the (1) post tickers and (2) view tickets options."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supportpro:supportdesk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7884DE9-DEF7-4EF9-9DA9-BEC781384D2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/supportpro-supportdesk-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/supportpro-supportdesk-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category_id parameter.  NOTE: due to a typo, an Internet Explorer issue was incorrectly assigned this identifier, but the correct identifier is CVE-2005-3240."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omnistar_interactive:omnistar_live:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "EB840FBD-9DDB-43A7-86AD-0F294B3FE844"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/omnistar-live-id-and-categoryid-sql.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17697",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2561",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/omnistar-live-id-and-categoryid-sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kplaylist:kplaylist:1.6_build_400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2367B44-3747-4CF0-86B4-6B90A9FCEA96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/kplaylist-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17689",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21069",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/kplaylist-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in pdjk-support suite 1.1a and earlier allows remote attackers to execute arbitrary SQL commands via the (1) rowstart, (2) news_id, and (3) faq_id parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdjkeelan.com:pdjk-support_suite:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EA5097-7995-48A2-9FB8-21A68FADE915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/pdjk-support-suite-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/pdjk-support-suite-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in faq.php in Nicecoder iDesk 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicecoder:idesk:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA79CB2-01C6-45C7-9C49-2A7528B31B78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/idesk-catid-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17729",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/idesk-catid-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) poll and (2) category parameters to index.php, and (3) the ctg parameter in an archive action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwordpress:php_news_and_article_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C863F2-9E29-4711-A5D3-62335093DEED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.word-press.net/index.php?&showtopic=76&st=0&#entry181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/phpwordpress-30-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17733",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.word-press.net/index.php?&showtopic=76&st=0&#entry181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/phpwordpress-30-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL commands via the i parameter.  NOTE: the vendor has stated \"EZ Invoice, Inc has a patah available.  Please email support@ezinvoiceinc.com and EZI will email you the patch to fix this small issue.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezinvoiceinc:ez_invoice_inc:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58CCFE50-497F-4CBE-B057-9E2C8301269C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/ez-invoice-inc-v-20-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2596",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/ez-invoice-inc-v-20-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-26T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "203C5CF8-1E9A-4A95-863A-B995AF301ACE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/fantastic-news-category-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/fantastic-news-category-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cause a denial of service (deadlock) by sending a SIGKILL to a real-time threaded process while it is performing a core dump."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.11",
            "versionEndExcluding" : "2.6.13",
            "matchCriteriaId" : "C2484AB1-C807-4CAD-8785-2678C45784A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112430346613450&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112508422716574&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=f6cc7e101c49f356e4c4df5cca1ff352a0f01dd5%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/nptl-signal-delivery-deadlock-fix.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=dd12f48d4e8774415b528d3991ae47c28f26e1ac%3Bhp=ade6648b3b11a5d81f6f28135193ab6d85d621db",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16856",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112430346613450&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112508422716574&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=f6cc7e101c49f356e4c4df5cca1ff352a0f01dd5%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/nptl-signal-delivery-deadlock-fix.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=dd12f48d4e8774415b528d3991ae47c28f26e1ac%3Bhp=ade6648b3b11a5d81f6f28135193ab6d85d621db",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka \"DST leak in icmp_push_reply.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112431016816937&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112439084918917&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112508479212728&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=1cf41a8a8db3080c9a9243e77c5c447c8e694f87%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb94c62c252796f42bb83fe40960d12f3ea5a82a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112431016816937&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112439084918917&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112508479212728&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=1cf41a8a8db3080c9a9243e77c5c447c8e694f87%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb94c62c252796f42bb83fe40960d12f3ea5a82a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Search module in PmWiki up to 2.0.12 allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "D5AD912C-2B2E-4EF9-B797-D03212A999BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBCD728C-520B-4B33-95D7-C0D707C9B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37757C05-8BDD-4C3F-9AA2-42D82E144804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFDB074-6C50-4B59-8FA9-17888551AE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DCC295-2936-434F-972F-2A88FB39669C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6EBCCD-40A4-4FD1-B8EC-A5CC1EA93FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917B98DC-FDA0-4876-8730-354615D90928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F85DBC-9447-4826-BB17-6C19EDBBB581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD57B98-0EC2-4AFA-BE94-1774B98781A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E38076A-69A6-42D0-A563-9A01F979CD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1FDC77-46E2-45DA-A08F-7134B0F550B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D649269D-7AB9-4791-8BE6-CF29CF553103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5C169E-480C-4208-8627-894F10C2FFCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://moritz-naumann.com/adv/0005/pmwiki/0005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17707",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417432/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15539",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0005/pmwiki/0005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417432/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.asp in Online Knowledge Base System (OKBSYS) Lite Edition 1.0 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlinetechtools.com:okbsys_lite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96EA3AC8-04B1-4641-9223-03CAA5BD651F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/okbsys-lite-10-searchasp-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/okbsys-lite-10-searchasp-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.asp in Online Attendance System (OASYS) Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via certain search parameters, possibly the keyword parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlinetechtools.com:oasys_lite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CEEEFB7-ED99-4F5B-85B8-C0AF8A5613A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/oasys-lite-10-searchasp-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/oasys-lite-10-searchasp-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.asp in Online Work Order Suite (OWOS) Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlinetechtools.com:owos_lite:3.0:*:asp:*:*:*:*:*",
            "matchCriteriaId" : "7D547D31-AE52-4C53-8762-7D9D3DFAEE45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/owos-lite-30-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17711",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/owos-lite-30-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category parameters to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solucija:snews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "5B17BEFB-D14C-4A50-BAC0-36E1749FC483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solucija:snews:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6C4381-D028-42E7-8BB1-72F3EDECDD7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/snews-13-sql-injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17688",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/snews-13-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in EasyPageCMS allows remote attackers to inject arbitrary web script or HTML via the cat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easypagecms:easypagecms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E969D6B5-DA01-49F3-B783-694C0928947E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0511-exploits/EasyPageCMSXSS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015211",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0511-exploits/EasyPageCMSXSS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in process.php in 1-2-3 music store allows remote attackers to execute arbitrary SQL commands via the AlbumID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easybe:1-2-3_music_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E9D34B-9E78-4198-9CF7-923F34813857"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/1-2-3-music-store-albumid-sql.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17683",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21074",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15544",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/1-2-3-music-store-albumid-sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL field, which might allow attackers to access other sites."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krusader:krusader:1.60.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6FF252-38EB-49B5-90E2-66C163A58829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krusader:krusader:1.70.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09774EF-A440-4C10-BDCD-467475AAB872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336169",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.krusader.org/phpBB/viewtopic.php?t=1367",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.krusader.org/phpBB/viewtopic.php?t=1368",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.krusader.org/phpBB/viewtopic.php?t=1367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.krusader.org/phpBB/viewtopic.php?t=1368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.15",
            "matchCriteriaId" : "E804B813-54B4-4884-8596-2661DABF954E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113175851920568&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113190437101622&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17786",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17787",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed0175a462c4c30f6df6fac1cccac058f997739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2649",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113175851920568&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113190437101622&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed0175a462c4c30f6df6fac1cccac058f997739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-27T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112508479120081&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112533899509033&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112508479120081&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112533899509033&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/231-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:q-news:q-news:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631DF36C-1AD0-45C6-A5D0-CE8EB5D56AD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17771",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417797/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15576",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417797/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remote attackers to execute arbitrary PHP code via a URL in the athena_dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oliver_may:athena_php_website_administration:0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A347873B-A97E-4D1D-ABB4-3EA7F99612CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=514746",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417796/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15574",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2599",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=514746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417796/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgreetz:phpgreetz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99",
            "matchCriteriaId" : "0B5C860C-4869-4B7F-B077-56D6B6976BB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417798/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15575",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417798/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unalz:unalz:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C8B14B-F233-49A6-93C0-EA76241F0819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unalz:unalz:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92A5AC07-5723-4555-9DF1-F413352FACC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unalz:unalz:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED1D86-9B81-4E29-BE55-17096CAE9A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unalz:unalz:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE6A76E1-1797-45F7-903D-9A7AECB6D592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unalz:unalz:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04EF9DEB-B9FE-4278-8B67-51FDB82A48BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unalz:unalz:0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944CF5DA-906D-4208-ABC6-FCB90BBACB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unalz:unalz:0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB86180C-76D4-48AC-B85C-039176AA830E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unalz:unalz:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60708DFA-27B1-4E53-AB59-EAA2A381208D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unalz:unalz:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26496AB4-46E6-4F44-BC2C-771E2F95E4DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=340842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17774",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kipple.pe.kr/win/unalz/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15577",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=340842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kipple.pe.kr/win/unalz/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ktools:ktools:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "6CC84E5D-A721-4186-8717-206A5A4963DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17768",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18081",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20329",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20368",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20446",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21684",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200512-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-27.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1083",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1088",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417906/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2605",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2062",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zone-h.org/en/advisories/read/id=8480/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200512-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417906/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zone-h.org/en/advisories/read/id=8480/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the cnt parameter.  NOTE: various reports indicate that the affected version is 1.1.3, but as of 2005-11-29, the most recent version appears to be 1.1.2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:berlios:sourcewell:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "196EDA5D-CE72-4904-B65C-B469DFB73BB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/sourcewell-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17673",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/sourcewell-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in AllWeb search 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scripts-templates:allweb_search:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85389DCF-6102-413F-9CF8-878A042D917F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/allweb-search-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17709",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15587",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/allweb-search-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SearchFeed Search Engine 1.3.2 and earlier allows remote attackers to inject arbitrary HTML and web script, possibly via the REQ parameter, which is used when performing a search."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwwsearchsolutions:searchfeed_search_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "39F1BB3D-E4E7-4DD4-9C4E-F44EF49CCE5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/searchfeed-search-engine-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17715",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15612",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/searchfeed-search-engine-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in RevenuePilot Search Engine Script 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the REQ parameter, which is used when performing a search."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwwsearchsolutions:revenuepilot_search_engine_script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "719EA3AE-8C37-4227-84C6-150F568037AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/revenuepilot-search-engine-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17717",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/revenuepilot-search-engine-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term, (2) id, (3) stat, and (4) source parameters to index.php, and (5) through the image parameters with an add request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turn-k:k-search:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "1FF37738-CE6B-4223-A31D-5A1FA9D6A1E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/k-search-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17719",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/13993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15588",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/k-search-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/13993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Google API Search 1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the REQ parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:api_search:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "4615B605-25A5-436F-B3F0-6EFF644FD816"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/google-api-search-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17725",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/google-api-search-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in edmobbs9r.php in edmoBBS 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) table and (2) messageID parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edmobbs:edmobbs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9",
            "matchCriteriaId" : "01864775-C547-4873-A201-049D525A3DF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/edmobbs-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17726",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15589",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/edmobbs-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Joels Bulletin board (JBB) 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) nr parameter in topiczeigen.php, (2) forum and (3) zeigeseite parameters in showforum.php, (4) forum parameter in newtopic.php, and (5) tidnr parameter in neuerbeitrag.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jbb:jbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.9_rc3",
            "matchCriteriaId" : "293A85AB-D7EE-4462-8CF0-7C7BB098F94C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/jbb-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17727",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/jbb-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID parameter in forum.php, and the (2) TOPIC_ID, (3) FORUM_ID, and (4) CAT_ID parameters in topic.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ugroup:ugroup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.2",
            "matchCriteriaId" : "DCA886D4-1626-4FC9-BC67-E16B90B50BEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/ugroup-262-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17734",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15591",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/ugroup-262-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourceshock:shockboard:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA438BD-83BD-4462-8A75-76F3735B7505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourceshock:shockboard:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EAAC00-9978-4FD7-A7ED-35D6C781815B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/shockboard-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17735",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/shockboard-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the p_entry parameter in an entry command to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weaverslave:netzbrett:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "315CE181-3C41-4940-A455-06F5339AE137"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/netzbrett-151-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17742",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15593",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/netzbrett-151-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the messageid parameter in (1) send.php or (2) a delete action in messages.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprise_heart:enterprise_connector:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "6553956A-A815-425E-A3CC-3D449951B3D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/enterprise-connector-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17743",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/enterprise-connector-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in adcbrowres.php in AD Center ADC2000 NG Pro 1.2 and NG Pro Lite allow remote attackers to execute arbitrary SQL commands via the (1) cat and (2) lang parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:td-systems:adc2000_ng_pro:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685A934E-0D6F-4498-A903-E05911074BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:td-systems:adc2000_ng_pro_lite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F8238D-411A-4485-A350-C260E65328CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/adc2000-ng-pro-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17744",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/adc2000-ng-pro-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the (1) folder_id parameter in list.php and (2) mid parameter in a view action to messages.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cafuego:simple_document_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0-cvs",
            "matchCriteriaId" : "44B18220-4A6F-4F92-8D4F-2023721AFAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cafuego:simple_document_management_system:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D97881-809C-4BAB-B0A1-98C748696DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cafuego:simple_document_management_system:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324EE37A-6BC9-4143-B0D4-EE91CAA3E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cafuego:simple_document_management_system:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B408CEF-73A4-45FB-BACD-E5733C78B676"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/sdms-20-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17746",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2614",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/sdms-20-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or include arbitrary files via a .. (dot dot) in the show parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alex_king:php_doc_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "53137A4A-36A9-4265-82CC-95B6C100E541"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/php-doc-system-151-local-file.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17745",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/php-doc-system-151-local-file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sbres_id parameter in (a) details_res.php, (b) refer_friend.php, and (c) report_link.php, and (2) the sbcat_id parameter in (d) showcats.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbiz:resource_repository_script:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22653B7E-F22A-4816-B616-6735180B7FBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/softbiz-resource-repository-script-sql.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17555",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15585",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/softbiz-resource-repository-script-sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in users/comments.php, (2) category_id and (3) id parameters in users/kb.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omnistar_interactive:omnistar_kbase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "506773F9-BD06-457A-A8FF-3349CDB66598"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/omnistar-kbase-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/omnistar-kbase-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in AtlantisFAQ Knowledge Base Software 2.03 and earlier allows remote attackers to execute arbitrary SQL commands via the searchStr parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altantisfaq:altantis_knowledge_base_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.03",
            "matchCriteriaId" : "B29C40E6-1487-4801-82A2-D8F255B71BF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/altantisfaq-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17812",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2624",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/altantisfaq-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faqsystems:faqring_knowledge_base_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "C52D30A4-2558-4928-9372-7AB438548001"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/faqring-30-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/faqring-30-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the \"To\" address argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.php.net/bug.php?id=35307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0276.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17763",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_0.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15571",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.php.net/bug.php?id=35307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0276.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_0.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term and (2) start parameters to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zainu:zainu:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51178062-F881-4439-9141-EC99B07FF36C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/zainu-2x-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15579",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/zainu-2x-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3885",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-11-29T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inkscape:inkscape:0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A061EEF7-FBD3-4BBD-BCAA-9F765567C606"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=321501",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/16343",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17882",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17886",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-916",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14522",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/223-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=321501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/223-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco Security Agent (CSA) 4.5.0 and 4.5.1 agents, when running on Windows systems, allows local users to bypass protections and gain system privileges by executing certain local software."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:cisco:security_agent:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77805E6E-F638-4EAA-A814-AA0D711190DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:cisco:security_agent:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A1657D-BBC9-4CF5-8F5A-486FAC8B9489"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051129-csa.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051129-csa.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2123",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based buffer overflows, as demonstrated using MRBP16::bCheckRecord."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17461",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17498",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015168",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051108b.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/300549",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15352",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-312A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2348",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1063",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1175",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1263",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1546",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A701",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051108b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/300549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-312A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2124",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to \"An unchecked buffer\" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF) format image, aka \"Windows Metafile Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17461",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17498",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securityreason.com/securityalert/161",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015168",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051108a.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051108b.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/433341",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15356",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-312A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2348",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051108a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051108b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/433341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-312A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to (1) cause a denial of service (hang) via an image filename of AUX: sent twice (hang), or (2) write to the LPT1 port via a filename of \"LPT1:\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669DCBF2-8C36-4AC4-8C45-2E36700645FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "It appears to only affects 7.x versions."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code other than 2 and a large size field, which allocates memory for the packet but does not free it after the packet has been dropped."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669DCBF2-8C36-4AC4-8C45-2E36700645FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability probably affects all 7.x versions of Gadu-Gadu prior to 7.20."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code of 6 or 7, which triggers a large number of popup windows to the user and creates a large number of threads."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669DCBF2-8C36-4AC4-8C45-2E36700645FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash and configuration loss) via a page with a large number of gg: URIs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669DCBF2-8C36-4AC4-8C45-2E36700645FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash) via an image filename between exactly 192 to 200 characters, which does not account for the \"imgcache\\\" string that is added to the end of the buffer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669DCBF2-8C36-4AC4-8C45-2E36700645FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a web page that accesses the EasycallLite.oce ActiveX control, which can initiate an outgoing phone call and listen to the microphone."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669DCBF2-8C36-4AC4-8C45-2E36700645FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113261573023912&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17597/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15520/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) user parameter in the Login action, and remote authenticated users via the (2) TicketID and (3) ArticleID parameters of the AgentTicketPlain action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACEE63A-4C9C-46F4-BF73-51C931C046BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE712DC3-5CA0-4157-A501-483BBDBF7B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A777AA53-6900-483D-8C31-F9C415DE9B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CBB470-37A6-4D09-BA71-8EAB8931554E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1D725C-CBE6-49A4-B6FC-3D80E35E0135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63608BED-2700-4EF7-9038-B295FF373FD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113272360804853&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0007/otrsmulti/0007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://otrs.org/advisory/OSA-2005-01-en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17685/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_30_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15537/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113272360804853&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moritz-naumann.com/adv/0007/otrsmulti/0007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://otrs.org/advisory/OSA-2005-01-en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17685/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_30_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15537/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) hex-encoded values in the QueueID parameter and (2) Action parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACEE63A-4C9C-46F4-BF73-51C931C046BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE712DC3-5CA0-4157-A501-483BBDBF7B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A777AA53-6900-483D-8C31-F9C415DE9B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CBB470-37A6-4D09-BA71-8EAB8931554E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1D725C-CBE6-49A4-B6FC-3D80E35E0135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63608BED-2700-4EF7-9038-B295FF373FD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113272360804853&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0007/otrsmulti/0007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://otrs.org/advisory/OSA-2005-01-en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17685/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_30_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15537/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113272360804853&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moritz-naumann.com/adv/0007/otrsmulti/0007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://otrs.org/advisory/OSA-2005-01-en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17685/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_30_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15537/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail attachments as HTML in the browser when the queue moderator attempts to download the attachment, which allows remote attackers to execute arbitrary web script or HTML.  NOTE: this particular issue is referred to as XSS by some sources."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACEE63A-4C9C-46F4-BF73-51C931C046BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE712DC3-5CA0-4157-A501-483BBDBF7B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A777AA53-6900-483D-8C31-F9C415DE9B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CBB470-37A6-4D09-BA71-8EAB8931554E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1D725C-CBE6-49A4-B6FC-3D80E35E0135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63608BED-2700-4EF7-9038-B295FF373FD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113272360804853&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0007/otrsmulti/0007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://otrs.org/advisory/OSA-2005-01-en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17685/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18101",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18887",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_30_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15537/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113272360804853&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moritz-naumann.com/adv/0007/otrsmulti/0007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://otrs.org/advisory/OSA-2005-01-en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17685/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_30_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15537/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla allows remote attackers to cause a denial of service (CPU consumption) via a Javascript BODY onload event that calls the window function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E59CDD-9F95-4E38-95B3-AC5C35075378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113262115201500&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.computerterrorism.com/research/ie/ct21-11-2005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113262115201500&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.computerterrorism.com/research/ie/ct21-11-2005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 2.0.2 allows remote attackers to cause a denial of service (system slowdown) via a Javascript BODY onload event that calls the window function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113278010907401&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113278010907401&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2023-11-07T01:57:56.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3567.  Reason: This candidate is a reservation duplicate of CVE-2005-3567.  Notes: All CVE users should reference CVE-2005-3567 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The automatic update feature in Google Talk allows remote attackers to cause a denial of service (CPU and memory consumption) by poisoning a target's DNS cache and causing a large update file to be sent, which consumes large amounts of CPU and memory during the signature verification, aka BenjiBug."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:talk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08B2281-44CE-43BB-A426-0DC95477A740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038969.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113278119300162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038969.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113278119300162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Macromedia Breeze Communication Server and Breeze Live Server does 5.1 and earlier not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service (instability or crash), as demonstrated using an alpha release build of Flash Player 8.5 (build 133)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:macromedia:breeze:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DEC4DE-FD10-4B57-8B05-D4FB4B985D33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:macromedia:breeze:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6B2F2B-BF14-4D65-A2BA-99C83DBAFE47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:macromedia:breeze:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AF9CF0-164D-41D0-8832-27E857181116"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17611",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015220",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/support/breeze/licensed_support.html#item-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15434",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/support/breeze/licensed_support.html#item-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Macromedia Flash Communication Server MX 1.0 and 1.5 does not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service (instability or crash), as demonstrated using an alpha release build of Flash Player 8.5 (build 133)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_communication_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01519925-C63B-4907-90AD-0CC209534393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_communication_server:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7A929-F8D2-452F-A9BF-8BB0825F9BD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17612",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015219",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-09.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 through 2.4.6.2 allows remote attackers to inject arbitrary web script or HTML via query strings that are included in an error message, as demonstrated using a parameter containing script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723413BA-728C-466C-A529-BA3A23C5D079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE17B7B8-3687-4AAC-BF38-118FCCC3336C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BBC195-1C9E-44DD-AEE1-B9C2294FD049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:2.4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2846F22C-BB09-4BA1-9E13-F8EA39A50120"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113269811630139&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0006/vhcsxss/0006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17704/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21060",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15538",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113269811630139&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moritz-naumann.com/adv/0006/vhcsxss/0006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17704/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "04750697-851D-40E6-B13A-1257FD7CB0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0DF9EC3A-E40C-415B-8BF3-40D3C474AF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "937EEE89-443C-4435-9064-EE228B3CEBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB87D43-2860-43DD-94EE-886D7D75A351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F30BCF2-E6A3-49E9-98BC-7948244C8FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "8966374E-426B-42A7-9D62-9A9A14032390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "634F8387-DFBE-4B78-9063-65737160F13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "923FA413-0F4E-4373-83F9-80DC9CA57D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "A06743B3-2637-47C2-BD1A-28D9F584ED75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399B06AC-E101-48EE-A362-D75F7072FF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F1CF2B-F0B6-45DD-88E1-C0BDF2B973BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "BF5081A4-C1D4-4312-BF0B-DEB47836953B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update1a:*:*:*:*:*:*",
            "matchCriteriaId" : "04FB9247-7DB5-46A1-9E99-C25A729FB5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "218831F9-2C00-4E66-B3B8-B9537C89863F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "50C269C1-8B4F-4622-A937-DABE766C2CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355CB56A-A598-4CD6-9AFB-FE0B09FFC2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63978872-E797-4F13-B0F9-98CB67D0962A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102017-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21225628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/931684",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102017-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21225628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/931684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.1_15 and earlier, 1.4.2_08 and earlier, and JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors, a different vulnerability than CVE-2005-3906.  NOTE: this is associated with the \"first issue\" identified in SUNALERT:102003."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D66D2BCE-FAF5-4F88-A09F-28226C4A98D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "74D5059B-CF4F-4EEE-99B4-B3052831F2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "633A6610-1537-480A-90F5-72234612FDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_02:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1F601DB9-596C-4922-AAA1-601B7DF82AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_05:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6D7E0A15-F9F8-4FE0-99DC-C7F1C4C607DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_05:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2E525A70-8256-4BE9-B9F2-CB4F0005C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_01:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7914F3C3-70D2-4528-8781-74F8EE2A672F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_01:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "C25FD66C-2B23-4A08-95A9-C026B6C7B334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_01a:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4EE03D61-ED9C-4E5A-8B8A-B9DE6D953A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "D60D0903-A74A-4366-9EEE-FE44324A5525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "BA9D3750-C44E-4416-8EF8-EBB3815871DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_02:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FE5001BA-BF6B-431E-B5E6-A0484B31DCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "91C7D131-506C-4AEC-A736-0E4D4C6DFED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "38B09D0A-D9E1-440C-9111-5E04D983F687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "7C3BD547-71C6-4A69-9F98-AD082595B6C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_04:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "66EE3DB6-55B2-44D6-AE20-D6F68294E2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_05:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "4229767D-F6B2-47A2-A1EA-CA86A10ECF17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_05:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "AA641432-0B20-4F91-A9C1-804BBE1E05D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_05:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2A23F13E-57BD-4D8D-A767-5D8BA4F24A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_06:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "88E78DC4-9952-431F-BA3D-32D942D12DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_06:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "3E46AAC2-F345-49E1-B20F-409B53DCAF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_06:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3C3D0367-54C0-4036-A5C6-CEF3ECE01F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_07:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "4F5D90B0-4068-4050-935A-1CBC822521D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_07:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "148EE76E-0382-42CD-89DD-C041BAB35B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_07:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B47BF85-160E-4E5E-9821-9D6BFC1939C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_08:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "361E28B2-6C68-4A3A-A6FB-6F22B93E156A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_08:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "70B4852B-1FD2-4091-B198-848D5FBA2E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_08:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "61507790-D762-4EBE-9937-4AB9785F7A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_09:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "83995857-9FA7-4EB0-B57C-F00DFC39368C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_09:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "CDD623D2-DD7A-4E9A-8A33-5937E5AC5691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_09:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B1DE184-9DF1-4FC1-8BD6-5C21A4BFE120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_10:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6096317E-0F41-4E46-88B9-7D41452D9EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_10:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "CAA2EA6B-DD7F-46C8-8DD7-500C1D14944B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_10:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6877EEEB-095C-441E-8C22-924A46D1ED2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_11:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "D2E36B0B-39F8-4DBA-93E5-0DA310114030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_11:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "DFF02232-A18C-4704-A709-1B4F2105044B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_11:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "575FC35D-01F7-4970-9998-76A42C88904C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_12:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "8872A853-20AE-4D50-BCC6-A2080C943105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_12:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "F4EBD69E-7A0E-4272-87F4-8DA7F5BEEC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_12:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "47B634F8-08B2-4F7D-B6E9-F5C5EDD5FDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_13:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "60806502-5B72-42C3-A5AC-14F4B2944F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_13:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "63D52B5A-B02A-4D01-91A3-C0F16150D21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_13:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E0C02755-BD74-4356-BB73-B2BAA6F12C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_14:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "85FB895E-E7BC-4A85-8367-8A840803B078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_14:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "CE7BD46E-C9E8-4967-B12A-B78F60A365C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_14:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FF6B5858-C653-4D62-936A-D5A14B9D60D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_15:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "F7282DCB-85D3-44A8-9C15-F8F09C1555C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_15:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "130D218A-4367-4361-A484-D74E1C207BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_15:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "7594F055-A4FF-4DA7-AECE-9411C4143DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "96DAF51F-68D8-4462-9DC3-2ECDC026C32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3_05:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "6CB0EEBB-725C-4CBB-8F27-0D497B4DB734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "32CA2101-45D2-41D8-A11A-506683EDC0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "2E449C78-3BFD-4F52-9EE2-3BC5FC27FBCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3C4BAD5A-329C-4C6F-B517-E7C95EEAEB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_01:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "64762803-D970-467D-A3B7-1879BC68E805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "AD97824E-C229-4530-A4E6-C4281E2580C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "B90BBCB8-7DF5-4801-8B43-197C2FB88823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_02:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "666FE53E-C775-4D7D-98E0-C8638B2F2FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "99A889BD-01D8-491E-882A-C65EEF6A952B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "7713E276-D273-4AAB-B6BF-16279354A054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FCE8ADC0-49E9-4F56-9435-F823A1512F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "8FAC216A-01DF-43CF-9430-4E979C950C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_4:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "F9D9F115-8E12-4658-95A6-FF70833DCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "088448A2-83E7-4023-9575-520612B99634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C92F64D1-9916-44AC-8025-F116B70CD76A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "DF21C410-30BF-423D-979F-7B5682573E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BA9FCF82-886A-4C70-8107-FB5BE705DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_01:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "50542C59-E3F7-476F-8938-0316BB3CE46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_01:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "28C890E0-7230-4831-BDD4-B054662FD0C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_01:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "89CF51EF-D1CC-44A7-80D7-954FE9866799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7BD5DADC-20C9-46CE-B190-589DA9813A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E1C99007-713C-4AC4-A819-4C677B876D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_02:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "ADD9EE28-7D16-4CD6-9F33-ECC7073F7FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "342972F6-E888-43E6-B3B5-3B70AC6DB58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "20F9F987-00B1-49D4-970A-98E0CAE05516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "726D5907-547A-492E-9C66-BBA08B12506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "37F8AA83-3B27-4EB5-BC5E-E541248F61F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "A315C2C4-A6ED-4E09-8B36-9903C35438CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "CFEA5E04-78E2-47E6-90B8-536845343084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_01:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "BF931660-BB60-4460-91E4-C4E63E46996D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "3AF426F2-93EF-4F2C-AD0C-8AB40AD72364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "0998DD04-3BC7-4B64-89F5-C6FFECC2F9EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "B6A5803A-4AFF-4120-BF43-55DCE1B11172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6819CEAB-536F-4E4D-8E69-934BD959759C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_04:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "70DEC641-5BC0-45CF-BE6B-3B05E34A2DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_04:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "55AD8FB0-7C9B-4631-B55F-5F0B8AC28431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_04:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B048B00C-C447-4CD9-80E1-FAEEE0390F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_05:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "3F17436E-94D7-40C2-AA1C-947973E8B824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_05:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "3B8B6F66-9D6E-4F64-B4E9-32B46E0B3190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_05:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6C77B29A-160F-44D6-B8E0-AFF4D9F4295F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_08:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "90A18567-96EA-401B-A762-C2C7DFAEEB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_08:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0E804DC2-23CC-458B-A912-728CA1B98AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_08:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6F7FB63E-E198-4CD8-A4A1-EFDB0F2D6C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "04750697-851D-40E6-B13A-1257FD7CB0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0DF9EC3A-E40C-415B-8BF3-40D3C474AF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "937EEE89-443C-4435-9064-EE228B3CEBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB87D43-2860-43DD-94EE-886D7D75A351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F30BCF2-E6A3-49E9-98BC-7948244C8FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "8966374E-426B-42A7-9D62-9A9A14032390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "634F8387-DFBE-4B78-9063-65737160F13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "923FA413-0F4E-4373-83F9-80DC9CA57D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "A06743B3-2637-47C2-BD1A-28D9F584ED75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399B06AC-E101-48EE-A362-D75F7072FF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F1CF2B-F0B6-45DD-88E1-C0BDF2B973BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "BF5081A4-C1D4-4312-BF0B-DEB47836953B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update1a:*:*:*:*:*:*",
            "matchCriteriaId" : "04FB9247-7DB5-46A1-9E99-C25A729FB5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "218831F9-2C00-4E66-B3B8-B9537C89863F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "50C269C1-8B4F-4622-A937-DABE766C2CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355CB56A-A598-4CD6-9AFB-FE0B09FFC2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63978872-E797-4F13-B0F9-98CB67D0962A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18092",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18435",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102003-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21225628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/974188",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2636",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2675",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2946",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102003-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21225628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/974188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vulnerabilities than CVE-2005-3905.  NOTE: this is associated with the \"second and third issues\" identified in SUNALERT:102003."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D66D2BCE-FAF5-4F88-A09F-28226C4A98D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "74D5059B-CF4F-4EEE-99B4-B3052831F2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "633A6610-1537-480A-90F5-72234612FDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_02:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1F601DB9-596C-4922-AAA1-601B7DF82AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_05:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6D7E0A15-F9F8-4FE0-99DC-C7F1C4C607DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_05:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2E525A70-8256-4BE9-B9F2-CB4F0005C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_01:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7914F3C3-70D2-4528-8781-74F8EE2A672F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_01:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "C25FD66C-2B23-4A08-95A9-C026B6C7B334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_01a:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4EE03D61-ED9C-4E5A-8B8A-B9DE6D953A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "D60D0903-A74A-4366-9EEE-FE44324A5525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "BA9D3750-C44E-4416-8EF8-EBB3815871DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_02:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FE5001BA-BF6B-431E-B5E6-A0484B31DCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "91C7D131-506C-4AEC-A736-0E4D4C6DFED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "38B09D0A-D9E1-440C-9111-5E04D983F687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "7C3BD547-71C6-4A69-9F98-AD082595B6C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_04:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "66EE3DB6-55B2-44D6-AE20-D6F68294E2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_05:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "4229767D-F6B2-47A2-A1EA-CA86A10ECF17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_05:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "AA641432-0B20-4F91-A9C1-804BBE1E05D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_05:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2A23F13E-57BD-4D8D-A767-5D8BA4F24A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_06:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "88E78DC4-9952-431F-BA3D-32D942D12DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_06:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "3E46AAC2-F345-49E1-B20F-409B53DCAF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_06:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3C3D0367-54C0-4036-A5C6-CEF3ECE01F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_07:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "4F5D90B0-4068-4050-935A-1CBC822521D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_07:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "148EE76E-0382-42CD-89DD-C041BAB35B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_07:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B47BF85-160E-4E5E-9821-9D6BFC1939C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_08:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "361E28B2-6C68-4A3A-A6FB-6F22B93E156A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_08:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "70B4852B-1FD2-4091-B198-848D5FBA2E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_08:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "61507790-D762-4EBE-9937-4AB9785F7A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_09:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "83995857-9FA7-4EB0-B57C-F00DFC39368C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_09:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "CDD623D2-DD7A-4E9A-8A33-5937E5AC5691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_09:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B1DE184-9DF1-4FC1-8BD6-5C21A4BFE120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_10:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6096317E-0F41-4E46-88B9-7D41452D9EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_10:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "CAA2EA6B-DD7F-46C8-8DD7-500C1D14944B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_10:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6877EEEB-095C-441E-8C22-924A46D1ED2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_11:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "D2E36B0B-39F8-4DBA-93E5-0DA310114030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_11:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "DFF02232-A18C-4704-A709-1B4F2105044B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_11:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "575FC35D-01F7-4970-9998-76A42C88904C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_12:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "8872A853-20AE-4D50-BCC6-A2080C943105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_12:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "F4EBD69E-7A0E-4272-87F4-8DA7F5BEEC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_12:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "47B634F8-08B2-4F7D-B6E9-F5C5EDD5FDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_13:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "60806502-5B72-42C3-A5AC-14F4B2944F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_13:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "63D52B5A-B02A-4D01-91A3-C0F16150D21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_13:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E0C02755-BD74-4356-BB73-B2BAA6F12C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_14:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "85FB895E-E7BC-4A85-8367-8A840803B078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_14:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "CE7BD46E-C9E8-4967-B12A-B78F60A365C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_14:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FF6B5858-C653-4D62-936A-D5A14B9D60D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_15:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "F7282DCB-85D3-44A8-9C15-F8F09C1555C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_15:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "130D218A-4367-4361-A484-D74E1C207BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_15:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "7594F055-A4FF-4DA7-AECE-9411C4143DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "96DAF51F-68D8-4462-9DC3-2ECDC026C32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3_05:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "6CB0EEBB-725C-4CBB-8F27-0D497B4DB734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "32CA2101-45D2-41D8-A11A-506683EDC0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "2E449C78-3BFD-4F52-9EE2-3BC5FC27FBCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3C4BAD5A-329C-4C6F-B517-E7C95EEAEB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_01:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "64762803-D970-467D-A3B7-1879BC68E805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "AD97824E-C229-4530-A4E6-C4281E2580C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "B90BBCB8-7DF5-4801-8B43-197C2FB88823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_02:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "666FE53E-C775-4D7D-98E0-C8638B2F2FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "99A889BD-01D8-491E-882A-C65EEF6A952B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "7713E276-D273-4AAB-B6BF-16279354A054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FCE8ADC0-49E9-4F56-9435-F823A1512F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "8FAC216A-01DF-43CF-9430-4E979C950C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_4:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "F9D9F115-8E12-4658-95A6-FF70833DCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "088448A2-83E7-4023-9575-520612B99634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C92F64D1-9916-44AC-8025-F116B70CD76A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "DF21C410-30BF-423D-979F-7B5682573E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BA9FCF82-886A-4C70-8107-FB5BE705DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_01:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "50542C59-E3F7-476F-8938-0316BB3CE46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_01:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "28C890E0-7230-4831-BDD4-B054662FD0C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_01:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "89CF51EF-D1CC-44A7-80D7-954FE9866799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7BD5DADC-20C9-46CE-B190-589DA9813A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E1C99007-713C-4AC4-A819-4C677B876D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_02:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "ADD9EE28-7D16-4CD6-9F33-ECC7073F7FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "342972F6-E888-43E6-B3B5-3B70AC6DB58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "20F9F987-00B1-49D4-970A-98E0CAE05516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "726D5907-547A-492E-9C66-BBA08B12506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "37F8AA83-3B27-4EB5-BC5E-E541248F61F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "A315C2C4-A6ED-4E09-8B36-9903C35438CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "CFEA5E04-78E2-47E6-90B8-536845343084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_01:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "BF931660-BB60-4460-91E4-C4E63E46996D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "3AF426F2-93EF-4F2C-AD0C-8AB40AD72364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "0998DD04-3BC7-4B64-89F5-C6FFECC2F9EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "B6A5803A-4AFF-4120-BF43-55DCE1B11172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6819CEAB-536F-4E4D-8E69-934BD959759C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_04:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "70DEC641-5BC0-45CF-BE6B-3B05E34A2DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_04:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "55AD8FB0-7C9B-4631-B55F-5F0B8AC28431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_04:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B048B00C-C447-4CD9-80E1-FAEEE0390F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_05:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "3F17436E-94D7-40C2-AA1C-947973E8B824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_05:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "3B8B6F66-9D6E-4F64-B4E9-32B46E0B3190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_05:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6C77B29A-160F-44D6-B8E0-AFF4D9F4295F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_08:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "90A18567-96EA-401B-A762-C2C7DFAEEB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_08:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0E804DC2-23CC-458B-A912-728CA1B98AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_08:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6F7FB63E-E198-4CD8-A4A1-EFDB0F2D6C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "04750697-851D-40E6-B13A-1257FD7CB0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0DF9EC3A-E40C-415B-8BF3-40D3C474AF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "937EEE89-443C-4435-9064-EE228B3CEBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB87D43-2860-43DD-94EE-886D7D75A351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F30BCF2-E6A3-49E9-98BC-7948244C8FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "8966374E-426B-42A7-9D62-9A9A14032390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "634F8387-DFBE-4B78-9063-65737160F13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "923FA413-0F4E-4373-83F9-80DC9CA57D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "A06743B3-2637-47C2-BD1A-28D9F584ED75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399B06AC-E101-48EE-A362-D75F7072FF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F1CF2B-F0B6-45DD-88E1-C0BDF2B973BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "BF5081A4-C1D4-4312-BF0B-DEB47836953B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update1a:*:*:*:*:*:*",
            "matchCriteriaId" : "04FB9247-7DB5-46A1-9E99-C25A729FB5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "218831F9-2C00-4E66-B3B8-B9537C89863F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "50C269C1-8B4F-4622-A937-DABE766C2CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355CB56A-A598-4CD6-9AFB-FE0B09FFC2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63978872-E797-4F13-B0F9-98CB67D0962A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18092",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18435",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102003-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21225628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/974188",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2636",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2675",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2946",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102003-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21225628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/974188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "04750697-851D-40E6-B13A-1257FD7CB0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0DF9EC3A-E40C-415B-8BF3-40D3C474AF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "937EEE89-443C-4435-9064-EE228B3CEBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB87D43-2860-43DD-94EE-886D7D75A351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F30BCF2-E6A3-49E9-98BC-7948244C8FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "8966374E-426B-42A7-9D62-9A9A14032390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "634F8387-DFBE-4B78-9063-65737160F13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "923FA413-0F4E-4373-83F9-80DC9CA57D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "A06743B3-2637-47C2-BD1A-28D9F584ED75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399B06AC-E101-48EE-A362-D75F7072FF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F1CF2B-F0B6-45DD-88E1-C0BDF2B973BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "BF5081A4-C1D4-4312-BF0B-DEB47836953B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update1a:*:*:*:*:*:*",
            "matchCriteriaId" : "04FB9247-7DB5-46A1-9E99-C25A729FB5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "218831F9-2C00-4E66-B3B8-B9537C89863F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "50C269C1-8B4F-4622-A937-DABE766C2CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355CB56A-A598-4CD6-9AFB-FE0B09FFC2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63978872-E797-4F13-B0F9-98CB67D0962A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18092",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102050-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/355284",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2636",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2675",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102050-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/355284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.0.2, allows remote attackers to inject web script or HTML via the query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon_shop:amazon_shop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.0",
            "matchCriteriaId" : "52D579B8-EDE0-4D9C-84FE-D928F7BD9A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon_shop:amazon_shop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.1",
            "matchCriteriaId" : "0A987BB4-2F15-4DD4-A68C-C49046B82C12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/amazon-shop-500-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-May/001603.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15634",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/amazon-shop-500-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-May/001603.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the sortorder parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:post_affiliate_pro:post_affiliate_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.4",
            "matchCriteriaId" : "1ED3026D-6E95-413B-A621-89981108D6A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/post-affiliate-pro-20x-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17751",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15633",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/post-affiliate-pro-20x-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magic_quotes_gpc disabled, allows remote attackers to include arbitrary local files via the md parameter, possibly due to a directory traversal vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:post_affiliate_pro:post_affiliate_pro:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DF0758-0124-4B28-97BB-FF588A493436"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/post-affiliate-pro-20x-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/post-affiliate-pro-20x-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) category parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bosdev:bosdates:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610BF53A-AF03-4E22-957B-D37032EA8A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/bosdates-v40-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17752",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15632",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/bosdates-v40-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, allows remote attackers to cause a denial of service (crash or memory consumption) and possibly execute arbitrary code via format string specifiers in the username parameter to the login form, which is ultimately used in a syslog call.  NOTE: the code execution might be associated with an issue in Perl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.100",
            "versionEndExcluding" : "1.180",
            "matchCriteriaId" : "52FDD9E6-97F7-48AB-ACB8-689E3470143C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.200",
            "versionEndExcluding" : "1.250",
            "matchCriteriaId" : "8A834E83-26D4-4B71-AE8B-46EF532464B0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2005-November/002685.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17749",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17817",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17878",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17942",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18101",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22556",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1199",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.dyadsecurity.com/webmin-0001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-02.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:223",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_30_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418093/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2660",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.webmin.com/changes-1.250.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/uchanges-1.180.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2005-November/002685.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.dyadsecurity.com/webmin-0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_30_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418093/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.webmin.com/changes-1.250.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/uchanges-1.180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the domain alias management in Virtual Hosting Control System (VHCS) 2.4.6.2, related to \"creating and deleting forwards for domain aliases,\" allows users to hijack the forwardings of other users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vchs:vchs:2.4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61589F6-F688-40AC-8AF1-6413A82A8318"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17704",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vhcs.net/new/modules/news/article.php?storyid=17",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vhcs.net/new/modules/news/article.php?storyid=17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via (1) the cl parameter to SubCategory.php and the item_id parameter in (2) ItemInfo.php and (3) ItemReview.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:affcommerce:affcommerce:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28891AA-8EAD-4720-B7B0-C4772D099D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/affcommerce-multiple-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17690",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21070",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21071",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21072",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15545",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/affcommerce-multiple-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in Clavister Client Web allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:clavister:clavister_firewall:8.30.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC56EA3-A0EE-4630-8AA5-30051340BEA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:clavister:clavister_security_gateway:8.40.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C021A7-559F-4071-AA05-C441FF3EA502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:clavister:clavister_security_gateway:8.50.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F9C5BD-7E5F-44CE-8542-711F23B66DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:clavister:clavister_security_gateway:8.60.01_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8B0C1D-2997-4053-90B1-5B2579AB21C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17663",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.clavister.com/support/support_update_ISAKMP.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.clavister.com/support/support_update_ISAKMP.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wsn_forum:wsn_forum:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A3E0F2-2AC7-4681-B3FE-F4F6B6542A05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/wsn-forum-id-sql-injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17694",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15549",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/wsn-forum-id-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the user_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commodityrentals:commodityrentals:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B127D6B-0627-480F-B9CC-15A5A1ECC780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/commodity-rentals-2x-userid-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17665",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/commodity-rentals-2x-userid-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1) threadid parameter to thread.php and (2) userid parameter to profile.php. NOTE: the vendor disputes these issues, saying \"these reports are completely unsubstantial."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ovbb:ovbb:0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7642CC49-27AA-400C-BEA0-8B27D534B749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ovbb:ovbb:0.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86AD1A28-B154-4C21-96A8-E082D9E35325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ovbb:ovbb:0.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88378ED4-C03A-4EC1-B767-FFD3CD3E1BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ovbb:ovbb:0.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3622831-22AA-47CA-AA30-C68EF8F864F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ovbb:ovbb:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB197377-19DB-4646-9CB1-1F2F26F8EBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ovbb:ovbb:0.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D8AFA25-13E3-4115-9C08-26770761498A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ovbb:ovbb:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A11444-0088-41E6-AF91-D779C26DC288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ovbb:ovbb:0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B4E3AD-D481-4892-88D3-4E1E28758E5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/ovbb-sql-vulnerabilities.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15566",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/ovbb-sql-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML via multiple fields in (1) UCP.php and (2) SendPm.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8178A159-1008-4DC9-A7EC-17C051D21896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15573",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal parameter to index.php or (2) id parameter to comments.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:babe_logger:babe_logger:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917BFBBC-8EA1-405B-97C0-65FA3EB0728F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/babe-logger-v2-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17767",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15580",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/babe-logger-v2-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or HTML by (1) packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI /level/15/exec/-/buffers/assigned/dump; or (2) sending the router Cisco Discovery Protocol (CDP) packets with HTML payload that an administrator views via the CDP status pages.  NOTE: these vectors were originally reported as being associated with the dump and packet options in /level/15/exec/-/show/buffers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.3",
            "matchCriteriaId" : "E3C9293E-8A2C-41FA-84F1-25752BA19339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2928F8-6C6B-4C3F-BBE7-EAE8A0C47E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC51475-7819-4C46-AF3C-251520C3EEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)ja5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5538B7E-6AB4-4DB5-920F-EC2BA61DF73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8011951-B642-4706-8936-74DCB59304C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)jk1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6178-F186-40F3-A1AB-51AEAFCB7244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19940BFF-0888-4717-AC5F-87A85BE165A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C4D3D1-5E63-4A1E-BF9B-588FFE5790B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xa4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94D6CD6-3AF5-4CC6-991D-3D8C229A1C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xa5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60704633-BFAB-486F-A613-A806733E9AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5A2A58-D7B2-4018-BAAE-D6CB49A3A709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C268494-F83A-488D-AEE6-AF7D319B6F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484207D7-0AC2-48B6-B86F-182651B6BBB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC53452-31E6-4C9D-88DF-4AD17609DBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xe3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF6C6D9-A2BD-469E-AA75-18C063A435D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xe4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE48276-21BF-4275-8512-4C5401423064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40DD5508-B8BF-435C-B316-42FEDDDBA859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "114B5329-6A76-4BE9-AA57-3463D614D495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC06EA9-D4D9-42EE-8A98-598356707894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)eo1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF2F9E9-AA00-4A78-A32C-14CAA1C171A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DEA47B2-B51E-4C9C-A9C7-DFC680B32986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2530834-81C3-4524-A4F0-B4F77DBAEB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BCC003-3F88-4369-A387-6B8D0FDFBE32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD45AA0-EEE1-43FF-B04D-4063769D71AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7873D1DB-80D0-4076-8716-7618D7161EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF292613-B9BC-4CF1-A6FA-4AFC077D8632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208EF5CB-8131-443A-928B-391104DC1C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3115134B-46F9-40F0-9ABD-3F35EE635EA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)tpc11a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B810AFB-3555-4882-B12B-9DA52AD37AC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B1AF9D-106A-43CB-972C-5E85ADFC355D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C6BBA6-8D45-4BA7-B88E-44D9ECE88009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D460AE-3B86-4178-A9D4-172AD4AF1DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xe4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552EB570-BFD6-4BBE-805B-41A9A5AE35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DFEF95-E48F-4586-9D70-89C192FD21E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E1EA17-0717-4715-9F2E-48264E18885B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACA1E35-3681-4E2C-BAB2-DAD99F24F8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB85916-14A8-4D16-8BE0-D99B8E5B020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC5ED4F-1905-4EAA-8AFF-BC50B879725C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F672CDF2-ACC2-485E-89C6-42E47974C8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C47064-BDD5-4EE7-BAB1-E8FE21EB7DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC204B9A-1C01-4900-B515-5796B0B06E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A06F5D-ADA4-44C6-84EA-7229428B7AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67151B56-DD5F-4384-9651-FA927CE73D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xq1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111C62A4-9DF0-4317-9F95-0112BE24D727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF0189B-964F-46EC-BE5F-8076CFE7AB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5\\)b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691E3441-AF70-4959-BBA0-60F5328F8FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "53430E70-FBAD-42F7-8614-7AB04E566810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B670057C-7A86-4F61-8FF5-88E6BFE2B5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC9F410-782A-416C-9E10-AF43D5BD44FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27107AB2-87AB-4909-9F6D-352BA94F8032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4403BFFB-8A89-4512-8030-5DEDC0C0FF93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38549C-107E-4350-90F2-BA928E3872AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7601422B-1C22-44D2-A398-1586814A9F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B9FEE8-FFBB-46E6-A1EA-A243A0073853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9B4FE3-7A03-430F-AE68-743559D74DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5C4FD2-E4BC-447D-8B3B-0248BFBE9121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BBFB86-2745-4817-9516-50CB08AAA82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F645CEE-083C-412E-BCEF-2761AC266CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CCD5B9-0771-47B3-A280-6566A489A5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56529125-65D8-4900-A741-0AE18852B7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF14EE4-1D49-4E1B-9589-2F3A8BF3E3E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3029C050-D02D-4DA3-B8B9-901F808BBDD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BEADF66-3434-41E0-9527-4D97F1836A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C82EB5-8397-4C0D-8074-7B55D83708B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6735142-065C-4AA2-B78A-FCD7CA8CB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337C0195-34F6-4683-A944-2F698A677476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75901574-5BDD-4388-96F9-A2B4E9970F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBCC011-54AB-4E8E-BC20-68E6F274D323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0A3B5B-4E6B-437A-B355-D9DCDF078201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "689D066C-972F-4868-A6A3-2F5522489D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CA13FE-93EF-414A-A8D5-333D4A5B9320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19F9376-BE29-4F08-B86F-E1634FF750F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68DC1732-CED8-4FA6-9A75-000BABBEA5C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "570AF3F9-D3F5-44B1-82A1-3C7966A27BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7.7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5719F49C-0BCC-40F9-825A-4C3C9D4D2239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21932884-D10B-4C2D-99C5-ED4DE3DA38E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4C56D7-435E-4AE3-BAE8-96A6EAB57488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44A3B72-EFF5-460D-8EE0-13782AAFDB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378FFEBE-3815-4293-943E-86771AB6D63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB99DAF-0BF1-43FE-8263-AF8F5EEA7D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xu2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78D2BD4-CD3F-40D2-8F0F-FC765A9B1ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66A1B2C-D653-4275-ADC5-6298A70C939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76DFDE5D-231C-4B79-85CF-2B2097E12437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6F2B19-7FF1-45E7-91B6-A427343099DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)ya1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F0AD5B-4C2D-4C9D-8207-0A67F9AF995A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91192EA-0320-43D1-8D73-FAD57CC18259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC57A97-0A3C-466F-AA15-5D97AC528503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581D9245-944E-4464-924B-6CB1E874FFEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE205377-1B09-4498-8538-F2B7DF91E579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBBB1FA-5FA9-4042-AE12-F39307C27F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8108DEF0-102A-452B-9B94-D5AAA3918322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4666469-0A0F-4D28-8A1E-39D82ED210CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61130D36-B1EF-41F1-AF14-57475BE25FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yi1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD8A9BF-F084-447C-B28C-2736E8C3A83D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yi3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A515A997-5922-4C07-9C68-0D071E811F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21837255-F23B-488A-A9FB-ED984020147D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F92965-6498-40EC-8AF7-D31466F973A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9417A9B3-CAD8-4E69-9871-484DED263683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39601936-034D-4F48-9F02-0F0E251E34F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3761893-292D-41E8-9800-C888B235E6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EE4026-2A06-4E63-924C-43E663EA47DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF8B6B9-3023-4C33-AFB1-C8C4E1504178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "697C9EFC-7B70-438F-A418-AEFA22841655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF6B0F5-0E61-4ECC-B329-80ABCAED3057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F6275E-146F-4B70-B14C-D857DDA13819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F590204-33CC-4A6A-9C37-380ADC15813A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFFDE0-284E-4107-98DA-C30724E4BF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F50FF-2A42-4BE6-84D8-C6C2A5938125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48ACEA8-6E12-40CF-868B-DE343BEBFE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71775098-8BA1-442F-9709-0BCE255DD773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355DB7C-2E2C-4108-BD0F-361B0B898D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80E065F-ABB5-4824-9C59-A53690B0CD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4E3DC5-0F83-42DE-9482-92DB413DCDE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63FEE13-5E2A-4011-B720-63EFAFF55049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)xl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FACB05-B13D-494E-8AA3-5590391E6F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E27655-2889-4B2A-9C48-ADD48ED5B365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F58FC83-C321-4A9F-8EE2-1531B73E064C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7D8166-6522-437F-AEDE-2AC02913FC87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B805F909-5650-4884-9990-F3776DF203AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C705B7F5-2BE4-45F9-8B5F-9FAC900FF6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5610D63-0E50-4AB3-A6F7-36BCF7F69EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yk1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F5092A-473E-4356-9EFB-9E3EBFCD5F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yk2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF310185-68F5-48BB-8E11-E38E1961B380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E24302-D04B-45D1-AC6A-0CE45F9B9F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723B58EA-9686-425C-99DD-FBECDF6E2225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3EA745A-8AFE-4461-AB53-1FC71E080BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E109B3D5-90BB-45B6-8265-B32465AC85E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)ys1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C441F423-86ED-49DF-8BFC-3CA988C9177A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D39082-D9B4-4AD2-BA93-D688E098F037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F0BFAB-D26C-4D17-B5AB-647780423E8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3B6E-59F6-47B1-BC28-C0B171F1E1F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3FBFC2-0628-4A56-A96C-904807E85B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B69920A-6775-4D3B-81A8-F971875C43D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4093FE1B-3B95-4F25-AAF5-329FEBE0F0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9411EF8-54EF-49CB-BA09-3AE1133D3146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AA815E-CD4A-44D5-A772-93CB340E7998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AB99B6-84C5-426A-A037-5022FD00E6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32302AE-54E2-423A-A418-6C7EAE2CDF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F616AE0-42B4-403B-B610-99DE15EE490D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFCEBBD5-FA7F-4478-8F00-AC6CA598CADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A83281-667D-4D1A-9F76-CFF3E5AD560F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FD8309-111A-45BC-819A-99FE9E002ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C7F308-DB1C-4500-81E4-9E3325D58A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9C9A9-9B90-479A-9D2D-8681056892AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19661048-2B60-437E-9D56-9189BFC4C8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF870144-DFCD-4ADC-A695-3DF9266890EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D389A57A-005E-40B1-8DFC-3347F67F19F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yt1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7CEBAF-65BB-4A89-8C3B-CEF1052D99E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B311DEA-F602-49DA-8208-353D2D33283F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yu1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14407B6-FEC1-4FD8-8359-CA3EC5477B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(15\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD190476-DC7A-4033-9149-062D75704AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(15b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4510B95-F9F7-4407-B00F-F91B352C99C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E236CDE4-3369-4CDF-B0F0-4888610CCFC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B0446-4D8B-414B-B572-84B45D5643AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40FB896-E20C-46B1-BF59-FBB42295F9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB57AAA9-4715-468F-A734-A12209A6069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D480A-80A3-4113-A1A6-194A8DD47F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A310F30-F94D-4A70-94BD-6B94D7B5F5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72732395-1B82-4E4F-9D63-D1CA0C6BD929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A668D08-14C4-4438-A59C-CE60498BEF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56032FBD-FEE7-4B38-B35E-CD277B931DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CF930C-6871-4BCB-8605-B71F82455123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A9B6F-A5D8-403C-9018-0E627FBC9A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2BCA9F-5D56-4EF4-8675-7B76129B994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09698AAF-F4D1-41EE-A960-38FAB645B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B75FC35-2B4D-4CEE-BE71-D497DF787123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8711A47-ABD5-40ED-847A-8D1663E3D819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B65738-134F-4C1A-916B-D6CD6365CB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5331586-8380-4F77-8735-17EC0D0E503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "93024CE7-DBA3-4C25-B7D4-4D2DA6AB880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5769F6-8C69-4AC7-A3E3-75D275B2AC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35536E91-A58D-40F7-A256-34128E64B920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F69329B-4D37-428E-B467-E3B9314A4D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9615B275-5748-46CC-8A77-4A9550A39050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421CD923-6282-4404-A642-C04E1F57F12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADF72EC-43B4-4FC0-9BA0-7CC91D4745B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDB772E-F9A9-4EBA-958F-CDFCB2DA6BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0D6801-E9A8-416B-830B-7682A9AF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B2F9E0-E5FF-42D7-8CEF-359FDDFB4059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10AADAC-4687-4308-8E4F-B7F9549556DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6483CB-7838-45F7-AE28-824AD71172A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051201-http.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.infohacking.com/INFOHACKING_RESEARCH/Our_Advisories/cisco/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417916/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15602",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20051201-http.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.infohacking.com/INFOHACKING_RESEARCH/Our_Advisories/cisco/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417916/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_activescan:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC104885-D18F-49FC-B625-5AF87037BEF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_antivirus:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C870F9D-2A8E-4BF1-8D61-8583B62325DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_antivirus_platinum:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1F7F47-F04D-4D03-9CC3-1F9DE477BD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_businessecure_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4BFA06-88E1-4450-92D9-37A537406998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_clientshield_with_truprevent_technologies:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B46BEE-D9C3-4A3E-8830-B3029D80393C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_enterprisecure_with_truprevent_technologies:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9FFCEF-E7E9-4601-ADEA-743FDEAD396C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_exchangesecure:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0CA579-31B9-4E21-A12E-11386D9BF328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_filesecure:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A78D31-6E6C-447C-AA30-1D3FF2E29E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_filesecure_with_truprevent_technologies:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F9A038-E995-4D69-8713-DCFBB04C9A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_gatedefender:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1508CC87-5D6C-40E5-852E-AFA2720CA33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_isa_secure:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556A2E21-0F3B-474D-82F8-E40F546B913A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_panda_enterprisecure_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2EBC7A-E002-4312-B440-04BCA704FD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_platinum_2006_internet_security:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18154EE6-3BFF-498C-9A6A-77BE75280CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_security:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C5DC7E-F0EA-4C33-BF61-7698FD12F69A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_titanium:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8464DAC4-A199-4D56-A719-8552156E67F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_titanium_2005_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA232ECD-5983-4A7C-AE29-2FF43A8531A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_titanium_2006_antivirus_\\+_antispyware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1CBEFF-9EDD-476E-86BE-7EBFAFA86DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_truprevent_personal:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C201C1B9-40CE-4D32-826D-5A44378F4C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_truprevent_personal:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABC3E00-E5B7-47BE-87F4-55B004083215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_webadmin:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7366EC43-D75C-468F-8E46-C65AC771183B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rem0te.com/public/images/panda.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418096/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rem0te.com/public/images/panda.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418096/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the _versioning_repository_/rollbacklog.xml file, then using it to download and modify the associated ZIP file to edit and republish the site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netobjects:netobjects_fusion:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01027ABB-18F6-487E-BEB7-3238E4A71606"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17667",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.schneier.com/blog/archives/2005/11/possible_net_ob.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.schneier.com/blog/archives/2005/11/possible_net_ob.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL commands via the (1) kategorieid and (2) katid parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:randshop:randshop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7FB80E-68A7-4977-80CE-FC7684D3DF68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00333.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17782",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/112800/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/21213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15599",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/112800/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/21213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) detail[], (2) orderdir, and (3) orderby parameters to find.php, and the (4) id parameter to issue.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_issue_manager:helpdesk_issue_manager:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C38E1C9-9A2F-47D1-A3B8-16A0BFFF02CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_issue_manager:helpdesk_issue_manager:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52949DCC-3D62-42F2-AB2E-E0FF9B15C755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_issue_manager:helpdesk_issue_manager:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF2A597-8979-45D0-BE1D-D01EE73C3C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_issue_manager:helpdesk_issue_manager:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C72B862-5FDD-4CC5-B208-E54A5D08F3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_issue_manager:helpdesk_issue_manager:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AADB5939-ED49-442D-9898-4D2C789E5B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_issue_manager:helpdesk_issue_manager:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E84CF3-6C7F-46E2-9FDA-CFB5EDB76C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_issue_manager:helpdesk_issue_manager:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E621693-2C20-4821-B19A-F77D73A55BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_issue_manager:helpdesk_issue_manager:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8382A61-31A8-4609-8F0C-B925EB159D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdesk_issue_manager:helpdesk_issue_manager:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26F91D7-CCEE-452B-B5C8-F11AB4B80450"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/helpdesk-issue-manager-v09-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17714",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21115",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15604",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/helpdesk-issue-manager-v09-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via the _SERVER[REMOTE_ADDR] parameter, which is injected into a .inc script that is later included by the main script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB6ACA7-793A-4F98-921F-980F13AEA4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63705B10-5468-4004-AE5F-3540ADBB8BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05FA6C5C-F354-4F1A-B716-791CBEF75A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9A9066-D465-4E0C-87E2-4B29426D57E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363699B4-F672-42F0-A511-18DC158F92AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/guppy459_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17790",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015279",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417899/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15609",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/guppy459_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417899/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) the meskin parameter to admin/editorTypetool.php, or the lng parameter to the in admin/inc scripts (2) archbatch.php, (3) dbbatch.php, and (4) nwlmail.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB6ACA7-793A-4F98-921F-980F13AEA4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63705B10-5468-4004-AE5F-3540ADBB8BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05FA6C5C-F354-4F1A-B716-791CBEF75A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9A9066-D465-4E0C-87E2-4B29426D57E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363699B4-F672-42F0-A511-18DC158F92AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/guppy459_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17790",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015279",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417899/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15610",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/guppy459_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417899/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FCCA0BA-C9AB-4E79-B9B8-4BB31BE09296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F795DA5-84CB-4772-BC54-91B1DB760BEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418105/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15619",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418105/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attackers to create directories and overwrite arbitrary files via \"..\" sequences in the module parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xaraya:xaraya:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05A044B-8786-44F3-8772-A3720C090F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xaraya:xaraya:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0ED181-3088-4875-8405-999B1CC9E25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xaraya:xaraya:1.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86692B6-73E1-4279-9EA8-8CDFA36F0A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xaraya:xaraya:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E57EAA-34B8-4F76-8DBB-934768A56C06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/xaraya1DOS.hmtl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418087/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418191/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418209/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15623",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/xaraya1DOS.hmtl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418087/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418191/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418209/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T02:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to execute arbitrary code via unknown attack vectors involving \"validation of URLs.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T02:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in iodbcadmintool in the ODBC Administrator utility in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows local users to execute arbitrary code via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T02:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory master server, allows local users to gain privileges via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T02:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T02:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline (NL)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T02:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in WebKit in Mac OS X and OS X Server 10.3.9 and 10.4.3, as used in applications such as Safari, allows remote attackers to execute arbitrary code via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/29011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/29011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-13_news:n-13_news:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC08695-864B-49BF-8CA3-E0CAD0FFEB33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17785",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418092/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15643",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418092/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp-rider:asp-rider:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1583791-7282-4796-96CA-2BF8D1450404"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17792",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418088/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418088/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in okiraku.php in O-Kiraku Nikki 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the day_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:o-kiraku_nikki:o-kiraku_nikki:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98334CAE-7246-41C4-9B00-1AE4D6204DD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/o-kiraku-nikki-v13-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17795",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15657",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/o-kiraku-nikki-v13-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in 88Script's Event Calendar 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:88script:88script_event_calendar:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C25C579B-01E5-4F3E-98DB-F4ACDAF2889A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/88scripts-event-calendar-v20-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17796",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15658",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/88scripts-event-calendar-v20-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and all other 32-bit versions allows remote attackers to cause a denial of service (application crash) via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B543CCFB-954B-4CCF-8BB7-E64DAFA0C1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E5DA00-5FDC-42DE-955B-E977E62A2B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0C7336-52DC-4E0D-9F6F-9B401B0A93EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96BE1D8-29D3-41F1-9CE9-66D5D8013C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDF9CE6-93A7-49EC-B6B5-428C7517E902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAB70F5-1B1B-426B-A1F9-6D91D0A160B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0A6A97-1EFF-41C0-AAAA-B357C4C801F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014AA70B-942F-4ADE-9EEF-4F5204438268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0BF0A19-0AAD-44B2-9B51-85A985CC40A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A496D973-4BC8-4377-8C84-8F2CB281AEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF752E6-45B4-4D6D-90F8-AA69DB5C2775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15646",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.11.29.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.11.29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) node and (2) art_id parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socketkb:socketkb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "013E9B63-D419-4B8F-9423-8140D0512FDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/socketkb-11x-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17807",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15650",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/socketkb-11x-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files via the __f parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socketkb:socketkb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "013E9B63-D419-4B8F-9423-8140D0512FDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/socketkb-11x-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17807",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/socketkb-11x-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbiz:b2b_trading_marketplace_script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "AD2B2CE3-1E7C-484C-9933-A94B270D341E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17808",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15652",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in (1) index.php, (2) faq_qanda.php, (3) refer_friend.php, (4) print_article.php, or (5) add_comment.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbiz:faq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "3C39EA46-083E-4D6B-AED6-0524C0134E9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17809",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15653",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) perpage, (3) ascdesc, and (4) orderlinks in a displaycat action in (a) index.php; and the (5) id parameter in (b) comments.php and (c) memberlist.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wsn_knowledge_base:wsn_knowledge_base:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "EED030F2-0035-42D0-B585-3D7B70608064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/wsn-knowledge-base-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17810",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15656",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/wsn-knowledge-base-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greywyvern:orca_ringmaker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3c",
            "matchCriteriaId" : "727288CD-D861-42D8-9C5B-B2EED2B03A23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/orca-ringmaker-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17803",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.greywyvern.com/orca#ring",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21194",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/orca-ringmaker-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.greywyvern.com/orca#ring",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greywyvern:orca_blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3b",
            "matchCriteriaId" : "77CBE5DE-4963-42F7-8289-4DA8D00A41CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/orca-blog-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17804",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.greywyvern.com/orca#blog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15638",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/orca-blog-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.greywyvern.com/orca#blog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in knowledgebase-control.php in Orca Knowledgebase 2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greywyvern:orca_knowledgebase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1b",
            "matchCriteriaId" : "432C9E56-B31E-45C9-B6C0-75241469B359"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/orca-knowledgebase-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17805",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.greywyvern.com/orca#know",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15637",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/orca-knowledgebase-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.greywyvern.com/orca#know",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) FAQ_ID and (2) action parameters in (a) viewFAQ.php; and (3) CATEGORY_ID parameter in (b) index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:faq_system:faq_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "BC4C1FAC-6917-4359-A047-8861E56D31F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/faq-system-11-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17801",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21202",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15640",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/faq-system-11-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the SURVEY_ID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faq_system:faq_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "BC4C1FAC-6917-4359-A047-8861E56D31F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/survey-system-11-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17800",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21200",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15641",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/survey-system-11-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/417952/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417952/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.illegalaccess.org/exploit/opera85/OperaApplet.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418201/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418274/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15648",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.illegalaccess.org/exploit/opera85/OperaApplet.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418201/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418274/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in PHP Upload Center allows remote attackers to read arbitrary files via \"../\" sequences in the filename parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sergey_korostel:php_upload_center:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0C5C03-C4B3-4322-9C06-2D76D0E8DDA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://liz0.3yr.net/phpuploadcenter.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/126975",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15626",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://liz0.3yr.net/phpuploadcenter.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/126975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpalbum.net:phpalbum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.3",
            "matchCriteriaId" : "499D1A68-6A2E-46A2-8EF2-913318390665"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/phpalbum-local-file-include-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpalbum.net/dw",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15651",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/phpalbum-local-file-include-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpalbum.net/dw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) startid parameter to activity_log.php, (2) startid parameter to admin_handler.php, (3) template parameter to edit_template.php, and (4) multiple parameters to export_handler.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81651E6E-201C-4513-BFAB-F19A4C1A6E37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17784",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?thread_id=1392833&forum_id=11587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417900/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418286/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/2005/11/28/webcalendar-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?thread_id=1392833&forum_id=11587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417900/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/2005/11/28/webcalendar-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nuauth in NuFW 1.0.x before 1.0.16 and 1.1 allows authenticated users to cause a denial of service via malformed packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nufw:nufw:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94A37D96-5378-4084-B0E3-5839FD6FB0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nufw:nufw:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F4A679-BA94-4E80-B96F-973B5732E5F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nufw:nufw:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3C0C11-3D84-45F4-B00D-51DFD2F327B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nufw:nufw:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D7DF73-9A1F-4BFA-909D-A8AB78E651EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nufw:nufw:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5F3697-21FC-482A-868E-C5DBD46C9FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nufw:nufw:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1102BCC5-0FA0-418D-8FD9-4C83C2C3A670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17754",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nufw.org/+NUFW-1-16-minor-security-fix+.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15645",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nufw.org/+NUFW-1-16-minor-security-fix+.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to execute arbitrary SQL commands via the sid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_labs:survey_wizard:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "829F7BB6-11BB-4EB9-9CDF-1DBDC437F0E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/survey-wizard-sid-sql-injection-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/survey-wizard-sid-sql-injection-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters to viewcat.php, or (3) certain search parameters. NOTE: later a disclosure reported the affected version as 1.0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_labs:top_auction:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F618C49-A7AB-46B6-AFF4-9D9BB5647CD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/top-auction-multiple-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17687",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/466565/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/466569/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2552",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/3456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/top-auction-multiple-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/466565/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/466569/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/3456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere parameter to (1) index.php and (2) download.php, or (3) ckode parameter to baca.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bedeng_psp:bedeng_psp:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE9BBE71-6FC0-4874-BC45-C3FD6CACB270"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/bedengpsp-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17760",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15583",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/bedengpsp-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in blogBuddies 0.3 allows remote attackers to inject arbitrary web script or HTML via the u parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogbuddies:blogbuddies:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3173AFBD-9259-4CF7-9812-C085C0D7F27F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17741",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=514600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15555",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=514600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (2) rss_url parameter to (b) magpie_slashbox.php and (c) simple_smarty.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogbuddies:blogbuddies:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3173AFBD-9259-4CF7-9812-C085C0D7F27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaws:jaws:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6D4750-A567-47D2-A250-574A4FF558DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magpierss:magpierss:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B45ACA6-FB65-435B-A3EB-4948268125D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/JAWS_062_sql.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2015/May/35",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17741",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.jaws-project.com/index.php?blog/show/29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438434/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15555",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/JAWS_062_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2015/May/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.jaws-project.com/index.php?blog/show/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438434/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a comments action and the (2) sortorder and (3) display_num parameters in a news_list action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmanews:dmanews:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81D37F-BD02-4C29-82A2-3B410DAFCFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmanews:dmanews:0.904:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80AA967-C76A-4BB3-A1A6-C378B1E044DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/dmanews-multiple-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17759",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15628",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/dmanews-multiple-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94896556-5D43-4C54-A49C-301511B69EB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17769",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dotclear.net/forum/viewtopic.php?id=12895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dotclear.net/forum/viewtopic.php?id=12895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idcat parameter in a showcat action and (2) the action parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entergal_mx:entergal_mx:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07ADBA47-02EF-495E-A2F1-C64D57D6D0E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/entergal-mx-v20-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17753",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15631",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/entergal-mx-v20-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML via the (1) site, (2) jsref, (3) jsres, and (4) jscolor parameters to pixel.php, which are not sanitized before being included in the logdb.html file, and (5) the search key to stat.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freewebstat:freewebstat:1.0_rev37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E66E98-6A87-481E-ACEA-917AEEA2D26E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17783",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.freewebstat.com/changelog-english.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417902/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15601",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/2005/11/25/free-web-stat/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.freewebstat.com/changelog-english.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417902/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/2005/11/25/free-web-stat/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kadu 0.4.2 and 0.5.0pre allows remote attackers to cause a denial of service (crash or generated traffic) via a malformed message, possibly with incomplete information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kadu:kadu:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17579EA1-6BA8-4179-8B37-14A55BF1D0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kadu:kadu:0.5_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B7B560-BDAC-47B4-ADA3-D89665C5D979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17764",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417920/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417920/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-01T06:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "export_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81651E6E-201C-4513-BFAB-F19A4C1A6E37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17784",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19240",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?thread_id=1392833&forum_id=11587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417900/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/2005/11/28/webcalendar-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2643",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?thread_id=1392833&forum_id=11587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/417900/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/2005/11/28/webcalendar-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3962",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-01T17:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:perl:5.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53F0358E-0722-48A6-A2C6-470229602089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:perl:5.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF69341A-4D00-424E-AD0F-FA7515278770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/007_perl.patch",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/001_perl.patch",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113342788118630&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/17762",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17802",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17844",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17952",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17993",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18075",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18183",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18187",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18295",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18413",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19041",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20894",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31208",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102192-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-943",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.dyadsecurity.com/perl-0002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-01.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ipcop.org/index.php?name=News&file=article&sid=41",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/948385",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:225",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_71_perl.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openbsd.org/errata37.html#perl",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.025-perl.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/21345",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/22255",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-880.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-881.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438726/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438726/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15629",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0070",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2688",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0771",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2613",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1074",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/222-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-legacy-announce/2006-February/msg00008.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/007_perl.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/001_perl.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113342788118630&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102192-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.dyadsecurity.com/perl-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ipcop.org/index.php?name=News&file=article&sid=41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/948385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_71_perl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata37.html#perl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.025-perl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-880.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-881.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438726/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438726/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-legacy-announce/2006-February/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-02T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dc_xd parameter in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94896556-5D43-4C54-A49C-301511B69EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7B92DB-62E4-4F4F-BC57-2C5F646C13CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/1052.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17830",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dotclear.net/forum/viewtopic.php?id=13876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15667",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=8485",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/1052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dotclear.net/forum/viewtopic.php?id=13876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=8485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3964",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-02T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in libUil (libUil.so) in OpenMotif 2.2.3, and possibly other versions, allows attackers to execute arbitrary code via the (1) diag_issue_diagnostic function in UilDiags.c and (2) open_source_file function in UilSrcSrc.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:integrated_computer_solutions:openmotif:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179A8975-398D-4F84-B500-2F8EBCC14BE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113349242925897&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015303",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0272.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418459/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15684",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15686",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2709",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23388",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23389",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9393",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113349242925897&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0272.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418459/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-02T18:03:00.000",
      "lastModified" : "2023-11-07T01:57:57.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-2607.  Reason: This candidate is a duplicate of CVE-2004-2607.  Notes: All CVE users should reference CVE-2004-2607 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.jsp in Java Search Engine (JSE) 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:java_search_engine:java_search_engine:0.9.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17E3FFA-369E-4251-8CD4-F07F7EFAE361"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/jse-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17834",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15687",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/jse-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web script or HTML via the searchQuery.queryString search module parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence:2.0.1_build_321:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC1379E-A654-442C-97F4-D106C674E218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17833",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpx:phpx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6920B22-6513-40CB-889F-49DD4320A01A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpx:phpx:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9152611F-670A-4F41-95C2-69E9F1C13AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpx:phpx:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7400174A-2A9F-4B36-8CBC-7B1AC1F7EDE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpx:phpx:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B92D8E-0351-432F-AC3B-F1F73EBD0685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpx:phpx:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B1B34D-69AD-4044-9486-AD41FAFBC57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpx:phpx:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE95A552-0F5A-4B12-A3E6-FC323EF864E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpx:phpx:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5F7A5D-3AC5-4247-A340-17B494BD7528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpx:phpx:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26764F66-72A4-464B-BB6D-1845600A201C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpx:phpx:3.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11223891-4506-4653-A424-E3EACEB02273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpx:phpx:3.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7184BC-839D-4474-BABD-E47ECE1DFB25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/phpx_359_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17858",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015300",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpx.org/news.php?news_id=139",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418253/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15680",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpx_359_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpx.org/news.php?news_id=139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418253/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in MXChange before 0.2.0-pre10 PL492 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C4A103-AA61-4E90-8BA2-62DC5D456BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26341F1A-E92D-4D3E-B286-B7DC31A94BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1836ED31-F4EB-4284-A954-BBDDAAAD9D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A72A75-E503-4562-BC72-F113BA7A4810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6727947-36B8-4CFE-90AA-828081BBA35F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A5F059-5349-409E-9624-CBEB9456F19F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F3D490-0AF9-44D4-8B26-090617B9A767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87EC072-64AF-4AA1-BFE2-8E8D089194C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17793",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21339",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15672",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/project/shownotes.php?release_id=374590&group_id=89906",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/project/shownotes.php?release_id=374590&group_id=89906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MXChange before 0.2.0-pre10 PL492 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C4A103-AA61-4E90-8BA2-62DC5D456BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26341F1A-E92D-4D3E-B286-B7DC31A94BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1836ED31-F4EB-4284-A954-BBDDAAAD9D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A72A75-E503-4562-BC72-F113BA7A4810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6727947-36B8-4CFE-90AA-828081BBA35F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A5F059-5349-409E-9624-CBEB9456F19F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F3D490-0AF9-44D4-8B26-090617B9A767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxchange:mxchange:0.2.0_pre10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87EC072-64AF-4AA1-BFE2-8E8D089194C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17793",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21338",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15672",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/project/shownotes.php?release_id=374590&group_id=89906",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/project/shownotes.php?release_id=374590&group_id=89906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:metaframe_secure_access_manager:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02CEEF28-CB2C-47A4-A0F1-B6AB9C8A132B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:metaframe_secure_access_manager:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5123FE8-FA68-4844-8F70-ED1F5C1086E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:metaframe_secure_access_manager:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6523EC-2F19-4C9C-9139-483DDCC1667E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:nfuse:1.0:*:elite:*:*:*:*:*",
            "matchCriteriaId" : "27E22341-F1AD-4551-8EA6-7106FA590A21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17819",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.citrix.com/article/CTX108208",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15664",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.citrix.com/article/CTX108208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:extreme_corporate:extreme_search:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "corporate_6.0",
            "matchCriteriaId" : "02B419C2-9039-460D-AD41-61C62FF69112"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/extreme-search-corporate-edition-6x.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17816",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15675",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/extreme-search-corporate-edition-6x.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allow remote attackers to inject arbitrary web script or HTML via various HTML tags and values, such as the (1) legend tag and the value parameter used in (2) label and (3) input tags, possibly due to an incomplete blacklist."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5093F703-13AA-4EEC-8659-C5EB29A54AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68656D9-3EA0-4749-AF1B-2F9B485A02ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEDAA48-3F53-4B13-BB6A-CDC63E3922A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6946291-0F27-4666-95C8-E744800D3EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/files/sa-2005-007/4.6.3.patch",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/files/sa-2005-007/advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17824",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418292/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15677",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/files/sa-2005-007/4.6.3.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://drupal.org/files/sa-2005-007/advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418292/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the \"access user profiles\" permission."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD40E38-71BA-42AD-BEBB-D4AD05ADDF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68656D9-3EA0-4749-AF1B-2F9B485A02ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEDAA48-3F53-4B13-BB6A-CDC63E3922A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6946291-0F27-4666-95C8-E744800D3EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D3F002-92E8-4CBB-8A1D-F8BCD2F782E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/files/sa-2005-009/4.6.3.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/files/sa-2005-009/advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17824",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18630",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-958",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418336/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15674",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/files/sa-2005-009/4.6.3.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/files/sa-2005-009/advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418336/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-3312. NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in Drupal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5093F703-13AA-4EEC-8659-C5EB29A54AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68656D9-3EA0-4749-AF1B-2F9B485A02ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEDAA48-3F53-4B13-BB6A-CDC63E3922A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6946291-0F27-4666-95C8-E744800D3EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/files/sa-2005-008/4.6.3.patch",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/files/sa-2005-008/advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17824",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418291/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15663",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/files/sa-2005-008/4.6.3.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://drupal.org/files/sa-2005-008/advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418291/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duamazon:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED29566-25BE-4983-8C36-4A1D3EEF3516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duarticle:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB6A054-E639-49A5-AF6E-27FC62FF8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duclassified:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B010062-02BA-4402-86B2-D069EA5C4E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dudirectory:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA35AB30-1814-4911-A3D7-F986C44E0B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dudirectory_pro:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC866B22-DBC4-4A33-8751-4A2CE175D02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dudirectory_pro_sql:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB2170A-484C-4388-94D6-F3018710561F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dudownload:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D01D83B-E504-417B-A9D5-38CF615B8BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dugallery:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226C1211-4598-4FCF-9C3B-B3175FD3ECBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dunews:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F62C8A9-7F36-474B-90E6-3B575BC99E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dupaypal:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A3906D-2606-4E5A-9AB3-00609152376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dupaypal_pro:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19A6A59-0CA1-4A86-8D0F-36C53A036C95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17835",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in QualityEBiz Quality PPC 1553 allows remote attackers to inject web script or HTML via the REQ parameter to the search module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualityebiz:qualityppc:1553:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A0FA11-4312-48B1-A67A-D79248EBA95F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/qualityppc-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17850",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/qualityppc-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptdevelopers.net:netclassifieds:1.0.1:*:free:*:*:*:*:*",
            "matchCriteriaId" : "4DDF5E08-7D19-412C-A5F2-1536CD8FBA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptdevelopers.net:netclassifieds:1.0.1:*:premium:*:*:*:*:*",
            "matchCriteriaId" : "BFA73AC6-853D-425E-AE89-2B0DDE954522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptdevelopers.net:netclassifieds:1.5.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "5B047794-1EC7-4EE8-A990-CDA5C5515B81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptdevelopers.net:netclassifieds:1.9.6.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "080D0804-8C24-4BAA-8771-9F8CAFB86A96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17853",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21378",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15683",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-03T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request."
      }, {
        "lang" : "es",
        "value" : "relocate_server.php en Coppermine Photo Gallery (CPG) 1.4.2 y 1.4 beta no se elimina después de la instalación y no usa autenticación, lo que permite a atacantes remotos obtener información sensible, como la configuración de la base de datos, a través de una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "60C520A7-686D-40AB-A41B-EDDF3EC86819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BF818D-86E5-4886-9447-FE70CBEAEA0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=24217.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17855",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2698",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=24217.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5631A575-5CA5-4421-B75A-073DE829E247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801E19E5-2CE7-41B3-9727-C4F3222BE23B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A90354-05CE-44CB-B658-3B80795001BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A51BD2-A54A-4D3D-B0DA-57055110BF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FEEF99-F54D-4542-AF3A-E94D976420A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DAF74C-8188-4F29-ACDA-ACEE3B02CB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAC175D-2893-45B6-9B4E-AD35571FF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1430A5-5C85-45FF-9E9F-2FEF9EABC603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94221B90-8F50-426D-87C7-3A1ABABAF354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70CF2A2-AE61-4A48-B6A7-108358D55A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB9D21E-A75E-4B9A-861E-51F8D99463B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF7E7DA-385E-4C8E-90BF-308213EA0550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.9b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C291732-9D53-4641-BFBB-F9BD5F1D485C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.9b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE33859-583E-4F06-BC30-37DB4D59F904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.50.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8196233-19A2-4617-87A9-12D8DB10D91F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.edgewall.com/trac/wiki/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17836/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015302",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15676/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.edgewall.com/trac/wiki/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17836/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15676/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOTE: this issue has been disputed by third parties.  Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/418289/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418431/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15671/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418289/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418431/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15671/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81651E6E-201C-4513-BFAB-F19A4C1A6E37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17848",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19240",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vd.lwang.org/webcalendar_multiple_vulns.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418286/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vd.lwang.org/webcalendar_multiple_vulns.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the login page for HP Systems Insight Manager (SIM) 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service (browser hang). NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all.  If not, then this issue is not a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:systems_insight_manager:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "12F9B9A8-D820-4B90-8DCA-54F4DD15E87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:systems_insight_manager:4.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F4879BF5-2647-4335-91CD-BDD0B2CAF862"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/418280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in WebCalendar 1.0.1 allows remote attackers to execute arbitrary SQL commands via the time_range parameter to edit_report_handler.php.  NOTE: the startid/activity_log.php vector is already covered by CVE-2005-3949."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81651E6E-201C-4513-BFAB-F19A4C1A6E37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17848",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vd.lwang.org/webcalendar_multiple_vulns.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418286/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2702",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vd.lwang.org/webcalendar_multiple_vulns.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in Astaro Security Linux before 6.102 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:astaro:security_linux:6.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290BEAF7-4B5C-43F0-B35B-46B34459822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:astaro:security_linux:6.002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B5DD50C-CB7A-4081-B5B8-F4BB013F51E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:astaro:security_linux:6.101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B925F1-8770-4798-8B30-F846D468DC94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17838",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.astaro.org/showflat.php?Cat=&Number=63958&page=0&view=collapsed&sb=5&o=&fpart=1#63958",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15666",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.astaro.org/showflat.php?Cat=&Number=63958&page=0&view=collapsed&sb=5&o=&fpart=1#63958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter in portfolio.php and (2) cid parameter in content.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:verosky_media:instant_photo_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1",
            "matchCriteriaId" : "A436F301-7611-4B4C-A90B-2C4C55E2D839"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17841",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Tradesoft CMS allow remote attackers to execute arbitrary SQL commands via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tradesoft:tradesoft_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D1C1BF-2AE5-4B48-B0C1-E52F259312A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/22863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pineapple_technologies:lore:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7E7F4A-AE3C-4DA6-A7B3-6A482C42DFDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/lore-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15665",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/lore-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in Avaya TN2602AP IP Media Resource 320 circuit pack before vintage 9 firmware allows remote attackers to cause a denial of service (memory consumption) via crafted VoIP packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:tn2602ap_ip_media_resource_320_circuit_pack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "vintage_8_firmware",
            "matchCriteriaId" : "0073DB85-4BF3-4F70-AA77-BEBADF5C2FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:tn2602ap_ip_media_resource_320_circuit_pack:vintage_3_firmware:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591E2AD-3101-4E37-A6BF-2EE2A77AA6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:tn2602ap_ip_media_resource_320_circuit_pack:vintage_4_firmware:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82693BE4-851C-4B36-9C56-33D9B408AD95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:tn2602ap_ip_media_resource_320_circuit_pack:vintage_5_firmware:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80A2A93-804D-4CEA-9074-35DB6CF98DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:tn2602ap_ip_media_resource_320_circuit_pack:vintage_6_firmware:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841816C0-A1DC-43AA-BF3F-B90D12E236F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:tn2602ap_ip_media_resource_320_circuit_pack:vintage_7_firmware:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E69DB14-B83D-4D2E-BB93-B08B114B39C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17825",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-231.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15668",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-231.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T23:03:00.000",
      "lastModified" : "2023-11-07T01:57:57.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-3619.  Reason: This candidate is a duplicate of CVE-2006-3619.  Notes: All CVE users should reference CVE-2006-3619 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web script or HTML via the medium parameter to (1) start_page.css.php and (2) style.css.php; or the From parameter to users_popupL.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpheaven:phpmychat:0.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081832A4-0DF7-4257-AE3E-0D2BC07318D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418397/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/484575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15679",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418397/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/484575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-04T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) PASS command to the FTP server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wineggdropshell:wineggdropshell:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2E1CD1-4B90-4B1A-B4B4-DF56C00597EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0059.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secway.org/advisory/AD20051202.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418398",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15682",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0059.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/AD20051202.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service (crash) via invalid IMAP commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAA0B95-5875-41CF-90BA-EF07D240FF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45540A37-2CBF-453F-8EFF-696B9318499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724E8638-CF5A-480B-89D7-0E029A0C5965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B664B5-EEF9-4C5F-B23C-E4D54DBF2EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27EEFD5-19B1-4F0C-BD52-257594C37310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB6A16-65D3-43CF-BFB4-E0616476A979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "4B880760-D0E3-46C6-A12F-3D9A444C92C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17820",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2023-11-07T01:57:57.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3967.  Reason: This candidate is a duplicate of CVE-2005-3967.  Notes: All CVE users should reference CVE-2005-3967 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv before 1.0.0-pre4, when the syslog (-S) function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sobexsrv:sobexsrv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0_pre3",
            "matchCriteriaId" : "9F6ECFFF-E849-4D2F-9DA4-00861AF11C71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-1202a%5D.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418515/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15692",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2005-1202a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418515/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the admin_email parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.6d",
            "matchCriteriaId" : "DA2B085E-8101-425A-A186-3DC81FD3AF66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/zencart_126d_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17869",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21411",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418517/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418995/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15690",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2728",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/zencart_126d_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418517/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418995/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including (1) graphs/banner_daily.php, (2) graphs/banner_infobox.php, (3) graphs/banner_yearly.php, (4) graphs/banner_monthly.php, (5) application_bottom.php, (6) attributes_preview.php, (7) modules/category_product_listing.php, (8) modules/copy_to_confirm.php, (9) modules/delete_product_confirm.php, and (10) modules/move_product_confirm.php, which leaks the web server path in the resulting error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.6d",
            "matchCriteriaId" : "BC7063A2-A393-4627-9B8C-74FDFB6EDCDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/zencart_126d_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418517/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418995/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/zencart_126d_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418517/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418995/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solupress:solupress_news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "42EEE0C5-4828-4C4A-B680-99611EDECDAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/solupress-news-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15695",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/solupress-news-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitebeater:sitebeater_mp3_catalog:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED1D94-6256-4D62-89EA-D3F469AC5B73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/sitebeater-mp3-catalog-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/sitebeater-mp3-catalog-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the sKeywords parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sitebeater:sitebeater_news:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2069212D-42CF-486E-97D2-C65BCE4A6DD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/sitebeater-news-system-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15697",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/sitebeater-news-system-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execute arbitrary SQL commands via the (1) haystack parameter to search_result.php or (2) ckey parameter to print_me.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpyellow:phpyellowtm_lite:5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC92BB35-FB8E-430D-A88C-9A075CB18731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpyellow:phpyellowtm_pro:5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE606357-6292-4ED6-B831-41B9E4C9A37A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/phpyellowtm-pro-edition-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15700",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/phpyellowtm-pro-edition-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC installation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esi_products:webeoc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "09DA3374-FE82-4EAD-97A7-506648D89D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/388282",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/388282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and earlier, and Lite 2.1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) srch_product_name parameter to adv_search.asp and (2) b_search parameter to bsearch.asp.  NOTE: the original disclosure was specifically only for an XSS issue, but the CVE description was for SQL injection.  Since the original disclosure, SQL injection vectors have been reported.  This CVE might be REJECTed or significantly altered pending additional information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asps:shopping_cart:2.1:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "2F67B8A3-B36D-48DE-B950-4A6C4C12A972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asps:shopping_cart:2.9d:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "BF9FD5B6-5375-4F85-9DDB-EB74D47961A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/asps-shopping-cart-professional-and.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15694",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/asps-shopping-cart-professional-and.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infinetsoftware:mytemplatesite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "2FBEE180-3032-49F3-B3B9-C1783D713922"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/mytemplatesite-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/mytemplatesite-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srch_text parameter in a Search and Sort option to messages.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1318098-F9B4-4BE8-AB18-3EB82DE4E740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/31",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418512",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15698",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to the usr/system files (1) insert_file.php, (2) insert_image.php, (3) insert_link.php, (4) insert_qcfile.php, and (5) edit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.3.02",
            "matchCriteriaId" : "8458C5D0-2B3A-4D8D-9484-2B3D8362D5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618B2486-AB01-424B-B7F4-295FDA4CD89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E89CB9C2-341E-41B7-A275-69C26ABD49DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77CFB60-2E9E-4644-9696-B412EA3CE9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "3747E1FE-0EF9-42D6-9A27-7F6F5B36A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E70D74-B75E-48BA-B258-046D45F4DBB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sapid-club.com/en/viewtopic.php?p=586#586",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17859",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=375289&group_id=118100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sapid-club.com/en/viewtopic.php?p=586#586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/17859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=375289&group_id=118100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving (1) mvc/controller/user_request_analysis.inc.php and (2) usr/xml/ddc/authorization.xml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.3.02",
            "matchCriteriaId" : "8458C5D0-2B3A-4D8D-9484-2B3D8362D5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618B2486-AB01-424B-B7F4-295FDA4CD89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E89CB9C2-341E-41B7-A275-69C26ABD49DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77CFB60-2E9E-4644-9696-B412EA3CE9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "3747E1FE-0EF9-42D6-9A27-7F6F5B36A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E70D74-B75E-48BA-B258-046D45F4DBB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sapid-club.com/en/viewtopic.php?p=586#586",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=375289&group_id=118100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sapid-club.com/en/viewtopic.php?p=586#586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=375289&group_id=118100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in jax_calendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter, and possibly the (2) Y and (3) m parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jax_calendar:jax_calendar:1.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBE767C-AA5D-4B0E-860F-2D5CB6DA064C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/jax-calendar-134-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21406",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/jax-calendar-134-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid and (2) catid parameters to (a) day.php, (b) week.php, (c) month.php, and (d) year.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_lite:calendar_express:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D5D216-346E-417B-8F09-4964211A30CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_lite:calendar_express:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997E9458-4347-4C79-859B-EF803CFDBA8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/calendar-express-2-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21402",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21403",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21405",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/calendar-express-2-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in KBase Express 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to category.php and (2) search parameters to search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensation_designs:kbase_express:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "923D8672-A588-47AE-AF34-D532D9510515"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17806",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codewalkers:ltwcalendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.3",
            "matchCriteriaId" : "06DB42A5-ADF3-4949-919E-C84DF296BD9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ltwcalendar.sourceforge.net/changelog.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17799",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.Silitix.com/calendar-cws.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-December/001154.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438232/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438580/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2652",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ltwcalendar.sourceforge.net/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.Silitix.com/calendar-cws.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-December/001154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438232/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438580/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_web:statistik:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CCFDF7-0F66-4F82-AAF7-8A6216B06144"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://freewebstat.com/changelog-english.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17789",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/2005/11/19/php-web-statistik/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://freewebstat.com/changelog-english.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/2005/11/19/php-web-statistik/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as statistics and the log directory location, possibly including the logdb.dta file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_web:statistik:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CCFDF7-0F66-4F82-AAF7-8A6216B06144"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://freewebstat.com/changelog-english.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17789",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/2005/11/19/php-web-statistik/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://freewebstat.com/changelog-english.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/2005/11/19/php-web-statistik/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU consumption) via a large lastnumber value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_web:statistik:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CCFDF7-0F66-4F82-AAF7-8A6216B06144"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://freewebstat.com/changelog-english.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17789",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/2005/11/19/php-web-statistik/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://freewebstat.com/changelog-english.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/2005/11/19/php-web-statistik/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field, which allows remote attackers to fill the log files via a large number of requests, as demonstrated using pixel.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_web:statistik:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CCFDF7-0F66-4F82-AAF7-8A6216B06144"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://freewebstat.com/changelog-english.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/2005/11/19/php-web-statistik/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://freewebstat.com/changelog-english.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/2005/11/19/php-web-statistik/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the (1) property_id, (2) zip_code, (3) property_type_id, (4) price, and (5) city_id parameters to property.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:widget_press:widget_property:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D02DB74-D902-4894-8A8A-8093B0D2EDBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/widget-property-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/widget-property-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:widget_press:widget_property:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D02DB74-D902-4894-8A8A-8093B0D2EDBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/widget-property-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/widget-property-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) start, (2) search_order, (3) search_type, (4) search_area, and (5) keyword parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:landshop:real_estate_commerce_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.3",
            "matchCriteriaId" : "77D63D5C-3B24-4EFC-A4B8-2BA4BC03948E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/landshop-real-estate-commerce-system.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/landshop-real-estate-commerce-system.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the mls parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:relative_real_estate_systems:relative_real_estate_systems:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "92D65296-83C0-4F34-8592-49D20F394443"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/relative-real-estate-systems-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/relative-real-estate-systems-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote attackers to execute arbitrary SQL commands via the product_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:widget_press:widget_imprint:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.26",
            "matchCriteriaId" : "721EED43-B2D3-46F5-9788-5270E6797D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/widget-imprint-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/widget-imprint-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630262DD-0577-4655-B558-3819019A6F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBC419B-13A6-4343-8123-85D47107D5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54931180-0CCA-46B2-B139-EDC35FD7D87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831E6EDF-1466-4EE1-8987-6580DC80712D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF8B06-63F6-49FE-B98C-4EDCD95A997E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB5079E-8FEA-427F-8004-150AD4827C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75B75A-5016-4503-A1A9-0B5BFA439C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8620FD-82E4-4877-8C5A-A95D753FE9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC0225C-6E32-452B-A7E2-0CA91D9028C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4491A005-0DAA-41FA-B29D-F6C7466E4C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3152FFB5-5EE1-4809-8A06-F98ACFE3EA65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/418200/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418200/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the \"Add Image From Web\" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630262DD-0577-4655-B558-3819019A6F2D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBC419B-13A6-4343-8123-85D47107D5A5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54931180-0CCA-46B2-B139-EDC35FD7D87A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831E6EDF-1466-4EE1-8987-6580DC80712D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF8B06-63F6-49FE-B98C-4EDCD95A997E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB5079E-8FEA-427F-8004-150AD4827C39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75B75A-5016-4503-A1A9-0B5BFA439C47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8620FD-82E4-4877-8C5A-A95D753FE9E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC0225C-6E32-452B-A7E2-0CA91D9028C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4491A005-0DAA-41FA-B29D-F6C7466E4C78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3152FFB5-5EE1-4809-8A06-F98ACFE3EA65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17747",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21221",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418200/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418200/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary files via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630262DD-0577-4655-B558-3819019A6F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBC419B-13A6-4343-8123-85D47107D5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF8B06-63F6-49FE-B98C-4EDCD95A997E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB5079E-8FEA-427F-8004-150AD4827C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75B75A-5016-4503-A1A9-0B5BFA439C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8620FD-82E4-4877-8C5A-A95D753FE9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC0225C-6E32-452B-A7E2-0CA91D9028C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4491A005-0DAA-41FA-B29D-F6C7466E4C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3152FFB5-5EE1-4809-8A06-F98ACFE3EA65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17747",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418200/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418200/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Interspire FastFind 2004 and 2005 allows remote attackers to inject arbitrary web script or HTML via the query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interspire:fastfind:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DB3166-6A16-4B94-9EDD-B5EA85D6D444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interspire:fastfind:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597CF5D5-F108-412B-97D3-DF3D2E0D3BDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/interspire-fastfind-2005-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/interspire-fastfind-2005-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:help_desk_reloaded:free_help_desk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C0CC7-32BA-4E93-B016-50BF7A6E8BD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015307",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid (1) datestart and (2) dateend parameters, which leaks the web server path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndIncluding" : "1.3.11",
            "matchCriteriaId" : "6195A0F8-DC1D-4239-94C9-4FD35C4EF4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A08FCCA2-886A-4B8B-B3E5-0A62C8E58B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B2FCD0-5295-4E27-A9AB-4E55CDC4CAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:sr2:*:*:*:*:*:*",
            "matchCriteriaId" : "25E45D9D-ADAF-427F-9B77-FCA02EC0E489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B874DF3-F79C-4AA7-9FDE-3AEF62D3AFF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/geeklog-14x-full-path-disclosure-vuln.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.3.11sr3",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21398",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/geeklog-14x-full-path-disclosure-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.3.11sr3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplemedia:simplebbs:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CFC80A-2F70-4B73-AFDA-C1A524274381"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/simplebbs-v11-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/simplebbs-v11-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in aMember allow remote attackers to inject arbitrary web script or HTML via the (1) lamember_login parameter to sendpass.php and (2) login parameter to member.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amember:amember:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B2FD07-17F9-44AE-A0FF-5CAB8AF3CB67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015208",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-05T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, which could be useful in other attacks such as locking out valid users via brute force methods."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esi_products:webeoc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "09DA3374-FE82-4EAD-97A7-506648D89D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/170394",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/170394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTP_USER_AGENT header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quicksilver_forums:quicksilver_forums:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.5_pr1",
            "matchCriteriaId" : "8A55F1D5-42AB-4018-83B2-6EE6A10E2B57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17861",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=375970&group_id=154354",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=375970&group_id=154354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the \"user language option,\" which is used as part of a dynamic class name that is processed using the eval function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9214FE72-045E-457A-B3C5-BCDFC506DDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB55E62-A345-49F6-ACD0-A710977CA6E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340D0AB-2B4A-4DE6-9FA1-662D8F8205BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B28DC19-7E6A-4CC7-86A9-10EA9FD79FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD296DF-21C6-43E4-AC4D-8F57220ECDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AD23BE-5400-43D8-A667-7AE60B0500B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFE2FA-CAE0-42C3-AA84-4F8D59045A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9703151E-85D7-4F81-AFB5-5BC72C44D81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17866",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=34373&release_id=375755",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/392156",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15703",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=34373&release_id=375755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/392156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMediaWiki, MediaWiki, 1.5.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:hotcgiscripts:easy_search_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "117331D2-0CA7-4831-BFD0-0F89F60389E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/easy-search-system-v11-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17823",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15705",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/easy-search-system-v11-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nodezilla 0.4.13-corno-fulgure does not properly protect the evl_data directory, which could allow them to be shared when they are not protected by PRIVATEDATADIR in nodezilla.ini, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.0_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03417B8D-A000-45AE-B3DD-0AC4960C9BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.1_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B89F30-A1BB-488B-BD98-A8187CA7BAEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.2_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFCDEB2-2977-4104-8B74-0BB65F90ECFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.3_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C661B12D-58DF-4A71-AE18-AAFC5F05B66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.4_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "991B6F7C-9FCF-4CAE-B7AF-109C699767E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.5_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2A1760-A32F-4A6A-94D6-5879412C556B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.6_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA18BC9B-2D5E-4824-833F-941B275138E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.7_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF6F755-8ACE-43F1-8117-B79B1B8193E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.8_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59654AF0-28D2-4C6D-BA26-4A5BA14EBFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.9_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59C49C6-0969-45AF-8FB9-130A0C0F1E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.10_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77EA2EA8-FA21-4200-A81B-8D4ECD52537E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.11_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77730044-545A-4F6C-A240-80136D3B87A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.12_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A227A7AB-3412-49DD-8421-F339BC4A5BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ali_bousahid:nodezilla:0.4.13_corno_fulgure:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E01E44-9A57-4849-9893-4B7B0FF740A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17867",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nodezilla.net/history.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15704",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nodezilla.net/history.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) pg, and (3) sortb parameters to (a) index.php; (4) cid parameter to (b) gift.php and (c) fq.php; and (5) cat parameter to (d) articles.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web4future:edating_professional:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C85DD1-8EE7-4DBD-AC33-0EA67EB196AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/web4future-edating-professional-v5-sql.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21418",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21419",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21420",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21421",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15715",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/web4future-edating-professional-v5-sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prod, and (2) brid parameters to (a) view.php; the (3) the bid parameter to (b) viewbrands.php; and the (4) grp and (5) cat parameters to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:web4future:web4future_ecommerce:enterprise_2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E16768-918B-4A19-9312-D5A8B3FA7109"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:web4future:web4future_ecommerce:home:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F889DB8-C39B-48B5-9B33-F7D97A3E720C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15707",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the \"remote URL.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web4future:keyword_frequency_counter:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C7CE26-4883-4BA1-AB42-5446016EB64C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/keyword-frequency-counter-v10-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/keyword-frequency-counter-v10-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:web4future:affiliate_manager_professional:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "97803A9F-2130-4729-9572-0C19B164D333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/web4future-affiliate-manager-pro-sql.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/web4future-affiliate-manager-pro-sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL commands via the idp parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web4future:portal_solutions:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F0C0BB-9C57-48F2-9443-63AD594976EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/web4future-portal-solutions-news.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/web4future-portal-solutions-news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web4future:portal_solutions:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F0C0BB-9C57-48F2-9443-63AD594976EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/web4future-portal-solutions-news.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15718",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/web4future-portal-solutions-news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in FileLister 0.51 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameters, possibly the searchwhat parameter to definesearch.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tawbaware:filelister:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.51",
            "matchCriteriaId" : "F00A3CC2-698F-487C-8FAE-1D1D5314FDE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/filelister-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17821",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2725",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/filelister-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mr._cgi_guy:hot_links_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "DBD5F253-8066-4051-8B45-86A03F936D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mr._cgi_guy:hot_links_sql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.0",
            "matchCriteriaId" : "67241C15-600F-4C91-B7F9-0A0FA68FC4B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/hot-links-sql-3x-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17868",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17872",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/hot-links-sql-3x-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Warm Links 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to search.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mr._cgi_guy:warm_links:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F64D9C2-E2F6-4650-B171-DAD6B19CD860"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/warm-links-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17864",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/warm-links-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view.php in Hobosworld HobSR 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) arrange and (2) p parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hobosworld:hobsr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "6E40DB9B-234F-43AF-953E-5E6A722FACC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/hobsr-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17884",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15713",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/hobsr-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-06T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.cgi in Amazon Search Directory 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly the search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mr._cgi_guy:amazon_search_directory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "84EE84E0-415E-4FE2-B12A-985936E52181"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/amazon-search-directory-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17875",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/amazon-search-directory-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CC6233-E207-40CC-81FF-A8670EEA4295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64DD9B5C-3DB8-4E15-B4A6-541E4E221C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0304E1E3-8766-40D0-8879-A652B4E9E72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188F1343-8082-4B54-8DA4-E344818ABD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95DA7DE-B786-4EE7-A3F4-C077A7986D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5306C05-4A71-4175-8C22-F2DE0F2FE4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9DEF16-ECD5-4BBE-8986-52A6171B3D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFDBEEC-B2C1-47F0-82D3-FC9147B590A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354487CF-0086-4AE2-872B-0032E3EB89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96767060-505A-42D2-A68A-6AD810DE800A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1169B802-7279-437F-AF59-621A67DC92EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B93B3ED-AF82-49A9-8C7F-E5F652F19669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B77866E-6818-4DE6-9457-39416871952C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D23CF8-2B6C-4D2A-8E5E-6AACE99A7C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9107B531-7254-4908-97F0-3BF1EA0495AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-868.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17897",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17912",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17916",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17920",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17926",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17929",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17940",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17976",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18009",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18055",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18189",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18191",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=345&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00022.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00073.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00043.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-840.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-867.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-878.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418883/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0072/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-227-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-868.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=345&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-840.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-867.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-878.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418883/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0072/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-227-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause a denial of service (crash) via a long argument to the LIST command, which causes IMail Server to reference invalid memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail_server:8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188ADF5A-00A4-4608-A9F9-EDF61CEFAA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC4E630-46A4-4C8F-9D73-F8B7241F4795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B7AA85-5A6A-4D40-8ACA-26A6C2FBDACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=347&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=347&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail_server:8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188ADF5A-00A4-4608-A9F9-EDF61CEFAA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC4E630-46A4-4C8F-9D73-F8B7241F4795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B7AA85-5A6A-4D40-8ACA-26A6C2FBDACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CC6233-E207-40CC-81FF-A8670EEA4295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64DD9B5C-3DB8-4E15-B4A6-541E4E221C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0304E1E3-8766-40D0-8879-A652B4E9E72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188F1343-8082-4B54-8DA4-E344818ABD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95DA7DE-B786-4EE7-A3F4-C077A7986D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5306C05-4A71-4175-8C22-F2DE0F2FE4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9DEF16-ECD5-4BBE-8986-52A6171B3D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFDBEEC-B2C1-47F0-82D3-FC9147B590A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354487CF-0086-4AE2-872B-0032E3EB89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96767060-505A-42D2-A68A-6AD810DE800A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1169B802-7279-437F-AF59-621A67DC92EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B93B3ED-AF82-49A9-8C7F-E5F652F19669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B77866E-6818-4DE6-9457-39416871952C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D23CF8-2B6C-4D2A-8E5E-6AACE99A7C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9107B531-7254-4908-97F0-3BF1EA0495AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-868.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17897",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17908",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17912",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17916",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17920",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17921",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17926",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17929",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17940",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17976",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18009",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18055",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18189",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18191",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=342&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=343&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-840.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-867.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-878.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418883/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0072/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-227-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-868.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=342&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=343&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-840.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-867.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-878.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418883/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0072/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-227-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator (TLA) default password via unknown vectors, possibly involving configure_toplevel_admin.ldif."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_communications_services_delegated_administrator:6:2005q1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ACE76E7-A05A-4EF6-BDD5-F9B1E9596C43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17889",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000831.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102068-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2754",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000831.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct man-in-the-middle (MITM) attacks and \"compromise data privacy.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB26B3D-4DF0-45C2-9ECA-202C829392D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "D9F68042-8C22-447E-8C6B-F44DEE5BF389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_application_server:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9760BDBA-E5FD-4AFF-ACB8-4C8B55CC3A61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17873",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102012-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102012-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the a parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iisworks:aspknowledgebase:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5254DC19-DB66-4D44-8559-347F54FB3564"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/iisworks-asp-knowledgebase-2x-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17901",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15734",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/iisworks-asp-knowledgebase-2x-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEE1977-E9E0-4BFF-B33B-B083E49E51F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6979C17-0BC6-47D1-9B73-254D84306A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204C7C05-3441-4DB0-8702-D99C8FCB381E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD897CA-4F73-437B-9649-951DD2D37B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5237B003-2FDC-4621-A7FD-5593EDBF3F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.comp.video.ffmpeg.devel/26558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.freedesktop.org/gstreamer/gst-ffmpeg/ChangeLog?rev=1.239&view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17892",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18087",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18107",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18400",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18739",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18746",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19114",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19272",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19279",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15743",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2770",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www1.mplayerhq.hu/cgi-bin/cvsweb.cgi/ffmpeg/libavcodec/utils.c.diff?r1=1.161&r2=1.162&cvsroot=FFMpeg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.mplayerhq.hu/cgi-bin/cvsweb.cgi/ffmpeg/libavcodec/utils.c?rev=1.162&content-type=text/x-cvsweb-markup&cvsroot=FFMpeg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/230-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/230-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://article.gmane.org/gmane.comp.video.ffmpeg.devel/26558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.freedesktop.org/gstreamer/gst-ffmpeg/ChangeLog?rev=1.239&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www1.mplayerhq.hu/cgi-bin/cvsweb.cgi/ffmpeg/libavcodec/utils.c.diff?r1=1.161&r2=1.162&cvsroot=FFMpeg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.mplayerhq.hu/cgi-bin/cvsweb.cgi/ffmpeg/libavcodec/utils.c?rev=1.162&content-type=text/x-cvsweb-markup&cvsroot=FFMpeg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/230-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/230-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netart_media:blog_system:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574948C1-87A2-4E71-8976-F41E2F90DDA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17893/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015310",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418640/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15719/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17893/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418640/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15719/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to execute arbitrary code via a long INVITE field in a Session Initiation Protocol (SIP) packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:multi-tech_systems:multivoip:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6AEA62-6072-4C9D-9A94-D9614DE0E788"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418653/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitylab.net/research/2005/12/buffer_overflow_in_multitech_v.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418653/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitylab.net/research/2005/12/buffer_overflow_in_multitech_v.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e107.org/e107_plugins/bugtrack/bugtrack.php?1625.show",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17890/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418577/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e107.org/e107_plugins/bugtrack/bugtrack.php?1625.show",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17890/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418577/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "e107 0.6174 allows remote attackers to redirect users to other web sites via the download parameter in rate.php, which is used after a user submits a file download rating.  NOTE: in the default installation, the e_BASE variable restricts the redirection to the same web site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17890/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418577/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17890/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418577/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter, as demonstrated using 26.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cowiki:cowiki:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982E5B4E-E7C5-474F-9710-93485383F291"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cowiki.tigris.org/issues/show_bug.cgi?id=234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/cowiki-034-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17913",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityvulns.ru/Rdocument692.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/1131/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/477253/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/25393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cowiki.tigris.org/issues/show_bug.cgi?id=234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/cowiki-034-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityvulns.ru/Rdocument692.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websecurity.com.ua/1131/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/477253/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/25393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categoryid, (2) entryid, (3) year, (4) month, and (5) day parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluggedout:pluggedout_blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.4",
            "matchCriteriaId" : "C5F6AC4D-F4F2-4B22-94BE-D3F5D1E8C24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluggedout:pluggedout_blog:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F80B9C-B642-4BAA-BF25-B47F7E56684E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/pluggedout-blog-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17911",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/pluggedout-blog-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) page and (2) car parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cars_portal:cars_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "18B98AD2-901A-40D4-8447-9A2CD23F6FE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/cars-portal-v1x-sql-injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17914",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/cars-portal-v1x-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) Location, (2) Last Name, and (3) First Name parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jonathan_beckett:pluggedout_nexus:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEEBD65-DBDC-4A3E-8DF0-09605C3E38B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Location, (2) Last Name, and (3) First Name parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jonathan_beckett:pluggedout_nexus:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEEBD65-DBDC-4A3E-8DF0-09605C3E38B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to viewprofile.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saralblog:saralblog:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E2B4C8-CC74-4786-8C8B-0B45E3AAE159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saralblog:saralblog:1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61166E7B-3CDF-4148-B3B1-78BD17AE7B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/40/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/saralblog-v1-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2752",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/40/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/saralblog-v1-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to execute arbitrary SQL commands via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:locazo:locazolist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.03c",
            "matchCriteriaId" : "D2920C0D-0098-4EF3-8AA8-3F3BC459C311"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://locazo.net:81/applications/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/locazolist-classifieds-v103c-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://locazo.net:81/applications/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/locazolist-classifieds-v103c-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rainworx:rwauction_pro:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD564D1-3E8E-48E2-9900-0618005E5A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rainworx:rwauction_pro:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09037A73-A76E-4BD4-AA1D-A420C30EB85A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels-team.blogspot.com/2007/06/rwauction-pro-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/rwauction-pro-v40-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-April/000713.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels-team.blogspot.com/2007/06/rwauction-pro-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/rwauction-pro-v40-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-April/000713.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrary web script or HTML via the search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:xcent:xcphotoblbum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A34779-92D7-4FAF-9D70-E276ADAB9A19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/xcphotoalbum-v1x-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/xcphotoalbum-v1x-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CPSearch.asp in XcClassified 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xcent:xcclassified:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C65BB0F-FE1F-4F63-873A-A1F50D823F2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/xcclassified-v3x-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/xcclassified-v3x-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) L, (2) sort, (3) category, (4) categoryname parameters to search.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netauctionhelp:netauctionhelp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "8630C390-A6A6-477A-857F-3BC54BD4B852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/netauctionhelp-v30-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/netauctionhelp-v30-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alan_ward:a-faq:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F4C63-A07A-4B14-9E51-F8D62434680D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/faq-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17900",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/faq-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DAF74C-8188-4F29-ACDA-ACEE3B02CB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1430A5-5C85-45FF-9E9F-2FEF9EABC603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70CF2A2-AE61-4A48-B6A7-108358D55A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB9D21E-A75E-4B9A-861E-51F8D99463B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF7E7DA-385E-4C8E-90BF-308213EA0550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BB91A-3627-4149-9935-86BB5FF5EE62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.edgewall.com/archive/trac/2005-December/005777.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://projects.edgewall.com/trac/wiki/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17894",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15720",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.edgewall.com/archive/trac/2005-December/005777.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://projects.edgewall.com/trac/wiki/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:christian_ghisler:total_commander:6.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1971CE5-9CCB-4626-909B-8FB2ACF7C601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015311",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/total-commander.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2780",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/total-commander.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-07T23:03:00.000",
      "lastModified" : "2023-11-07T01:57:58.233",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4031.  Reason: This candidate is a reservation duplicate of CVE-2005-4031.  Notes: All CVE users should reference CVE-2005-4031 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B77866E-6818-4DE6-9457-39416871952C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.01pl1.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-868.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-003.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17897/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17908",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17912",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17916",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17920",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17921",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17926",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17929",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17940",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17976",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18009",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18055",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18189",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18191",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=344&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-840.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-867.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-878.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418883/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15725",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0072/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-227-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.01pl1.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2005-868.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17897/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=344&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_29_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-840.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-867.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-878.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418883/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0072/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-227-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified \"absolute path vulnerability\" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17924",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY75283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY75294",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY79485",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY75283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY75294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY79485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the \"SunnComm Shared\" directory, which allows local users to gain privileges by modifying programs installed in that directory, such as MMX.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunncomm:mediamax_drm:5.0.21.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0674C6ED-EA2C-4B34-98B9-0259090C7820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17933",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eff.org/IP/DRM/Sony-BMG/MediaMaxVulnerabilityReport.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.eff.org/news/archives/2005_12.php#004234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/928689",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2783",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eff.org/IP/DRM/Sony-BMG/MediaMaxVulnerabilityReport.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.eff.org/news/archives/2005_12.php#004234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/928689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2023-11-07T01:57:58.277",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3665.  Reason: This candidate is a reservation duplicate of CVE-2005-3665.  Notes: All CVE users should reference CVE-2005-3665 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2) ForumID, (3) Thread, and (4) ThreadID parameters in view_thread.cfm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cfmagic:magic_forum_personal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "FB84564F-2F8E-4808-B89E-D42419F319AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2794",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in search_forums.cfm, as used in the \"Search For:\" field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cfmagic:magic_forum_personal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "FB84564F-2F8E-4808-B89E-D42419F319AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via the ListID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cfmagic:magic_list_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "0F59C131-100B-49DB-A71B-17AEB7EAF4D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/magic-list-pro-25-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2793",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/magic-list-pro-25-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.cfm in CF_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows remote attackers to include arbitrary local .cfm files via a .. (dot dot) in the (1) sector or (2) page parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mycfnuke:cf_nuke:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8434DB77-57E2-45F4-B7E8-9E0071AA628A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/cfnuke-v46-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17939",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/cfnuke-v46-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF_Nuke 4.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) newsid parameter in the news sector, and (3) cat parameter in the links sector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mycfnuke:cf_nuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6",
            "matchCriteriaId" : "024C25AA-5F38-4FBA-9E7C-C9E0078455AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mycfnuke:cf_nuke:3.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D47935-98C9-4978-970A-4AE1A3C36541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mycfnuke:cf_nuke:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "696BA4AE-9A0D-4A0F-ACFA-EE339BA1DD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mycfnuke:cf_nuke:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E76A85-513B-429B-9FB6-3F5E5810E129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/cfnuke-v46-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17939",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/cfnuke-v46-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENT_HOME environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appfluent_technology:database_ids:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA2BED0-EFC8-4619-9D07-3AC2864C01F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0253.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mantis.pulltheplug.org/display.php?offset=8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://open-security.org/advisories/14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15755",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0253.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mantis.pulltheplug.org/display.php?offset=8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://open-security.org/advisories/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating null byte from being added to either a hostname or path buffer, or (2) contain a \"?\"  separator in the hostname portion, which causes a \"/\" to be prepended to the resulting string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA4CE0F-A3FB-4FAE-BC4E-3B521BB61A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D8252E6-8114-43CB-BC12-9080AA6B1423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613E5C55-9301-41C3-9795-5A50E04221FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E330B5-2970-4B41-99C7-28991F36A206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4E74A-07F1-4C01-A7A9-E7568F18BE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC36DBF2-1E0C-45FE-A187-392B647A0644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BDCBBD-2CA2-4CA5-89A3-DE70429CC36B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD8ED64-AEA2-4A8D-A40A-6525F62EDEDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF76A23-11A0-472D-823C-6E5C58A93407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE240603-1171-46FB-B9D6-6FC33210B943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5B22B4-12F4-4C7F-B17C-9C37A5569C26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.16/SCOSA-2006.16.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://curl.haxx.se/docs/adv_20051207.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://qa.openoffice.org/issues/show_bug.cgi?id=59032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17960",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17961",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17965",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17977",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18105",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18188",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19261",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19433",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19457",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-25.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_242005.109.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-875.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418849/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15756",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0072/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0960",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0924/references",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/228-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.16/SCOSA-2006.16.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://curl.haxx.se/docs/adv_20051207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://qa.openoffice.org/issues/show_bug.cgi?id=59032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_242005.109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-875.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418849/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0072/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0924/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/228-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID, and (3) topicRepeater1-p parameters in topics.aspx, (4) boardID parameter in categoryindex.aspx, (5) postID parameter in posts.aspx, (6) catID parameter in forums.aspx, and (7) memberID parameter in member.aspx."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:ideal_bb.net:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "6A1F7D98-F99E-41EF-91E2-5C09FA6E22D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17906",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The register_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying the import_blacklist variable in grab_globals.php, which can then be used to overwrite other variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD9FD0D-2786-43BB-938B-A45D9B60E08E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17925/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_252005.110.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418834/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423142/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17925/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_252005.110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418834/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423142/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and strings that will be executed when viewed using Internet Explorer, which ignores the characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2A8C5B-6155-4B40-B8C8-B4944064E3DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11E08A4-79D6-46FE-880F-66E9778C298E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A3894F-2E3F-49CA-BEE5-759D603F6EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDBDC41-7E6F-4C97-95BD-7DEB2D9FE837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B52D447-8E56-4E04-9650-38D222DA8D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C455353-0401-4975-89BC-C23D32A684F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D9D9E1-D8B7-4A56-BC2F-90BDC97322B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DE856E-98FF-4B49-BD7F-3E326FEB89EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED34889-9F98-46BC-9176-557484272C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FBC61D-6A08-4DE8-A5E5-A3FC57E7759D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52AEEE6-2364-4CFB-9337-C5CCA54362E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD137160-B80D-4C65-A9A9-CEE12107E3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6C2AC8-C21A-4152-AAE6-915ACE65CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1956C8F0-EB91-4322-85C1-6BE15AA13703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48DEBEB-0C2D-4F6A-AF63-04990D2FD5AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E004FA4-0180-458A-8E8C-8167EF684ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0A1617-17D1-4C9F-A818-27321FD2FEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86CDC19-43C3-4ACC-94B4-388BCC8A2203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9931A5B-CD0C-43A3-B32D-915FF4AF57D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC69F98-A3B4-4573-AFE4-2069218B3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184592A5-4108-40DB-8882-9D2468490DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28470602-E3F1-4F04-B012-F91AB95E7A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B584932-BFB2-4462-BC69-B9FCC059F59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702F7A33-CF9E-4966-B622-E4BD27B120AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1BB456-5462-4ACE-AECF-730B1C7BE2CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418734/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15730/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418734/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15730/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in (1) the user login and (2) administrator login pages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alisveristr:alisveristr_e-commerce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFD6DF59-6F4A-4463-ADFC-423B43F0B759"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418510/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15699/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418510/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15699/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and conduct other attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:qnx:4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56278A26-8AFE-46B2-B2D0-D2D136B7D4B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418513/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418513/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in xs_edit.php in the eXtreme Styles phpBB module 2.2.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the edit parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_styles:extreme_styles_phpbb_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "E8433756-F52A-4DC7-A1B7-F10247DB2D53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/418518/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418518/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xs_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote attackers to obtain the installation path of the application via an invalid viewbackup parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_styles:phpbb_extreme_styles:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "EE1F1F53-6335-4479-B0DB-84E252606639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/418518/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418518/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to reset authentication credentials, then change configuration or firmware, via a direct request to apply.cgi with the Page parameter set to adv_password.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:truemobile_2300_wireless_broadband_router:3.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5340A324-C870-4A49-B7C4-C6DB363F6D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:truemobile_2300_wireless_broadband_router:5.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E4080C-6CD3-43CA-9A1E-2A94FD2A3E27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=348&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=348&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3665",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59384A5A-F530-4417-8AFB-005EE4A54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CFC048-C7C5-47E6-A7E9-E1ED99142493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120A58AE-69B7-426D-947D-9C0D9D9CE1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980AC0DB-2759-49D3-8347-C119AFFF8DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CABC8407-173D-466B-B366-5F7F5D9F2F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B0D6C2-AF9E-4395-861D-64502D82589A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666B78D-5DC9-4256-8A23-A4021AE7044A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096B01B4-3CD4-4CB4-8528-D1DB0D0BFB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229DE8B7-489B-4848-B1BE-2339CB771573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BC58E6-CA26-4760-A6A4-D65184A50539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE7C97E-60C6-417F-86F7-963ADE52A895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF189AE-9485-4F8C-AAAE-25088DF6F964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643C7F9B-B8C5-4C76-B706-F8CB5A800936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560BC57D-BDCE-4479-9847-6DB53A89FFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4859644F-E5FF-4AE4-B16D-CC2243964D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DE653E-E7FF-4DE0-A7C8-CC86C95550F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48888218-B238-4F0D-A4C2-E9877D3F3A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A393256A-A5BE-4467-8058-E9CA5D626D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9C4839-2356-4630-BDB3-4A0171F3A785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C55462-6370-45B3-8F00-50F4502981F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BBE005-1FEC-4178-A6A0-CAAB148948F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E7577-5F89-4B2C-9C28-A5268B539968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929F5CD6-51F3-42CF-8BA8-579120DD835D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B58A87-7A30-494D-9A9A-AF9FE6E59600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF345665-3C1D-4F44-B648-B695D88267BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C3F2E1-FEFC-4C04-B337-7AC3E38AE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C525B9-636F-49B9-B528-50AEB0E98F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74632C65-6711-4425-A43F-CCF1664C8542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD740315-190A-43B7-8399-9B72FA592AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794AE77E-843C-4CB4-9462-E4FE8C4C2896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E291BCAA-E2B5-4127-92DA-0BD48EACB6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B51601C-EDDC-41B7-82E9-EA4E7745F935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BD9F5E-B01D-4F1E-8BC2-F140ACF1472F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600D28-5583-4FA2-835F-BCE10813DB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80AAD482-064D-4CFB-A1AE-49095036485A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FE9713-54BE-4A70-82F8-03B8E1915E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892F5D72-1814-48A5-8CCA-A74EE9D633CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17895",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17957",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18618",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/22781",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1207",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-03.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-8",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423142/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15735",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2772",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423142/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via \"..\" sequences in the beanFiles array parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugar_suite:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7326570-63A6-40F0-86B0-EAB257C8714F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugar_suite:4.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C952E38-DA14-4E1C-A49B-4A87919AC00C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/sugar_suite_40beta.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418840",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15760",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/sugar_suite_40beta.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugar_suite:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7326570-63A6-40F0-86B0-EAB257C8714F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugar_suite:4.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C952E38-DA14-4E1C-A49B-4A87919AC00C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418840",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15760",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w2b:phpforumpro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "5AF06B1B-A88E-4874-A06B-A2BACE36ED71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17915",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets (CSS) files, as demonstrated using Google Desktop, aka \"CSSXSS\" and \"CSS Cross-Domain Information Disclosure Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17564",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hacker.co.il/security/ie/css_import.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15660",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2804",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hacker.co.il/security/ie/css_import.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP-UX B.11.00 to B.11.23, when IPSEC is running, allows remote attackers to have unknown impact."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000081817276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/advisories/9812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000081817276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:1-script:1-search:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2AC92B-EE35-4192-AD2B-8C884A5E960C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/1-search-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15712",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/1-search-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a .mov file with (1) a Movie Resource atom with a large size value, or (2) an stsd atom with a modified Sample Description Table size value, and possibly other vectors involving media files.  NOTE: item 1 was originally identified by CVE-2005-4127 for a pre-patch announcement, and item 2 was originally identified by CVE-2005-4128 for a pre-patch announcement."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2276BED4-82F0-4F62-AA6F-7E1667F28E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18149",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security-protocols.com/advisory/sp-x21-advisory.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20051117a.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20051117b.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/921193",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.security-protocols.com/advisory/sp-x21-advisory.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3109",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421547/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421569/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421635/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-011A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3012",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security-protocols.com/advisory/sp-x21-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20051117a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20051117b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/921193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.security-protocols.com/advisory/sp-x21-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421547/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421569/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421635/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-011A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:secureclient_ng:*:*:fp1:*:*:*:*:*",
            "matchCriteriaId" : "9CC5C407-EEB0-482A-822B-21F77E74F937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:secureclient_ng:r56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D6083C1-612E-4F2F-BB38-8F88C9B336C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1_secureclient:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2E569B-4812-48EF-9E44-45D594147258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1_secureclient:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90007E81-D5F9-4961-9DB1-C64977E74208"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039634.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17837",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00798.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00799.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2808",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039634.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00798.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00799.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docebolms:docebolms:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22F5F14-32EC-48BD-9347-D12A5185BADE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/docebo204_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/1015308",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17896",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15744",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/docebo204_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/1015308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-08T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary files and directories via \"..\" sequences in the Type parameter in a GetFoldersAndFiles command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docebolms:docebolms:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22F5F14-32EC-48BD-9347-D12A5185BADE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/docebo204_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/1015308",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17896",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15742",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/docebo204_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/1015308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNVERIFIABLE, PRERELEASE **  NOTE: this issue describes a problem that can not be independently verified as of 20051208.  Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code.  NOTE: the information regarding this issue is extremely vague and does not provide any verifiable information.  It has been posted by a reliable reporter with a prerelease disclosure policy.  This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example for discussion of the newly emerging UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board.  Without additional details or independent verification by reliable sources, it is possible that this item might be RECAST or REJECTED."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:6.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "65124AAD-0F80-4FBB-8A29-420C445E889C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "2F5492A8-E1B6-4ADF-B057-125ECD8B7FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "003D7E29-9970-4984-9756-C070E15B7979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01513F87-049E-46A9-A573-A7AF27EB30C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDC43D9-C93E-4FB4-B05B-9FB519B03DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348F3214-E5C2-4D39-916F-1B0263D13F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169753E3-949F-4B7D-9955-A52240CB8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336246FA-A06F-4792-9923-E6948F3494FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C7BF07-8B9A-4BDF-BEA9-C55ABDEA8165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1059:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC15988-96A0-4EBE-BF99-14D46F5A9553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F65BDA-393F-4274-B193-B578255DB013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4CADDC-84D2-45D9-99BA-A662D7490154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.eeye.com/html/research/upcoming/20051130.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20051130.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T11:03:00.000",
      "lastModified" : "2023-11-07T01:58:05.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4092.  Reason: This candidate is a duplicate of CVE-2005-4092.  This candidate was originally published to handle a pre-patch vague announcement, but multiple simultaneous pre-patch announcements resulted in duplicate CVEs that could not be identified until a full patch was released. Notes: All CVE users should reference CVE-2005-4092 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T11:03:00.000",
      "lastModified" : "2023-11-07T01:58:05.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4092.  Reason: This candidate is a duplicate of CVE-2005-4092.  This candidate was originally published to handle a pre-patch vague announcement, but multiple simultaneous pre-patch announcements resulted in duplicate CVEs that could not be identified until a full patch was released. Notes: All CVE users should reference CVE-2005-4092 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T11:03:00.000",
      "lastModified" : "2023-11-07T01:58:05.477",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4092.  Reason: This candidate is a reservation duplicate of CVE-2005-4092.  Notes: All CVE users should reference CVE-2005-4092 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNVERIFIABLE, PRERELEASE **  NOTE: this issue describes a problem that can not be independently verified as of 20051208.  Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code.  NOTE: it is not known whether this issue should be MERGED with CVE-2005-4126.  The information regarding this issue is extremely vague and does not provide any verifiable information.  It has been posted by a reliable reporter with a prerelease disclosure policy.  This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example for discussion of the newly emerging UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board.  Without additional details or independent verification by reliable sources, it is possible that this item might be RECAST or REJECTED."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA29F41-A723-435D-AA35-EE03280B58C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.eeye.com/html/research/upcoming/20051116.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20051116.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka \"Brand new Microsoft Excel Vulnerability,\" as originally placed for sale on eBay as item number 7203336538."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05969CEF-3A84-432A-AD36-A37862055B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78536AA-8694-4E0E-B7C6-9E5C3787D849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:97:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "E726A7DA-47E6-412D-BAF4-D52A489C0631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:97:sr2:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A3C16C-075A-4C9D-BC50-885C55BF5017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "27C6E1BC-406E-4B0B-B513-33226AC4482D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C619E79B-90FB-4812-B0F3-115B47498492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC893353-909C-49A8-8C3A-AD325C1D365D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "896E23B1-AB34-43FF-96F3-BA6ED7F162AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AED7433-3C95-4868-B05D-244149E0E33E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=7203336538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://informationweek.com/story/showArticle.jhtml?articleID=174910198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.com.com/2061-10789_3-5988086.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.zdnet.com/2100-1009_22-5989078.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.dicks-blog.com/archives/2005/12/08/excel-vulnerability-for-sale/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eweek.com/article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K0000614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/642428",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/blog/?p=71",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427635/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427698/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15780",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/news/11363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.theage.com.au/news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.theregister.co.uk/2005/12/10/ebay_pulls_excel_vulnerability_auction/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=7203336538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://informationweek.com/story/showArticle.jhtml?articleID=174910198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.com.com/2061-10789_3-5988086.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.zdnet.com/2100-1009_22-5989078.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.dicks-blog.com/archives/2005/12/08/excel-vulnerability-for-sale/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eweek.com/article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K0000614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/642428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/blog/?p=71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427635/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427698/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/news/11363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.theage.com.au/news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.theregister.co.uk/2005/12/10/ebay_pulls_excel_vulnerability_auction/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified \"security leak\" vulnerability in Contenido before 4.6.4, when register_globals is on and allow_url_fopen is true, has unspecified impact and attack vectors.  NOTE: it is likely that this is a PHP remote file include vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contenido:contendio:4.5.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77B84E3-DA5C-460B-A23E-73339ABF92D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contenido:contendio:4.5.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99745832-0E41-4B8E-8A18-9FEB3D6D10D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contenido:contendio:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0E328D-D75C-435C-9F98-28F17040249B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/apps/freshmeat/2005-12/0008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.contenido.org/opensourcecms/en/index-b-21-1616.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/apps/freshmeat/2005-12/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.contenido.org/opensourcecms/en/index-b-21-1616.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T15:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users to obtain the proxy authentication password via (1) an unspecified vector and (2) proxy log files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17931",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102090-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102090-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T15:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup.  NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox.  Also, it has been independently reported that Netscape 8.1 does not have this issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k-meleon_project:k-meleon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9",
            "matchCriteriaId" : "EC0A29B9-A7D3-4A5A-B21A-D701D0A10C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k-meleon_project:k-meleon:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328AFACF-FDA7-4FB5-A85E-4F349453301F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k-meleon_project:k-meleon:0.7_service_pack_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCDD160-5239-47C5-AE7D-6060FB6E0037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k-meleon_project:k-meleon:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A07303-9E74-4409-9853-8EC283734B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k-meleon_project:k-meleon:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6CAF6A-4E33-444F-B2DF-A270428B8C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k-meleon_project:k-meleon:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD39C88-D4B7-4F7D-81AC-F99A143B82E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "2FC40790-BCBF-4609-A7DC-5659B2233B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.12",
            "matchCriteriaId" : "EF9D2443-9389-42B0-BF93-3ADC1B7325EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.40",
            "matchCriteriaId" : "F337E57D-2918-4141-8842-A9D58DB922E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1BC491-9C5A-46D5-B6C3-5A8E5A1A0AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842CBD30-B4BA-4FCF-9152-9DBEBE59857C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113404911919629&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113405896025702&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17934",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17944",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17946",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2006-03.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/history-title.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-history.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425975/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425978/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113404911919629&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113405896025702&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/mfsa2006-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/history-title.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425975/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425978/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This issue was fixed in K-Meleon version 0.9.12."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T15:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplemedia:simplebbs:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C22A112-E9E0-4480-9406-9F685D577F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplemedia:simplebbs:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4ED99C-AFBA-485A-BDCC-A43C781F1DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplemedia:simplebbs:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CFC80A-2F70-4B73-AFDA-C1A524274381"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17949",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418838/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15764",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418838/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T15:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via the customerEmailAddress parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fad_solutions:drzes_hms:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247B1333-02EA-4945-A1E9-DC93FC7D870B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418851/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15766",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418851/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T15:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL commands via the invoiceID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fad_solutions:drzes_hms:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247B1333-02EA-4945-A1E9-DC93FC7D870B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418851/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15766",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418851/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T15:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) Wohnort and (2) Beruf fields in editprofile.php, (3) user parameter array in v_profile.php, and (4) the action parameter in misc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:thwboard:thwboard_beta:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E43C5E-50E8-4918-84D3-E95ED5B5EC7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-149.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418837/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15763",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://kapda.ir/advisory-149.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418837/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T15:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in calendar.php, (2) user parameter array in v_profile.php, and (3) the userid parameter in misc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thwboard:thwboard_beta:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E43C5E-50E8-4918-84D3-E95ED5B5EC7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-149.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418837/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15763",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-149.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418837/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T15:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter, as used by the user field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:website_baker:website_baker:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E912B82E-C82F-4DA6-BEC8-9092C32C2A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:website_baker:website_baker:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "471C8140-526F-4A09-9205-89A5EF3C2AF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-12/0085.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/wbaker_260_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15776",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-12/0085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/wbaker_260_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-09T15:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1) harf parameter in kullanicilistesi.asp and (2) baslik parameter in forum.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspmforum:aspmforum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82F58EC-B425-4811-88CF-3F02D5B9B4C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15767",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-10T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E241363-CEE5-4AD7-AC5B-67BF24779B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE62DEB3-8DF4-424C-AE9C-0573432692B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://anonsvn.ethereal.com/viewcvs/viewcvs.py/trunk/epan/dissectors/packet-ospf.c",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=349&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0156.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15794",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://anonsvn.ethereal.com/viewcvs/viewcvs.py/trunk/epan/dissectors/packet-ospf.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=349&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-10T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote attackers to execute arbitrary list administration commands via LFCR (%0A%0D) sequences in the pw parameter.  NOTE: it is not clear whether this is a variant of a CRLF injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7692A2-BC9A-4F87-B124-A2E7F3376E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9383A8-69A0-4398-95AB-C8E723AD857A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26CB041-073B-45DF-9E69-3835564E6006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE562AE-94D6-4C62-B149-AC79390D4BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9715CA02-81AE-4F85-B0F7-CE100A74D2D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-10T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code after a numeric argument to a /read/attachment URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBC9CAC-358F-42FD-8E63-99843572C060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9319DE-2B5B-494F-B8AD-8455F7823393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22CE39BD-2DE3-43D8-B1AF-E331EDDABF99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19017E4F-FBF3-4EF1-8835-100CE349E2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:8.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B97018D-CC7C-42F2-B4AF-11ECEB02353A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21548",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15787",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-10T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lyris ListManager 5.0 through 8.9a allows remote attackers to add \"ORDER BY\" columns to SQL queries via unusual whitespace characters in the orderby parameter, such as (1) newlines and (2) 0xFF (ASCII 255) characters, which are interpreted as whitespace."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBC9CAC-358F-42FD-8E63-99843572C060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9319DE-2B5B-494F-B8AD-8455F7823393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22CE39BD-2DE3-43D8-B1AF-E331EDDABF99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19017E4F-FBF3-4EF1-8835-100CE349E2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:8.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B97018D-CC7C-42F2-B4AF-11ECEB02353A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15787",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-10T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space (\"lyris\" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7692A2-BC9A-4F87-B124-A2E7F3376E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9383A8-69A0-4398-95AB-C8E723AD857A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26CB041-073B-45DF-9E69-3835564E6006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE562AE-94D6-4C62-B149-AC79390D4BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9715CA02-81AE-4F85-B0F7-CE100A74D2D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21559",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-10T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which provides sensitive server configuration information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7692A2-BC9A-4F87-B124-A2E7F3376E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9383A8-69A0-4398-95AB-C8E723AD857A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26CB041-073B-45DF-9E69-3835564E6006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE562AE-94D6-4C62-B149-AC79390D4BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9715CA02-81AE-4F85-B0F7-CE100A74D2D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-10T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a request with a trailing null byte (%00), which might also require (2) an authentication bypass step that involves a username with a trailing \"@\" characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7692A2-BC9A-4F87-B124-A2E7F3376E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9383A8-69A0-4398-95AB-C8E723AD857A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26CB041-073B-45DF-9E69-3835564E6006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE562AE-94D6-4C62-B149-AC79390D4BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9715CA02-81AE-4F85-B0F7-CE100A74D2D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21551",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21573",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-10T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remote attackers to obtain information such as the installation path by requesting a non-existent page and reading the env variable from the resulting error message page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7692A2-BC9A-4F87-B124-A2E7F3376E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9383A8-69A0-4398-95AB-C8E723AD857A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26CB041-073B-45DF-9E69-3835564E6006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE562AE-94D6-4C62-B149-AC79390D4BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9715CA02-81AE-4F85-B0F7-CE100A74D2D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21552",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-10T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7692A2-BC9A-4F87-B124-A2E7F3376E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9383A8-69A0-4398-95AB-C8E723AD857A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26CB041-073B-45DF-9E69-3835564E6006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE562AE-94D6-4C62-B149-AC79390D4BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris_technologies_inc:listmanager:8.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9715CA02-81AE-4F85-B0F7-CE100A74D2D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://metasploit.com/research/vulns/lyris_listmanager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-10T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute Javascript via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:cleverpath_portal:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82057B74-4AA5-4420-845E-B1F818391142"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17962",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QI70871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15783",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QI70871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-10T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which allows local users to access the previous contents of the disk."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgp:desktop:*:*:professional:*:*:*:*:*",
            "versionEndIncluding" : "9.0.3_build_2932",
            "matchCriteriaId" : "863BBA4B-AB73-45A2-A740-6D32D57BF1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgp:desktop:8.0:*:home:*:*:*:*:*",
            "matchCriteriaId" : "0745A00E-1A44-475D-A39B-6597CDB27AEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgp:desktop:9.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "5B5BCE69-AA38-4321-8B95-A3CFDFCBC9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/research/vulns/pgp_slackspace/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17827",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419282/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419654/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15784",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://metasploit.com/research/vulns/pgp_slackspace/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419282/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419654/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3532",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-11T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pam_tally, does not call the pam_acct_mgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.37.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B758F4-32EF-43B1-A0F1-E54D9C050BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB82816F-11B7-40C3-AF80-C3091372C46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66C6966-7500-432C-A766-35FAA9E42FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B082F880-5684-4FB5-B469-A5B65847D577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.48.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A23AE92-D4C0-4F7C-85DC-BC3A9B7D53A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.48.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFFC62C-4969-405E-8F2C-E3D31DDED5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.49.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FEF102-4961-4AA0-969F-4108E4556CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.50.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E387763-BAA3-4353-8065-DBB99CFC94B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mail_server:0.52.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF1D6D6B-BA9B-493B-9E0A-43A55AA8766B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=211920",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17919",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17999",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-917",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15771/",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23532",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/226-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=211920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15771/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/226-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3533",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-11T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en OSH anteriores a 1.7-15 permite a usuarios locales ejecutar código de su elección mediante un directorio de trabajo actual y nombre de fichero largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osh:osh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.14",
            "matchCriteriaId" : "441B5A68-C8B5-4AB4-945D-BEBBD325EF0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17967",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-918",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21576",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12455",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2812",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/17967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Soti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard reset a PDA via a series of initialization, command, and reset packets sent to port 5492."
      }, {
        "lang" : "es",
        "value" : "Soti Pocket Controller-Professional 5.0 permite a atacantes remotos apagar, reiniciar, o hacer un 'reset' duro a una PDA mediante una serie paquetes de inicialización, orden, y reinicio enviados al puerto 5492."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soti:pocket_controller-professional:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6912B421-B0EF-4245-9427-982964BFC1EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17966/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.airscanner.com/security/pocketcontroller.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418963/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15775/discuss",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17966/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.airscanner.com/security/pocketcontroller.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418963/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15775/discuss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to \"fail with an Overflow on bad date data in a processed message,\" a different vulnerability than CVE-2005-3573."
      }, {
        "lang" : "es",
        "value" : "Mailman 2.1.4 a 2.1.6 permite a atacantes remotos causar una denegación de servicio mediante un mensaje que causa que el servidor \"falle con un desbordamiento en datos de fecha incorrectos en un mensaje procesado\", una vulnerabilidad diferente de CVE-2005-3572."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643610C6-99A9-43C9-A8FC-463A244C08DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C53260-503F-4934-B1FE-9FACD8E0EE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CBFC5-CB18-4FE4-9B4D-F3280CBCCD6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18449",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18456",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18612",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19167",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19196",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0204.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0012/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-242-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0204.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0012/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-242-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificad en el PEAR installer 1.4.2 y anteriores permite a atacantes con la implicación de los usuarios ejecutar código de su elección mediante un paquete artesanal que puede ejecutar cóidog cuando el comando 'pear' es ejecutado cuando el frontal Web/Gtk es cargado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2",
            "matchCriteriaId" : "2661398E-6268-4B08-82A9-B594ED53475D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB3ABD1F-BCB7-412E-BF9C-3E3753E35C54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A286382-1A8E-4A85-969E-E86B2991FD03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4609FA08-77D8-477F-BF06-EF1DCCF304EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C03D94-A42D-4B94-A772-F224B7A51DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2D5A6D-5F13-4170-895C-7D9766D66E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E70348B-DD40-4312-BEC1-5B70DE0502F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7183C6B-7916-4A9C-86B2-A1ADF2657FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B6D2DE-FFAA-47DD-B7F9-9D4A8AD5D86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B18D859-6AEB-416B-AD65-549664AC7702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D84F7B-61EF-4609-AA12-092A82752A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E691BDA-A3C4-4355-9B3B-CF4629234E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15572C2-8A38-47BC-B816-D38465B3DF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C78AE7-1F68-4778-B47F-3926CCD4909B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2C0038-0B34-45C4-8E12-CB16E29D5A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E6FEDC-D820-4F24-855F-457201A7E108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B071F3AA-120E-4ED0-951B-E3E758C9B868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E807C846-21A6-40DA-898C-81621C917C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E5187149-A430-4C18-A446-D63691C5DBC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "17D913D2-1DEB-4899-968C-CE1EE24B0F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A00E459-5F1A-4A28-9B62-D7DB43F831B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pear.php.net/advisory-20051104.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17563/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015161.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2444",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pear.php.net/advisory-20051104.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17563/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treated as a vulnerability in ATutor."
      }, {
        "lang" : "es",
        "value" : "registration.PHP en ATutor 1.4.1 p12 permite a atacantes remotos ejecutar comandos SQL de su elección mediante una dirección de correo electrónico que termina en un carácter NULL, lo que evita la comprobación mediante expresión regular de PHP.\r\nNOTA: es posible que esto sea en realidad un fallo en el código de PHP, en cuyo caso no debería ser considerado como una vulnerabilidad de ATutor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD9CAD8-8ADA-459C-9DF8-C161EE31BF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/atutor151pl2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015166.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15355/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://rgod.altervista.org/atutor151pl2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015166.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15355/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:C",
            "baseScore" : 9.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A270E6AA-BE5A-4FEF-BCE9-A8EFBAA35586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1F78A2-CC22-445A-915A-452994BF2A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FCB376-05D3-456C-A9DE-6455B15E034B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85711E7-3A5E-47B6-9BF1-42D9154C9084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5748E0E-55D3-490C-B771-A302B9AFC1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B737E20E-F4D1-4A3D-A417-C735CB6E9EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015176.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.procheckup.com/Vulner_PR0511.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.procheckup.com/Vulner_PR0511.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account that has been disabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E5A18A-572A-4914-8AC7-AEF02C760574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5158D0-ED2B-4716-8A81-385562566A7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C7737-404A-4EB3-9A1B-0091116D8CCE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A47DCB-50D3-4CC0-874C-39FF8D09B2EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE437407-E9D3-41A7-B5BF-62CD861B3830"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810364F5-B6FA-47A2-A5DE-F886CEF1ED70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE280A4-C218-4D2F-88E3-718F19F0E4B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591237E-DBA8-42F3-B4A2-BFD537AE0A20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC5DAFA-24B9-4C5D-8F7B-9DDDDFAA2342"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56C041A-5D92-4B7F-9962-A083E883EA8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7223D79B-F096-4265-8D80-F5A41E5A1B1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9F17CE-B48E-45A2-BFC9-0D27AF032F36"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D33CD1F-105E-43CC-B135-76E0AC8CACD1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F501CC-BD8E-460F-9251-B492C979676E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84BE69E-9760-4ABE-A8C6-C96AD4ACB56A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD36E240-FDBB-4EB8-B2C2-7B59715EEDF1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD7AF9A-54CD-4D15-9D41-D740CC48FF1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D7D55B-887B-479D-9067-0CE457C25561"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705BC91B-4583-418D-BF68-B219BC04EB42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1D191B-ACAF-4871-B553-A55F99827EF2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7727351-0ED7-45DD-82DE-0FEE92699927"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563E83E1-74C0-4312-A5C5-0223ADE55F65"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE72890F-2421-4A6B-A8F1-4325F824A93F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE079B94-A8C6-41E7-98B1-29A4DE4F66EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AC89E5-8B9C-4C6B-8976-6A4A6F922858"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99A154-D3C6-4B1C-BEC9-7D1AEAFCAC41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADAAD5F-3286-464E-A309-9454EE9A663F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1437DE-E19A-4C2C-9077-DB1FF48772C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0089BE-856D-4998-BBFE-1F626A43377E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE81F49-05CE-4987-90C0-B6D077B65DD9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650E19BC-6545-45E9-BE2B-0900323C80C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173804A3-04EE-484B-A0CF-8DFFE060EFA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AF1105-8B53-4EC7-B52A-9344BDC524CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9DC6F1-3DB7-48B3-8202-66450B95C0BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D06E900-7F9A-4BF0-8411-718AEBFCF8AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A07C4B-8A49-4126-A957-B16B5A79582B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFD255-A906-4902-9845-C33669CF9795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17519/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015194.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15388/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17519/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15388/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6060C8CB-1592-479E-86AD-AC180F855BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DAA88C-BADD-405A-9E66-5B0839595A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D5E3B7-5377-4CA8-BA0D-056870CB717E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C11931-B594-43EC-9698-7152B1DF8CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976B5923-1BCC-4DE6-A904-930DD833B937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5452DF1-0270-452D-90EB-45E9A084B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD12E6-F92E-4371-ADA7-BCD41E4C9014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FDF4FB-06FA-4A10-A3CF-F52169BC8072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B29018-B495-482A-8FF7-66821A178F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38718561-70C7-4E0D-9313-87A5E82ED338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D057064A-9B34-4224-97BA-4D5840A92BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C297DC-69B1-4BE6-A5EF-D320BD0CA968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4C1FFB-F6AA-4DED-9C54-DCB274F59A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338A92AC-92D2-40BF-9FAC-884AF6F74D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DB5610-03CE-425E-8855-70D5787029FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DFC86C-7743-4F27-BC10-170F04C23D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5170421-BA0C-4365-9CD6-BD232EA08680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5909AAA4-4AF9-4D23-87C5-5D7787909B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2170CFD0-2594-45FB-B68F-0A75114F00A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C07744-CAE8-44C6-965E-2A09BAE1F36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17E0E59-C928-49AB-BAA7-4AE638B376D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294FC65B-4225-475A-B49A-758823CEDECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6156B085-AA17-458C-AED1-D658275E43B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C898BE7-506D-49DA-8619-F86C7A9FE902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6419309-385F-4525-AD4B-C73B1A3ED935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F7E821-2908-47F1-9665-E9D68ECC242F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79C7098-37D0-4E6E-A22C-3C771D81956F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7D2832-B654-406E-AA34-B3BD1D6F0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5688D95-89EF-4D2E-9728-2316CAC3CBE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B69E49B2-1B3C-4434-ACF1-CF4F519E3C32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17534/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015192.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15394",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.sudo.ws/sudo/alerts/perl_env.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-235-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17534/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015192.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.sudo.ws/sudo/alerts/perl_env.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-235-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider this to be a security issue.\nhttp:bugzilla.redhat.combugzillashow_bug.cgi?id=139478#c1",
        "lastModified" : "2008-01-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter.  NOTE: the vendor says that since only one character can be modified, there is no SQL injection. Thus this might be an \"invalid SQL syntax error.\"  Multiple followups support the vendor"
      }, {
        "lang" : "es",
        "value" : "** DISPUTADA ** El fabricante y terceras partes  han disputado este asunto. Vulnerabilidad de inyección de SQL en Memberlist.php en Simple Machines Forum (SMF) 1.1 rc1 y anteriores permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro \"start\".\r\nNOTA: El fabricante afirma que, dado que sólo un carácter puede ser modificado, no hay inyección de SQL. Esto puede ser un \"error sintáxis SQL no válido\". Múltiples continuaciones respaldan al fabricante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1_rc1",
            "matchCriteriaId" : "3A7B2529-372E-4B02-9072-00B2A147CCBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-12/0090.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419068/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419105/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419250/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419535/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-12/0090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419068/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419105/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419250/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419535/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in getdox.php in Torrential 1.2 allows remote attackers to read arbitrary files via \"../\" sequences in the query string argument."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en getdox.php de Torrential 1.2 permite a atacantes remotos leer ficheros de su elección mediante secuencias \"../\" en el argumento de cadena de consulta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:torrential:torrential:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D69B83-A565-476B-953C-D5D28540A1E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419103/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419103/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect script allow remote attackers to inject arbitrary web script or HTML via the domainname parameter to register.php, and other unspecified vectors.  NOTE: the vendor has disputed this issue, stating \"No invalid input can reach the script."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el 'script' de redirección MilliScripts 1.4 permiten a atacantes remotos inyectar 'script' web o HTML de su elección mediante el parámetro \"domainname\" de register.php, y otros vectores de ataque no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:milliscripts:milliscripts:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59B90EA-16EC-40CE-8AE4-5C6400F3450B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17997",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419070/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433545/30/5070/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2839",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419070/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433545/30/5070/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cal_make.pl in ACME PerlCal 2.99.20 allows remote attackers to inject arbitrary web script or HTML via the p0 parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitos cruzados (XSS) en cal_make.pl de ACME PerlCal 2.99.20 permite a atacantes remotos inyectar 'scritp' web o HTML de su elección mediante el parámetro \"p0\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acme_labs:perlcal:2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "829A2A5B-6E7A-4FDE-89AA-097D627ABD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acme_labs:perlcal:2.99.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A33DC6-AAF6-4499-8928-75C4EBD9CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acme_labs:perlcal:2.99.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847CF95F-7965-4B0E-8E52-B5F88CD7DBD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0315.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015332",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21540",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.perlcal.com/calendar/docs/bugs.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15779",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.perlcal.com/calendar/docs/bugs.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to read arbitrary files via the _tcf parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en captcha.php de Captcha PHP 0.9 permite a atacantes remotos leer ficheros de su elección mediante el parámetro _tcf."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:milky:captcha_php:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47864D64-A59C-4A61-B583-8E0401997F67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freshmeat.net/projects/captchaphp/?branch_id=57290&release_id=206985",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://freshmeat.net/projects/captchaphp/?branch_id=57290&release_id=206985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view.php in PHP-addressbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en view.php en PHP-addressbook 1.2 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:widgetmonkey:php-addressbook:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E334D76-5687-4516-8B86-E01B71FA9EFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17885",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the (1) forum_id parameter to forum.asp, (2) unspecified parameters to register.asp, and (3) the \"Search For\" field in search.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en ASP-DEV ASP Resources Forum permiten a atacantes remotos ejecutar órdenes SQL de su elección mediante (1) el parámetro \"forum_id\" de forum.asp, (2) parámetros no especificados de registrer.asp, y (3) el campo \"Search For\" en search.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp-dev:asp_resources_forum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CD802E-A386-451A-A4E0-89BC395D5D5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015316",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject arbitrary web script or HTML via the result parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en password.asp de DUWare DUportal Pro 3.4.3 permite a atacantes remotos inyectar 'script' web  o HTML de su elección mediante el parámetro result."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:duware:duportal_pro:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ADAC10-EE62-4217-8A16-75A60214BBF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17898",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15731",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in eFiction 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the let parameter in a viewlist action to titles.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en eFiction 1.0 y 1.1 permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante el parámetro \"let\" en una acción \"viewlist\" de titles.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A2AFF2-64BD-4749-B92A-BD5020CFB467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1234166D-F9ED-41DA-B08F-21E6B96AC43B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the let parameter in a viewlist action to titles.php and (2) the username."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en eFiction 1.0, 1.1 y 2.0 permiten a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro \"let\" en una acción \"viewlist\" de titles.php y (2) el nombre de usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A2AFF2-64BD-4749-B92A-BD5020CFB467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1234166D-F9ED-41DA-B08F-21E6B96AC43B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846130EE-6889-4359-9221-692200E49719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) let parameter in a viewlist action to authors.php and (2) sid parameter to viewstory.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en eFiction 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro \"let\" en una acción \"viewlist\" de authors.php y (2) el parámetro \"sid\" de viewstory.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A2AFF2-64BD-4749-B92A-BD5020CFB467"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en eFiction 1.1 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro \"uid\" de viewuser.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1234166D-F9ED-41DA-B08F-21E6B96AC43B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Upload new image\" command in the \"Manage Images\" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .php extension that contains a GIF header, which passes the image validity check but executes any PHP code within the file."
      }, {
        "lang" : "es",
        "value" : "La orden \"Upload new image\" (Subir nueva imagen) en \"Manage Images\" (Gestionar imágenes)  de eFiction 1.1, cuando se permite a los miembros subir imágenes, permite a atacantes remotos ejecutar PHP de su elección subiendo un fichero con extensión .php que contiene una cabecera GIF, que pasa la comprobación de validación de imagen pero ejecuta cualquier código PHP en el fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1234166D-F9ED-41DA-B08F-21E6B96AC43B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments, which leaks the full pathname in the resulting PHP error message."
      }, {
        "lang" : "es",
        "value" : "eFiction 1.0, 1.1 y 2.0 permiten a atacantes remotos obtener información sensible mediante una petición directa a storyblock.php sin argumentos, lo que filtra la ruta completa en el mensaje de error PHP resultante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A2AFF2-64BD-4749-B92A-BD5020CFB467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1234166D-F9ED-41DA-B08F-21E6B96AC43B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846130EE-6889-4359-9221-692200E49719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function."
      }, {
        "lang" : "es",
        "value" : "eFiction 1.0, 1.1 y 2.0 permiten a atacantes remotos obtener información sensible accediendo a phpinfo.php, que ejecuta la función PHP phpinfo()."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A2AFF2-64BD-4749-B92A-BD5020CFB467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1234166D-F9ED-41DA-B08F-21E6B96AC43B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846130EE-6889-4359-9221-692200E49719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php.  NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration practices, e.g. by not removing utility scripts once they have been used."
      }, {
        "lang" : "es",
        "value" : "eFiction 1.0, 1.1 y 2.0, en entornos no especificados, podrían permitir a atacantes remotos llevar a cabo operaciones no autorizadas accediendo directamente a (1) install.php o (2) upgrade.php.\r\nNOTA: no está claro si esto es una vulnerabilidad de eFiction o el resultado de prácticas de administración incorrectas, como no haber eliminado los 'scripts' de instalación una vez usados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A2AFF2-64BD-4749-B92A-BD5020CFB467"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1234166D-F9ED-41DA-B08F-21E6B96AC43B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:efiction_project:efiction:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846130EE-6889-4359-9221-692200E49719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/efiction2_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory."
      }, {
        "lang" : "es",
        "value" : "Insyde BIOS V190 no borra el búfer del teclado después de leer la contraseña de la BIOS durante el arranque del sistema, lo que permite a administradores o usuarios locales leer directamente la contraseña de la memoria física."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insyde_bios:v190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12B464EA-B99F-4E76-97F6-9CD16B6F06D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ivizsecurity.com/preboot-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/847537",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419610/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ivizsecurity.com/preboot-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/847537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419610/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-11T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory."
      }, {
        "lang" : "es",
        "value" : "AWARD Bios Modular 4.50pg no borra el búfer del teclado después de leer la contraseña de la BIOS durante el arranque del sistema, lo que permite a administradores o usuarios locales leer la contraseña directamente de la memoria física."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:award:award_bios_modular:4.50pg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E9C36E-50B6-4435-B867-3BE73DC511DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ivizsecurity.com/preboot-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/847537",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419610/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ivizsecurity.com/preboot-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/847537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419610/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-12T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary web script or HTML via the StartRow parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cfmagic:magic_book_personal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87AA1166-6CD6-491F-B75B-9BA3BEDAB048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cfmagic:magic_book_professional:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63F4E6DD-70A4-48AF-8F49-CF41FE5AC49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/magic-book-v20-professional-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21529",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/magic-book-v20-professional-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4178",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-12T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.47",
            "matchCriteriaId" : "42FAEFDB-C7B0-40F2-B09F-5F4FE1605C17"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://matt.ucc.asn.au/dropbear/dropbear.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18108",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18109",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18142",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-923",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-13.xml",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15923/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2962",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://matt.ucc.asn.au/dropbear/dropbear.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15923/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Calendar name field when creating calendars, (2) event title field when deleting events, the (3) Category and (4) Location search fields, and the (5) attendees email address fields when editing event attendees, and possibly other vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Horde Kronolith H3 anteriores a 2.0.6 permite a usuarios remotos autenticados inyectar 'scritp' web o HTML de su elección mediante (1) el nombre del campo \"Calendar\" cuanto se crean calendarios, (2) el campo de título de evento cuando se borran eventos, (3) los campos de búsqueda \"Category\" y (4) \"Location\", y (5) los campos de dirección de correo electrónico de los asistentes cuando se edita asistentes al evento, y posiblemente otros vectores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ECD4DC8-99A0-4CBF-967B-E0A211E3E3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F7570D-A08C-43AB-8C29-896FC2E41D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2330AF9-4C0D-4E78-9F81-60A0ED2AA5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9281D64-6465-4D5E-9A14-646AF82CA543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFBB69FA-9283-4C8F-8FFA-215859E4FFDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42184BB-1257-41ED-8739-955394B47343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720BC9E8-0355-4D14-A6E6-DA305CEB0FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3646B0CC-9B0D-492C-8432-3D869AD420D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E1CEB7-043B-46A4-80F0-B45C7A69FEC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A1CE51-A02D-4163-8459-E6562DE7FB51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0FF6F1-E9ED-4F50-8BDA-75BE13FCCD67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8F4BEF-6997-41A9-9310-B93AFB5A6BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F16F92-48EE-4AC4-8877-7FFFAF4AC63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:kronolith_h3:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EBC070-A27E-4271-B79B-9CAEDAD4F84F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0459.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000234.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17971",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21608",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21609",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21610",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21611",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sec-consult.com/245.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15808",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000234.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sec-consult.com/245.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by (1) the identity field, (2) Category and (3) Label search fields, (4) the Mobile Phone field, and (5) Date and (6) Time fields when importing CSV files, as exploited through modules such as (a) Turba Address Book, (b) Kronolith, (c) Mnemo, and (d) Nag."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Horde Application Framework anteriores a 3.0.8 permiten a usuarios remotos autenticados inyectar HTML o 'script' web de su elección mediante múltiples vectores, como se ha demostrado mediante (1) el campo identidad, (2) los campos de búsqueda \"Category\" y (3) \"Label\", (4) el campo \"Mobile Phone\", y (5) los campos \"Date\" y \"Time\" cuando se importa ficheros CSV, lo cual ha sido explotado mediante módulos como (a) Turba Address Book, (b) Kronolith, (c) Mnemo, y (d) Nag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5634E1-5D6B-4F64-99F6-5F650EC2E13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF6FC53-D300-4A40-8D82-D174F6472DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E510AF-4FC2-4872-8844-2021CB72BEA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0895A4FC-4755-4125-822D-6D5A81C8EBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.3_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDEA1EC-DBD3-4255-873B-577554888E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.3_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D4182B-7A01-49D0-A192-4D67E64AD62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.3_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156B7704-72B9-4A19-A541-382E3362ACC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE22A26-6DF7-4EBA-8D76-24AC69B4ECD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166F65FA-CF60-48DB-A717-448FB84AD24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA9E158-EF45-4468-935B-1FFA5C511874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B37F3D-920B-4953-BFF3-197ADD554E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B131407-A29A-4140-A884-FADFE39CDBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AE0227-3E50-4137-8287-45154AD6AD79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A04BEC0-BFDC-4630-B98D-8924F2336EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCEC5BC-19CD-4C86-8963-4969718AEDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76253CE-3A05-40F2-9AC2-11FA1C83E12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB6E8FC-E9F2-4194-B877-90ED6BCA8152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE54204-8E8B-4B3D-BE10-3ECE4DBB8428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B159D53E-0F6D-41AA-A3D2-B77BA18735CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD03C5F-423A-475C-8D0C-4F578E93542B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF6B69C-B7E7-4EEA-A18B-2B6969F26A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94258B3-CC62-41CD-987C-75868208F8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A276A013-CCF3-4AF5-973F-FD68CC9E2291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB2DBC9-0934-4BA2-A6E0-CF1BCB1E0E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362CDCE7-16DA-4951-81ED-5B858126E37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64FB724-0978-48E1-94AA-2ED5281C1C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9535A094-9B6F-4E17-8097-D7A6D8936F8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F473B48-F48A-4B6B-8D69-1F97BB6AA923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E1A7DB-906F-4973-BF1C-EFFA0B595A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9E6EB8-B5E5-41DF-B5E2-0A97448D16A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36BEAB4E-04DA-4EDD-990C-697EA0984291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142B9B05-955E-4688-AF6E-ED7B4FE41846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295D48BB-F143-4047-B366-74101AB983CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58431B48-EA29-4A6F-B9FF-C416924E63B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61064C18-0E45-4790-B323-262287D8DE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFF25C4-03F2-4D65-ABA9-2406957D546E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0A882D-9BEB-4A3C-9371-69260374E0B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17E3AFB-849F-463D-96E8-686B049F48DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047563A7-5F6A-4DE2-8518-88E4E6EEB7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78356C5F-A76E-4CB1-894D-0D882A665096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0405EC4-12DA-4F15-A5B0-799D399C759E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C1DE26-E7B2-4A4E-9F6D-4206F7BC5EBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED629B0-A214-47B5-9767-B47AFB154AFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.horde.org/archives/announce/2005/000238.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17970",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19619",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sec-consult.com/245.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2835",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sec-consult.com/245.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject arbitrary web script or HTML via (1) the tasklist's name or (2) description, when creating a new tasklist."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en templates/tasklists/tasklists.inc en Horde Nag Task List Manager H3 anteriores a 2.0.4 permiten a atacantes remotos autenticados inyectar 'script' web o HTML de su elección mediante (1) el nombre de la lista de tareas o (2) la descripción, cuando se crea una nueva lista de tareas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:nag_task_list_manager_h3:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD61CED-6F20-444E-AD1B-A4BC74F2523E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:nag_task_list_manager_h3:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860A9A2E-2FE6-45B4-A375-ED76B9061DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:nag_task_list_manager_h3:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380F1697-70B5-4746-BB95-02D35DC4DE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:nag_task_list_manager_h3:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFB4140-AD10-4389-8728-743689D1B896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:nag_task_list_manager_h3:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3146654-9867-4C10-8781-35A7B87360E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:nag_task_list_manager_h3:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF6A037-D9CF-48B8-93C8-4D462FD5DFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:nag_task_list_manager_h3:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3382933-4CBD-488E-94C8-E0234F7FDCCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:nag_task_list_manager_h3:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE62271C-E99A-4726-83C5-ACD42732C588"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/nag/templates/tasklists/tasklists.inc?r1=1.10&r2=1.11&ty=h",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000236.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17969",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sec-consult.com/245.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.horde.org/diff.php/nag/templates/tasklists/tasklists.inc?r1=1.10&r2=1.11&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000236.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sec-consult.com/245.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in templates/notepads/notepads.inc in Horde Mnemo Note Manager H3 before 2.0.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) the notepad's name or (2) description, when creating a new notepad."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en templates/notepads/notepads.inc en Horde Mnemo Note Manager H3 anteriores a 2.0.3 permite a a usuarios remotos autenticados inyectar 'script' web o HTML arbitrario mediante (1) el nombre del bloc de notas o la (2) descripción, cuando se crea un bloc de notas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:horde:mnemo_note_manager_h3:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45C5E89-C526-470D-93A0-44F04EF8BB53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:horde:mnemo_note_manager_h3:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20B2FC0A-1613-458B-972B-26F12A6F7C6F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:horde:mnemo_note_manager_h3:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B787D7-B97C-4DF4-905F-ECD388CBDDC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php/mnemo/templates/notepads/notepads.inc?r1=1.9&r2=1.10&ty=h",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000237.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17964",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sec-consult.com/245.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15803",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.horde.org/diff.php/mnemo/templates/notepads/notepads.inc?r1=1.9&r2=1.10&ty=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000237.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.sec-consult.com/245.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in UseBB before 0.7 allows remote attackers to inject arbitrary web script or HTML via the $_SERVER['PHP_SELF'] variable."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en UseBB anteriores a 0.7 permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante la variable $_SERVER['PHP_SELF']."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47515248-71FF-451D-BA3A-B3729A08E12E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F89271-645A-478B-BBE7-65AC42D9CC0A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575F8D44-98DF-4D4E-B87D-09D9D6B5C56A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF43C451-3507-4362-96D0-152A49ED3342"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031AA5C9-E4C8-46E5-A299-BCECD0591D66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A045B4F-3A02-41D7-A2E0-3DD224D7C871"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.2.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D12B81-5E0E-4123-BD1C-B5E823BB3726"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D32DFF5-107C-4A8B-AD35-E918197C396C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF8DED1-980C-4463-A4BC-D8326D98FB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E736160-C577-4BCD-BBA4-DF0EF3B0382C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07549F5B-69A1-4E16-8989-9CB91B0529AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576D4057-3550-48DF-98EB-06DB8FF9D0CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E57778-CCE4-473C-9ED3-FC74F1C3E7E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7322CBAE-D9DA-4663-9D4A-AEEF5F0C0CEA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E4267B-A44E-45E1-91D3-F1E8FA6DDB7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AADFB3B-28C9-40E3-B901-191B2303A5E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8AFDE36-7692-4D91-8507-BCF919305C4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.7_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5B5F576-8FEC-4650-936D-24165F83F19F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:usebb:usebb:0.7_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5EDD9C-6CC3-4F1B-A9CC-C76EEA715D1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17958",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377496&group_id=93103",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15817",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377496&group_id=93103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to cause a denial of service (application crash) via a long query string."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en MediaServerList.exe en Sights 'n Sounds Streaming Media Server 2.0.3.a permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante una cadena de consulta larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:innovateware:sights_n_sounds_streaming_media_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3.a",
            "matchCriteriaId" : "F43B5E61-E94B-4198-B3C8-8C8651C25A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17998",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/sws.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15809",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/sws.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the ParentId parameter in SPT--BrowseResources.php, (2) ResourceId parameter in SPT--FullRecord.php, (3) ResourceOffset parameter in SPT--Home.php, and (4) F_UserName and (5) F_Password in SPT--UserLogin.php.  NOTE: it was later reported that vector 1 is also present in 1.4.0."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en Scout Portal Toolkit (SPT) 1.3.1 y anteriores permiten a atacantes remotos ejecutar órdenes SQL de su elección mediante  el parámetro (1)ParentId parameter en SPT--BrowseResources.php, el parámetro (2) ResourceId en SPT--FullRecord.php, el parámetro (3) ResourceOffset en SPT--Home.php, y (4) F_UserName y (5) F_Password en SPT--UserLogin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_scout:scout_portal_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "A27FFA72-AEB2-4912-8AB1-A60561EA5450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_scout:scout_portal_toolkit:1.3.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8832CFB6-D118-4958-806F-D3C023D8B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_scout_project:scout_portal_toolkit:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A81E80-EC68-4761-B6D8-E82B4D5A4DB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/491611/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15818",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/29034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2844",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.x-illusion.com/rs/Scout%20Portal%20Toolkit.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/5540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/491611/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/29034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.x-illusion.com/rs/Scout%20Portal%20Toolkit.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/5540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the ss parameter in SPT--QuickSearch.php; (2) ParentId parameter in SPT--BrowseResources.php; (3) the ResourceId parameter in SPT--FullRecord.php; (4) ResourceOffset parameter in SPT--Home.php, (5) F_SearchString parameter in SPT--QuickSearch.php; (6) F_UserName and (7) F_Password parameters in SPT--UserLogin.php; (8) F_SearchCat1, (9) F_TextField1, (10) F_SearchCat2, (11) F_TextField2, (12) F_SearchCat3, (13) F_TextField3, (14) F_SearchCat4, (15) F_TextField4, (16) ResourceType, (17) Language, (18) Audience, (19) Format parameters in SPT--AdvancedSearch.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_scout:scout_portal_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "A27FFA72-AEB2-4912-8AB1-A60561EA5450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_scout:scout_portal_toolkit:1.3.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8832CFB6-D118-4958-806F-D3C023D8B6F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15818",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.x-illusion.com/rs/Scout%20Portal%20Toolkit.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.x-illusion.com/rs/Scout%20Portal%20Toolkit.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is executed with extra privileges in a cryptographically signed Java Applet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nortel:ssl_vpn:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.1.6",
            "matchCriteriaId" : "DF290CBD-2DE3-4E3A-8BBC-F4A0E1612FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nortel:ssl_vpn:4.1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E0CCEA-D0E2-434B-B6B8-526C26434928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nortel:ssl_vpn:4.1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD7B771-1889-48FA-9455-6595D6C8A4C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17974",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sec-consult.com/247.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419263/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15798",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sec-consult.com/247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419263/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netref:netref:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "079EF2B9-2E4B-4DC4-97CB-12142C5685E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17987",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2838",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) month, (2) day, and (3) year parameters in an addevent action in calendar.php; (4) threadmode and (5) showcodebuttons in an options action in usercp.php; (6) list parameter in an editlists action to usercp.php; (7) rating parameter in a rate action in member.php; and (8) rating parameter in either showthread.php or ratethread.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:pr2:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "FCA236E2-038D-443E-BF77-2BF21B11BAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "C14F8B95-1A33-4DA8-8DE4-35C7DC3590CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:pr1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7728CD-1FA0-4428-B3FC-883781A699CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B85E419B-F9D3-4839-A15C-F22BF9DABFAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB8B860-71DC-4F45-9E2A-74BD1C2ED893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C67749DF-F8AF-4C88-A120-0F48307C58E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0820A0-5D85-446F-9B7E-F8DB258A1178"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0379.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=5184&pid=30964#pid30964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18000",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419067/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420159/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15793",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-12-001.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKPN2005-12-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0379.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=5184&pid=30964#pid30964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419067/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420159/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-12-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKPN2005-12-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set of vulnerabilities than those identified by CVE-2005-4199."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2F2E0F-94E6-4D63-903F-0090E9D90BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC63F97-643C-43B9-83E5-E43928CB1CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43876FE9-F002-4524-B6C2-5DE4992E0A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE10B8B4-167D-430D-9C7D-6CF934F17D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4_security_patch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488811F6-7CC9-4F56-AD7C-81247B351851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2BF5B5-6364-44D5-9CB0-4C9070B88CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:preview_release_2_rev_686:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BB76EE-D834-4CD1-BCB8-4820A72EB0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B59C3-0318-49F5-A409-E258E4D322C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F3D49D-C89A-44FB-B254-4F8BAA20BFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCAC700-1448-4BD4-97F4-8CC06F518524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE181AB-C597-48A3-A5DA-135E601968AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=5184&pid=30964#pid30964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18000",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15793",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=5184&pid=30964#pid30964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in My Album Online 1.0 allows remote attackers to access arbitrary files via \".../\" (triple dot) sequences in unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:showalbumonline:my_album_online:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3001F6-1B4A-4A8E-BE62-FC962ED2A7B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17951",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/myAlbumOnline.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/myAlbumOnline.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (1) .. (dot dot), (2) \"...\" (triple dot), and (3) \"..//\" sequences in the URL, (4) \"../\" sequences in the source parameter to viewsource.jsp, or (5) \"..\\\" (dot dot backslash) sequences in the NS-query-pat parameter to the search URL. URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logisphere:logisphere:0.9.9j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5560FE9D-A2CB-4033-A905-309AFD17B791"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17989",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/logisphere_server.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15807",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/logisphere_server.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote attackers to cause a denial of service by sending a large number of messages via the msg command.  NOTE: due to lack of appropriate details by the original researcher, it is unclear whether this description accurately reflects the discloser's claim and is distinct from the XSS issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logisphere:logisphere:0.9.9j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5560FE9D-A2CB-4033-A905-309AFD17B791"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17989",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/logisphere_server.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/logisphere_server.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in LogiSphere 0.9.9j allows remote attackers to inject arbitrary Javascript via the msg command. NOTE: due to lack of appropriate details by the original researcher, it is unclear whether this issue is distinct from the msg DoS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logisphere:logisphere:0.9.9j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5560FE9D-A2CB-4033-A905-309AFD17B791"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ipomonis.com/advisories/logisphere_server.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ipomonis.com/advisories/logisphere_server.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:locazo:locazolist_classifieds:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.03c",
            "matchCriteriaId" : "24574C3F-5929-4250-A618-7C210ACB8707"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/locazolist-classifieds-v103c-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17983",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21530",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15812",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/locazolist-classifieds-v103c-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to appear to be part of a valid page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.0.0",
            "matchCriteriaId" : "1E586786-3A7D-4F69-A800-A0D6B280E63A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:6.2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51932C51-CCCC-419F-9655-C71B01D24336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:6.3.1.424:*:*:*:*:*:*:*",
            "matchCriteriaId" : "535D86A9-D28E-4356-AE5C-1018C1645942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17991",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/Bb_6.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/21618",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15814",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23558",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/17991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/Bb_6.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/21618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via the (1) Username and (2) Password fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btgrup:admin_webcontroller_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF50571-9401-48EB-9A64-F0A1E04AE51D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419237/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15819",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419237/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. (dot dot) and null byte (%00) in the id parameter of the read module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015339",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419107/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15796",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419107/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting (XSS) vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F04FD52-7EA8-430E-86C7-5D3733A449AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:worldclient:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB67A240-BF23-4B74-944D-127B263154E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/mdaemon.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15815",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/mdaemon.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-13T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 8.51, when running on Windows with Input Method Editor (IME) installed, allows remote attackers to cause a denial of service (persistent application crash) by bookmarking a site with a long title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.51",
            "matchCriteriaId" : "B7667829-A033-4153-A997-703668EF5C2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17963",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch" ]
      }, {
        "url" : "http://www.opera.com/support/search/supsearch.dml?index=821",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/21641",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15813",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2846",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23549",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/17963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch" ]
      }, {
        "url" : "http://www.opera.com/support/search/supsearch.dml?index=821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/21641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3352",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-13T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo mod_imap de Apache httpd anteriores a 1.3.35-dev y Apache httpd 2.0.x anteriores a 2.0.56-dev permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante el Referente cuando se usan mapas de imágenes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.35",
            "matchCriteriaId" : "389EC30E-F3B0-46AF-8130-546886042780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.0.56",
            "matchCriteriaId" : "6FAFA4DB-88A2-4F63-8E9D-17DAC2DD94E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACBC75F8-C1AF-45AE-91BA-5670EF2D0DCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307562",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=37874",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008//May/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0159.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0692.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17319",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/18008",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18333",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18339",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18340",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18429",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18526",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18585",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18743",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/20046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/20670",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21744",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22140",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22368",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22388",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22669",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23260",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25239",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/29420",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/29849",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30430",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015344",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.470158",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.685483",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102663-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK16139&apar=only",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK25355&apar=only",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1167",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-03.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_43_apache.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.029-apache.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0158.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425399/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445206/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445206/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450321/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450321/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0074/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-241-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA08-150A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2870",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2423",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3995",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4015",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4300",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4868",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0924/references",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1246/references",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1697",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:007",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=37874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008//May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0159.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0692.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/18008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/18743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/20046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/20670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/29420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/29849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.470158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.685483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102663-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK16139&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK25355&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_43_apache.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2005.029-apache.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0158.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425399/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445206/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445206/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450321/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450321/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2005/0074/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-241-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA08-150A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0924/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1246/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Apache",
        "comment" : "Fixed in Apache HTTP Server 2.2.2, 2.0.58, and 1.3.35: http://httpd.apache.org/security/vulnerabilities_22.html\nhttp://httpd.apache.org/security/vulnerabilities_20.html\nhttp://httpd.apache.org/security/vulnerabilities_13.html",
        "lastModified" : "2008-07-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2827",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-12-14T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong data, aka the \"Windows Kernel Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53CDA8E-50A8-4509-B070-CCA5604FFB21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15821",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18064",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securityreason.com/securityalert/252",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015347",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051213.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.osvdb.org/18823",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419377/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15826",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2868",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2909",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-055",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23447",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1583",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/15821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20051213.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419377/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2829",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the \"Run\" button, aka \"File Download Dialog Box Manipulation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples errores de diseño en Microsoft Internet Explorer 5.01, 5.5 y 6 permiten a atacantes con la intervención del usuario ejecutar código de su elección mediante (1) superponiendo y ventana nueva maliciosa a un cuadro de descarga de fichero, y entonces (2) usando un atajo de teclado y demorando la visualización del cuadro de descarga de ficheros hasta que el usuario pulsa un acceso directo que activa el botón \"Ejecutar\", tcc \"Vulnerabilidad de Manipulación de Cuadro de Descarga de Fichero\".\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113450519906463&w=2",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/15368",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18064",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-21/advisory",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-7/advisory/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/254",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015349",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419395/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15823",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2867",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2909",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23448",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1209",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1340",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1458",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1490",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1505",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1507",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113450519906463&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-21/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-7/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419395/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2830",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka \"HTTPS Proxy Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Interntet Explorer 5.01, 5.5 y 6, cuando usan un servidor proxy HTTPS que requiere autenticación básica, envía la URL en texto claro, lo que permite a atacantes remotos obtener información sensible, tcc \"Vulnerabilidad proxy HTTPS\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15368",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18064",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015350",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15825",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2867",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2909",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23451",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1097",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1101",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1143",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1317",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1435",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1521",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/15368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2831",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the \"COM Object Instantiation Memory Corruption Vulnerability,\" a different vulnerability than CVE-2005-2127."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 5.01, 5.5 y 6 permiten a atacantes remotos causar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código de su elección mediante una página web con CLSIDs incrustados que hacen referencia ciertos objetos COM que no están pensados para ser usados con con Internet Explorer, tcc una variante de la \"Vulnerabilidad de Corrupción de Memoria por Instanciamiento de Objeto COM\", una vulnerabilidad diferente de CVE-2005-2127."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15368",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18064",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015348",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/21763",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/15827",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-347A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2867",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2909",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23453",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1426",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1475",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1520",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1543",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1558",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1597",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/15368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/21763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-347A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2023-11-07T01:57:54.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2272.  Reason: This candidate is a duplicate of CVE-2005-2272.  It was reserved when another candidate was already public.  Notes: All CVE users should reference CVE-2005-2272 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S (scheme) argument that specifies a large file, a different vulnerability than CVE-2001-1063."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E12F60-B4AF-4EF1-A4AA-5E9F0B8B0690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059218D3-A3AD-4A10-9AA4-FBB689321D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.54",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17986",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015342",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-034.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=350&type=vulnerabilities&flashstatus=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-034.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=350&type=vulnerabilities&flashstatus=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the $_CCFG[_PKG_PATH_DBSE] variable."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP remoto en coin_includes/db.php en phpCOIN 1.2.2 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en la variable $_CCFG[_PKG_PATH_DBSE]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D9693E-D179-414E-AA4B-50C27E4C4EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=5469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpcoin122.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18030",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015345",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419382/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15831",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=5469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpcoin122.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419382/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via \"..\" (dot dot) sequences in the $_CCFG[_PKG_PATH_DBSE] variable."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en coin_includes/db.php en phpCOIN 1.2.2 permite a atacantes remotos leer ficheros locales arbitrarios mediante secuencias \"..\" (punto punto) en la variable $_CCFG[_PKG_PATH_DBSE]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D9693E-D179-414E-AA4B-50C27E4C4EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=5469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpcoin122.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18030",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015345",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419382/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15831",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=5469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpcoin122.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419382/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via the phpcoinsessid cookie."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en mod.php en phpCOIN 1.2.2 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante la 'cookie' phpcoinsessid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D9693E-D179-414E-AA4B-50C27E4C4EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=5469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpcoin122.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/phpcoin_122_sql_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18030",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015345",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419382/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=5469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpcoin122.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/phpcoin_122_sql_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419382/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to config.php, which leaks the path in an error message because the _CCFG['_PKG_PATH_DBSE'] variable is not defined."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D9693E-D179-414E-AA4B-50C27E4C4EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=5469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpcoin122.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/phpcoin_122_sql_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18030",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015345",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419382/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2888",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=5469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpcoin122.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/phpcoin_122_sql_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419382/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Motorola SB5100E Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LAND)."
      }, {
        "lang" : "es",
        "value" : "El Cable Módem Motorola SB5100E permite a atacantes remtoso causar una denegación de servicio (caída del dispositivo) mediante un paquete IP con direcciones IP y puertos de origen y destino iguales y la bandera SYN establecida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:motorola:motorola_cable_modem:sb5100e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC7E3D0-29F1-460E-B265-31DAF645896A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113416527000313&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17996",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113416527000313&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a denial of service (application crash) via a malformed request with a single character to port 1111."
      }, {
        "lang" : "es",
        "value" : "El Servicio de Administración (FMSAdmin.exe) en Macromedia Flash Media Server 2.0 r1145 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante una petición mal formada con un sólo carácter al puerto 1111."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_media_server:2.0:*:developer:*:*:*:*:*",
            "matchCriteriaId" : "F99B6D9B-E357-49BB-A3E3-71C7E1AAFF07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_media_server:2.0:*:edge:*:*:*:*:*",
            "matchCriteriaId" : "15F36A2F-0C3E-4D59-BF75-EA092DB11497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_media_server:2.0:*:origin:*:*:*:*:*",
            "matchCriteriaId" : "0C79B75D-2CE6-4E16-AE82-48A2C747ED57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_media_server:2.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "87341827-78F3-4C69-B832-D0EF4B26A5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_media_server:2.0_r1145:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5992CB7B-F8E7-4FDB-B5D8-F98A391682DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17978",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ipomonis.com/advisories/Flash_media_server_2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-11.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ipomonis.com/advisories/Flash_media_server_2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the \"$<\" variable to set uid, which allows attackers to gain privileges."
      }, {
        "lang" : "es",
        "value" : "Perl en Apple Mac OS X Server 10.3.9 no se quita apropiadamente privilegios cuando se usa la variable \"$<\" para establecer uid, lo que permite a atacantes ganar privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17922",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2869",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulnerability than CVE-2005-3585."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D302871A-63CF-4B49-A180-CD44E941971C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/phpwebth14_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpwebth14_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "setting.php in Innovative CMS (ICMS, formerly Imoel-CMS) contains username and password information in cleartext, which might allow attackers to obtain this information via a direct request to setting.php. NOTE: on a properly configured web server, it would be expected that a .php file would be processed before content is returned to the user, so this might not be a vulnerability."
      }, {
        "lang" : "es",
        "value" : "setting.php en Innovative CMS (ICMS, anteriormente Imoel-CMS) contiene información de nombres de usuario y contraseñas en texto claro, lo que podría permitir a atacantes obtener esta información mediante una petición directa a settings.php.\r\nNOTA: en un servidor web apropiadamente configurado, sería de esperar que un fichero .php sea procesado antes de que su contenido sea devuelto al usuario, de forma que esto podría no ser una vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:innovative_cms:innovative_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4568845-8D54-48A8-BFB3-69321F32F204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015343",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419238/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419500/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419238/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419500/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netgear RP114, and possibly other versions and devices, allows remote attackers to cause a denial of service via a SYN flood attack between one system on the internal interface and another on the external interface, which temporarily stops routing between the interfaces, as demonstrated using nmap."
      }, {
        "lang" : "es",
        "value" : "Netgear RP114, y posiblemente otras versiones y dispositivos, permite a atacantes remotos causar una denegación de servicio mediante un ataque de inundación SYN entre un sistema en el interfaz interno y otro en el externo, lo que detiene temporalmente el encaminamiento entre los interfaces, como se demostró usando nmap."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:rp114:3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA7BDD8-A286-478C-B8CE-D1FAE323FA4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/11698/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419243/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419244/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419485/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/11698/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419243/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419244/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419485/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL commands via the (1) PHPSESSID (session ID) or (2) REQUEST_URI (query string)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en link.php en Arab Portal System 2 Beta 2 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el (1) PHPSESSID (ID de sesión) o (2) REQUEST_URI (cadena de consulta)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arab_portal:arab_portal:2_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "016A4A53-89F1-464E-BD6E-712B894B6435"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17984",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419264/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419264/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in guestbook.cgi in Lars Ellingsen Guestserver 4.13 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified message fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:2.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C7EA57-5631-4051-8119-033207B6701D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614AF528-BEB0-43BC-96F7-C831F0518B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:2.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "845A9FAA-F7EB-4127-A579-761C99D0B1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF95A06-4A38-4A23-95C8-C27840F6B287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E71117D-BD47-4305-896A-B25CEDF75847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2112435C-30BE-42A4-8573-87787AFEDF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5763E8B-A691-462E-B5C6-31BCFE504C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA09A92E-76B0-46B3-B5F3-911DA1715B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47175DC4-CCED-4EC2-8E56-CDE7E55C7D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9BCE16-3B2B-4413-97F5-36B2BA1EAAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EDEA80-FF99-4E3F-ADC8-6C28401CE731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84768091-04A2-477D-A9F6-E9D63300BF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC2AF03-080D-450F-B0BD-056BD4849DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24824C3A-6D0D-40AD-8D74-A9FA9646D48B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8714A446-4A73-47B9-8FE7-CA3CE3E1CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A9C400-C2D3-4EA2-9AEE-755339D2AD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F251BD43-81BF-4B01-8AE5-6005021EDB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA68518-D0E3-49A8-8127-0F4058BF90EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C678B2B8-3D6C-41DB-9E7E-660B27CE6C25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40777E4-FFB9-4FC7-8FF3-D3723400E07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18410B77-F565-4A67-A05B-DFC50C644564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4042584-E1C1-49F9-A71D-5530465A78C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9743B55B-0F03-4D44-98F9-083767AB1738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37591D25-7C81-44F8-A9A5-F400CB1224EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E358237C-F84B-4FBA-9713-E6E4832294DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5ACC1C-AE93-41E7-9836-71F7CEF62854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B72D74-E3E9-467C-83A4-CAD94115CB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7402BB2B-4F04-4F2E-83D9-5202F129FDCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A8942-B299-4270-B3CC-0F6923777FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650CB745-569C-499E-8EC3-5D76750F0B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166104FD-5FA5-4C52-A1BE-466270086090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814DE483-E377-4521-876F-35466D743A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F41037-1076-43FF-81C1-F4B49FA0C8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:3.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4102F028-2254-46FE-A456-62368203477F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B029434D-0D97-4E3C-832A-174C73CF967E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4338AC3D-EB37-4181-B2CC-91B4A7261BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B14DFEA-BAEB-481F-B778-83145A85D957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:4.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76766A57-8FC1-47DB-A7EC-16C9D454E3D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:4.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07ADE87-734A-4C0B-BE16-F5FD10CB7BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:4.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "004A519D-5686-4FB3-AD90-8B8EDC09B52E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:4.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6198CB-6110-44EC-93A9-7D8364EC3B27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0894E21E-DAD6-46A8-9734-E3BA57977997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lars_ellingsen:guestserver:4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77CD50F-E705-45EB-8276-0B819C9F4BB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/419241/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15821/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419241/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15821/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"potential\" SQL injection vulnerabilities in Utopia News Pro (UNP) 1.1.4 might allow remote attackers to execute arbitrary SQL commands via (1) the newsid parameter in editnews.php, (2) the catid and question parameters in faq.php, (3) the poster parameter in postnews.php, (4) the tempid parameter in templates.php, and (5) the userid and groupid parameters in users.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:utopia_software:utopia_news_pro:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A35C687-FC90-432B-A4A5-B47773D93DFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17988/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21645",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21646",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21647",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21648",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21649",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419487/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17988/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419487/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"potential\" SQL injection vulnerabilities in e107 0.7 might allow remote attackers to execute arbitrary SQL commands via (1) the email, hideemail, image, realname, signature, timezone, and xupexist parameters in signup.php, (2) the content_comment, content_rating, and content_summary parameters in subcontent.php, (3) the download_category and file_demo in upload.php, and (4) the email, hideemail, user_timezone, and user_xup parameters in usersettings.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70AB914E-D616-45D2-A451-1C247B8B6E4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18023/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419487/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18023/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419487/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"potential\" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands via (1) the category parameter in add.php, (2) the cat_desc parameter in addcat.php, (3) the level and user parameters in adduser.php, (4) the post_id parameter in del.php, (5) the cat_id parameter in delcat.php, (6) the comment_id parameter in delcomment.php, (7) the id parameter in deluser.php, (8) the post_id and category parameter in edit.php, (9) the cat_id and cat_desc parameters in editcat.php, and (10) the id, level, and user parameters in edituser.php.  NOTE: the username/login.php vector is already identified by CVE-2005-2838."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E0FF8C-1AEA-46C0-A867-F2728AA5E069"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18024/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419487/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18024/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419487/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"potential\" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL commands via (1) the ref parameter in download.php, (2) the direction, msg, sforum, reason, subname, and toform parameters in forum.php, (3) the msg and forum parameters in forum_edit.php, (4) the msg and forum parameters in forum_write.php, (5) the tekst parameter in guestbook.php, (6) the menuoption parameter in index.php, and the (7) sel_avatar parameter in myaccount.php.  NOTE: the forum.php/forum vector is already identified by CVE-2005-3585."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "6F54F969-871D-4D1F-8D97-B5297D5A492A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18011/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419487/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18011/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419487/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"potential\" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute arbitrary SQL commands via (1) the password and username parameters in advertiser.php, (2) the aid parameter in announcement.php, (3) the dcp5_member_id, year, agid, day, day_s, hour, minute, month, month_s, and year_s parameters in calendar.php, (4) the cid parameter in contents.php, (5) the dcp5_member_id parameter in forums.php, (6) the bid parameter in go.php, (7) the lid parameter in golink.php, (8) the dcp5_member_id and mid parameters in inbox.php, (9) the catid, dcat, and dl parameters in index.php, (10) the dcp5_member_id in informer.php, (11) the nid parameter in news.php, (12) the type and rate parameters in rate.php, (13) the q parameter in search.php, and (14) the dcp5_member_id in update.php.  NOTE: other vectors in the PHP-CHECKER report are also covered by CVE-2005-3365 and CVE-2005-0454."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE39E96D-B870-49FB-8C7C-7E829BA916B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0D7706-EEB2-4898-A0EA-7BD198965E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "356E5CEC-CCBD-4438-992A-29B53F3F6A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389B778A-EB0A-4BEC-9023-2190BCDAB746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27F4000-ED33-48F9-92BA-2629C5BAD709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7A0D86-BA93-4889-9242-A535C8F53E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57026D15-982E-4816-A4CB-960852D7006F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79713BBA-FC4F-4445-B888-656A4DF6C2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1D9D8F-FD72-4B51-817A-7A807750D3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156DC7CD-FFEA-4225-BE58-6DEFEDCB1730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92241B71-C6B6-4B85-96A8-726CC04E3F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F26F19B-4F47-475E-AD58-D8964C0BF8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7F57E2-E38E-4575-8C95-5E2FAC7D919D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B0FF8-984D-4EA6-B867-2B3CE1874DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC2BC46-D988-4502-9C35-139992142043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419487/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://glide.stanford.edu/yichen/research/sec.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419487/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) since, (2) sort_by, and (3) items_number parameters to comments.php, (4) the search parameter to category.php, and (5) image_id parameter to picture.php.  NOTE: it was later reported that the comments.php/sort_by vector also affects 1.7.2 and earlier."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "5B662306-A004-463F-BDA9-D52F5E47F380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0EE492-82CC-4B8D-A4C2-C03D90E3512C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A62835-F153-476A-8F73-D190E249C60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18716F33-C917-477A-8B02-8F3E03BADD21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11243C68-0FEC-4C4B-B33A-CA393F6DCBA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF0BF8D-0EBE-47E8-BF92-249308692253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DC36B6-9AFA-4A90-ACBB-7BB25C27CBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C904823-1291-4883-950E-089443E1306F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2847007A-5F0B-457E-9D56-1570B59B1589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340CE351-800F-4670-A4FF-2B56644B6DC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0A25DD-835C-43FF-A040-90B59B5C8D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E410A77F-8520-4011-A1CA-03B0A466CF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029740C0-CC4B-412A-AD11-8B1D7ED66996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B249FD5-B164-41F3-970E-8701C8C469CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A75BEC-B94C-403A-92B6-36C4C6E49D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261EA07E-62B1-45DF-A21B-3F63B0E528FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90E5405-7F62-4696-BC32-E0133A3E9652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645D12DC-EBCE-4CAE-8B62-143B66AD1815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5256C5-8612-4961-B813-D560D59E59EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874E8A29-1530-4744-A466-05AC7E543EC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/phpwebgallery-multiple-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18019",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15837",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/phpwebgallery-multiple-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter.  NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources and independently verified using source code inspection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:everyauction:everyauction:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.53",
            "matchCriteriaId" : "3EB75650-F00E-4318-891D-0B6CB38F1498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18016",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the number parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_web_scripts:link_up_gold:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "43C60773-128A-4D08-B862-BA645D69F156"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/link-up-gold-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/link-up-gold-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) link parameter to tell_friend.php, (2) phrase[] parameter to search.php in a search_links_advanced action, and the (3) direction or (4) sort parameter to articles.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_web_scripts:link_up_gold:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "43C60773-128A-4D08-B862-BA645D69F156"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/link-up-gold-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/link-up-gold-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.  NOTE: the vendor has disputed this issue, saying \"The vulnerability is without any basis and did not actually work.\" CVE has not verified either the vendor or researcher statements, but the original researcher is known to make frequent mistakes when reporting SQL injection"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamit:jamit_job_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.1",
            "matchCriteriaId" : "B4651FCA-21C2-4200-B68B-B055D98F17AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/jamit-job-board-24x-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18007",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000972.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/jamit-job-board-24x-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000972.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ad_number parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_web_scripts:ad_manager_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "E44E04BD-EB30-4CEB-8D45-71B4D18F0E69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ad-manager-pro-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ad-manager-pro-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdev:encapsgallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "C8A8500A-234B-45CE-BC07-34C627808002"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/encapsgallery-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15836",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/encapsgallery-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whmcompletesolution:whmcompletesolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "FB129262-12CC-4874-A3FF-84A5EE8B8A76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/whmcompletesolution-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/whmcompletesolution-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cartkeeper:ckgold_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575DFE02-F11E-43D3-AC7D-E3DBF610EF2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ckgold-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ckgold-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword parameter in the SearchZoom module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:servers-r-us:mysqlauction:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "D7B04991-D039-4399-82D2-0516E2C60D2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/mysql-auction-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/mysql-auction-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21FF02F-982C-429F-A14D-D6E18058DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9407F704-FF3C-4976-BE4C-A1DDC16715D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5173B32-1099-47C9-996B-56DB29456BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9B4611-C002-40F5-978C-BB90F1A893C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B347D6C8-4607-481D-863E-7F41E9868041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F434D16-4F09-4BCF-BD3E-9114876C2575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD480B-7CFB-4FD3-8E47-028F32AEF902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7C781D-F5D1-4C63-B6E3-230DEC80104E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0755FA0-2365-42B4-8E42-214D5BAD71A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35248DDA-D37D-4D72-9FF8-6813BA4C87BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67C54F4-4155-43DA-8E07-579249759989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C376D216-914A-4D96-8603-C6861B3E2857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A07B4C-CE12-4381-BFE4-CE79411F5069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB502B29-FBC5-4984-A735-AA0B6DF4A58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F759138-7079-471F-B30D-ED62351CFCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF83421-973D-4AC9-BDA3-4161B9CF2D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084BD5F4-37F8-4913-8045-769FD81F8C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B09948-A44C-47D8-A5EC-3873FF36F451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D72C1E-73E5-4F51-9D30-D28026939C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C469C66-B64B-49BD-9D1C-D15F0E9028EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28223A1-359F-434C-BAAA-82A5F310FA44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF1F18B-AE36-48F3-B784-5C97B3F2535E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAFD163-7FE7-48FB-8860-7B00B0FFA628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C074DBE-AFC9-4094-A170-A31D79C139D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53520AA0-E5AB-450A-9D95-E075B552D2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8462CB86-30B1-43D8-B306-271709423DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131A96BB-EF2E-4AE2-9334-91CA96222BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17DC6205-7016-40C3-921A-B5AEC8513CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721A536A-9626-4BD7-B84A-E3C4074F1217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D77F95A-0059-4442-8D9D-AA7F101FBBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89786096-AE1B-491B-8284-DBCC2F6112F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC255D-6B0F-412D-B639-B9F9656E4839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4CFE80-223F-45DA-A9FB-03474F61E027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8724300D-CBDC-4C66-BF78-038F838C06DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7283A58-EE8E-493F-8E51-C97FF87ECA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101BF6DC-0F73-41E0-A0EE-BA1EA7397423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC458D9-12B1-4CF1-980E-BC86E874BBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202C65A-33FB-4742-8706-2BDD5B442030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E7658F-A543-46F5-B79D-E0E25B7C574F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E7458-6655-4C86-85A9-81004FF38321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3A1BAC-F777-413E-BFB7-972C687C2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/mantis-bugtracking-system-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15842",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/mantis-bugtracking-system-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via URL-encoded values in the sKeywords parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_jackknife:php_jackknife:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.21",
            "matchCriteriaId" : "C9284696-BE20-4893-9EDC-C804C51972CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/php-jackknife-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15841",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/php-jackknife-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "401E0BDE-7B5D-4C1A-B335-64D787D1841B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497C16ED-A62F-43A8-81DE-B8DDD49C2E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.961:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5644D862-A159-4C49-A3B4-41CA3FAD36E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.971:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234B5C4D-F55E-4135-9F63-8A83C0D54A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.972:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3903B15-41C1-458F-823B-63BDC5CA339A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.973:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B23471-1487-421A-8991-6D2D167BFDE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/vcd-db-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15840",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/vcd-db-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTML via the batch parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "401E0BDE-7B5D-4C1A-B335-64D787D1841B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497C16ED-A62F-43A8-81DE-B8DDD49C2E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.961:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5644D862-A159-4C49-A3B4-41CA3FAD36E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.971:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234B5C4D-F55E-4135-9F63-8A83C0D54A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.972:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3903B15-41C1-458F-823B-63BDC5CA339A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:0.973:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B23471-1487-421A-8991-6D2D167BFDE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/vcd-db-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15840",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/vcd-db-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) gallery_id parameter to view.php and (2) image_id parameter to image.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snipegallery:snipe_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.4",
            "matchCriteriaId" : "2EB78111-8DBD-4366-9E97-CDA8E181E350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/snipe-gallery-sqlxss-vuln.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18022",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15844",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/snipe-gallery-sqlxss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snipegallery:snipe_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.4",
            "matchCriteriaId" : "2EB78111-8DBD-4366-9E97-CDA8E181E350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/snipe-gallery-sqlxss-vuln.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18022",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/716",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15844",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/snipe-gallery-sqlxss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to index.php and (2) page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plogger:plogger:-:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D44A681E-87BB-4F3C-A447-F959C6C0CF33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://masendav.com/~duke/PloggerChanges_files/FileComparisonReport5.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/plogger-sqlxss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15839",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://masendav.com/~duke/PloggerChanges_files/FileComparisonReport5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/plogger-sqlxss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plogger:plogger:-:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D44A681E-87BB-4F3C-A447-F959C6C0CF33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/plogger-sqlxss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15839",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/plogger-sqlxss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via the language parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery_pro:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BF15CB-A95F-4475-8EE9-1F4FBC6DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery_pro:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBBBF42-A2D8-4E5A-96B6-7688EBD1E6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery_pro:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6205CB-2B7E-4A77-A3BB-04FD69199C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) start, and (3) rand parameters to show.php, and the (4) album parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery_pro:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BF15CB-A95F-4475-8EE9-1F4FBC6DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery_pro:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBBBF42-A2D8-4E5A-96B6-7688EBD1E6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery_pro:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6205CB-2B7E-4A77-A3BB-04FD69199C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15845",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery_pro:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BF15CB-A95F-4475-8EE9-1F4FBC6DCABA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery_pro:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBBBF42-A2D8-4E5A-96B6-7688EBD1E6E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery_pro:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6205CB-2B7E-4A77-A3BB-04FD69199C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3358",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-14T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set_mempolicy call with a 0 bitmask, which causes a panic when a page fault occurs."
      }, {
        "lang" : "es",
        "value" : "Linux kernel anteriores a 2.6.15, permite a usuarios locales causar una denegación de servicio (pánico) mediante una llamada set_mempolicy con una máscara de bits 0, lo que causa un pánico cuando ocurre un fallo de página."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.14.7",
            "matchCriteriaId" : "C4E7822A-59F5-4759-ADBF-008CF153C6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042307e9fp8ihEMrfaoPMp_agDevQNA",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015433",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16135",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0035",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175683",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10410",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4042307e9fp8ihEMrfaoPMp_agDevQNA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the address book and (2) contact data."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Horde Turba H3 2.0.4 y anteriores permiten a atacantes remotos inyectar 'script' web o HTML de su elección mediante (1) la libreta de direcciones y (2) datos de contacto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba_h3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.4",
            "matchCriteriaId" : "2F4BFB7D-0AC2-417E-9B4A-FD4F0E84C5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba_h3:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265F8139-BDF8-457C-A3B6-041AFA14AEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba_h3:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA59046-8729-4ACA-BD56-63F04B85CCE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba_h3:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C29B457A-E80B-4EC5-9DFF-DF3A5D0CC41D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:turba_h3:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2375DE2-DBAE-4275-B03A-4A0E6958DD36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.horde.org/archives/announce/2005/000235.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2005/000235.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T20:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Crystal Report component (rptserver.asp) in Trend Micro ServerProtect Management Console 5.58, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, and possibly earlier versions, allows remote attackers to read arbitrary files via the IMAGE parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en componente Crystal Report (rptserver.asp) en Tren Micro Server Protect Managemente Console 5.58, usada en Control Manager 2.5 y 3.0 y Damage Cleanup Server 1.1, y posiblemente versiones anteriores, permite a atacantes remotos leer ficheros de su elección mediante el parámetro IMAGE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:serverprotect:5.58:*:emc:*:*:*:*:*",
            "matchCriteriaId" : "1364240C-2070-4CEA-BAE9-E94EAFFBBF1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=352&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=352&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T20:07:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACLs, which allows local users to cause a denial of service (disabled service) and gain system privileges by modifying or moving critical program files."
      }, {
        "lang" : "es",
        "value" : "La instalación de Tren Micro PC Cillin Internet Security 2005 12.00 compilación 1244, y posiblemente versiones anteriores, utiliza ACLs (Listas de Control de Acceso) por defecto inseguras, lo que permite a usuarios locales causar una denegación de servicio (servicio deshabilitado) y ganar privilegios de sistema modificando o moviendo archivos de programa críticos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:pc-cillin_2005:12.00_build_1244:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC01C522-4DF8-4867-9832-1AD37CFD5AF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=351&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=351&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via \"wrapped\" length values in Chunked transfer requests.  NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load.  As such, this might not be a vulnerability in Trend Micro's product."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:serverprotect:*:*:emc:*:*:*:*:*",
            "versionEndIncluding" : "5.58",
            "matchCriteriaId" : "37239A26-21E5-4A7D-BB3B-219954F72751"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039972.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039978.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18038",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=353&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2907",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039972.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039978.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=353&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-14T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain \"magic value\" to port 5005, which also leads to a memory leak."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:serverprotect_earthagent:5.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F06F757-078D-48BC-B44C-8332D9001718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=25254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18038",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://solutionfile.trendmicro.com/SolutionFile/25254/en/Hotfix_Readme_SPNT5_58_B1137.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=356&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2907",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=25254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://solutionfile.trendmicro.com/SolutionFile/25254/en/Hotfix_Readme_SPNT5_58_B1137.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=356&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) popupid parameter in popups.edit.php; (2) so, (3) sb, and (4) nr parameters in customer.tickets.view.php; (5) subrackingid parameter in subscribers.tracking.edit.php; (6) delete parameter in design.php; (7) trackingid parameter in tracking.details.php; and (8) customerid parameter in sales.view.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en QuickPayPro 3.1 permiten a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro (1) popupid en popups.edit.php; los parámetros (2) so, (3) sb, y (4) nr) en customer.tickets.view.php; el parámetro (5) subrackingid en subscribers.tracking.edit.php; el parámetro (6) delete en design.php; el parámetro trackingid en tracking.details.php; y el parámetro (8) customerid n sales.view.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickpaypro:quickpaypro:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CC29D0-CCC8-41A3-9608-97C3DD97B7EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/quickpaypro-31-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17981",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21677",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21678",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21679",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21680",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21681",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/quickpaypro-31-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in QuickPayPro 3.1 allow remote attackers to inject arbitrary web script or HTML via various fields, such as those in (1) communication/subscribers.tracking.add.php, (2) support/tickets.add.php, and (3) mycompany/categories.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en QuickPayPro 3.1 permiten a atacantes remotos inyectar 'script' web o HTML de su elección mediante varios campos, como aquellos en (1) communication/subscribers.tracking.add.php, (2) support/tickets.add.php, y (3) mycompany/categories.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickpaypro:quickpaypro:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CC29D0-CCC8-41A3-9608-97C3DD97B7EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/quickpaypro-31-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17981",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/quickpaypro-31-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory."
      }, {
        "lang" : "es",
        "value" : "ADP Forum 2.0 a 2.0.3 almacena información sensible en ficheros en texto plano bajo la raíz de documentos del servidor web con control de acceso insuficiente, lo que permite a atacantes remotos obtener credenciales de usuario mediante peticiones al directorio foro/usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adp:adp_forum:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6D9512-16CB-4F31-A8AB-1047B99A9278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adp:adp_forum:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F067AF45-2288-498D-9B86-80D83C7654F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adp:adp_forum:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB05B89-816E-416D-AEFC-602FF040ADCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adp:adp_forum:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A5FCB0-5F01-462E-BB35-0FC8AB9E906E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18027",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/144336/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419393/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/144336/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419393/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in getdox.php in Torrential 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL.  NOTE: this might be resultant from CVE-2005-4160."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en getdox.php de Torrential 1.2 permite a atacantes remotos inyectar 'script' web arbitrario o HTML mediante la URL. NOTA: esto puede ser resultante de CVE-2005-4160."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torrential:torrential:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D69B83-A565-476B-953C-D5D28540A1E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0720.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015338",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0720.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en view_Results.php en DreamLevels DreamPoll 3.0 final permite a atacantes remotos ejecutar SQL de su elección mediante el parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dreamlevels:dream_poll:3.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D26E43F-22A8-4A95-9337-E0B3EA4AD756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/dreampoll-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18014",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15849",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/dreampoll-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en TextSearch en WikkaWiki 1.1.6.0 permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante un parámetro de phase hex-codificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikkawiki:wikkawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.6.0",
            "matchCriteriaId" : "67B93A19-F2BF-4589-89D6-FFC32C9AA876"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/wikkawiki-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18015",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/wikkawiki-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forum_title parameter.  NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID.  In addition, its accuracy is in question because \"forum_title\" does not appear to be specified in the source code for XM Forum RC3.  It is possible, but not certain, that this is CVE-2004-2211."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en forum.asp en ASP-DEV Forum RC3 permite a atacantes remotos inyectar 'script' web arbitrario o HTML mediante el parámetro forum_title.\r\nNOTA: La procedencia de esta cuestión es desconocida; sus detalles son obtenidos solamente de BID. Además, su exactitud está cuestionada porque \"forum_title\" no parece estar especificado en el código fuente de de XM Forum RC3. Es posible, pero no seguro, que esta sea CVE-2004-2211."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp-dev:xm_forum:rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2CE248-3956-4AC5-BA4D-6C56743EF59D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15858",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linksys WRT54GS and BEFW11S4 allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LAND). NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID."
      }, {
        "lang" : "es",
        "value" : "Linksys WRT54GS y BEFW11S4 permiten a atacantes remotos causar una denegación de servicio (caída de dispositivo) mediante un paquete IP con los mismos IPs y puertos de origen y destino, y con la bandera SYN establecida (tcc LAND). NOTA: La proveniencia de esta cuestión es desconocida, los detalles son obtenidos exclusivamente de BID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:befw11s4:1.4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42622989-F386-4C7F-8F64-7C792075D980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:befw11s4:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83131C-CE9B-4695-BF3D-A8D2C1AC7F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:befw11s4:1.43.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF81DAA9-0925-4BEB-B8B0-1B4BB075DBE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:befw11s4:1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD7A2F3-5720-4BB6-BC2C-DF1073A58F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:befw11s4_v3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86E88C1-8695-4836-BADA-D3F25F6DFF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:befw11s4_v4:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BE65FC-259C-4AF2-AA4D-05F222BC7999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54gs:4.50.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9761BB51-0CF6-45BE-9DF2-8953AB32CFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54gs:4.70.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1CDA3F-F8BB-4B4E-BFAE-2E091A308CE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15861",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD). NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID."
      }, {
        "lang" : "es",
        "value" : "Conmutadores  Cisco Catalyst no especificados permiten a atacantes remotos causar una denegación de servicio (caída de dispositivo) mediante un paquete IP con IPs y puertos de origen y destino iguales y con la bandera SYN. (tcc LanD). NOTA: La proveniencia de esta cuestión es desconocida; los detalles son obtenidos exclusivamente de BID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst:4.5_\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7426171-91E9-4369-88F8-469D2D70FF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst:sup2plus:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2795A59A-0157-4EE3-B8B7-946DB7BEACA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst:sup3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF84505D-5736-46AC-8723-230EEB80870F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_1200_series:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA369237-AEDC-42C2-BAFA-4FE370A28E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_1900_series:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F6296A-4C3C-4A88-B1A4-3EB971339F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_1900_series:9.0_0.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89FB0BB-64D2-4385-9302-FDCB05F92345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2800_series:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD87934C-057F-4EB3-9B42-2136A69A5AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2820:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F65F67-4C3B-42A2-ACD7-4590FF3125E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2820:9.0_0.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBBC2D9-67D3-47FB-A627-7703A5440B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2900:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85876B6F-DE52-4FC2-85E9-3639B2894A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2900:lre_xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38034CB-72FD-4E96-A3E3-0B555EC54A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2900:xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C3745E0-4918-40AD-A219-111DC81CF766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2901:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B7C906-927C-4B8B-9FA2-F93CF4DB6023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2902:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46A6C9D-3068-4E06-9FC7-C068C2B92FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2920:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EAFC2E-8385-4A04-A761-EC54011A333C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2926:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5850AC3C-C2D2-41EF-A4F9-81B8E4B08759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2926f:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88256AC6-6E27-40E6-9714-398DEF763D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2926gl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D23DF01-93A7-46AD-8B09-963BCC02EB57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2926gs:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F8C4A-1B97-4550-A465-3157A51E5D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2926t:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9BEB23-E8F7-40A5-965C-F2A02FB65B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2940:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5388120C-0B85-4029-9A6C-EFFD282F23EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2948:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A8A4B8-423D-4366-8F6D-521A7120E0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2948-ge-tx:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B539EED0-16A3-4F4F-8791-F90FDA13520B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2948g-l3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BF525D-E813-4CB9-BE84-0B8283F2FACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2950:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4DA944-5B98-4BFB-90E9-C2A1C7731ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2950_lre:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC79C1CD-FC2D-4667-A92E-8C87ECE04128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2955:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15CC7BDB-8C89-43AB-A514-8FC23092DE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2970:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CFE777F-AC93-4598-A406-C437BB1FFCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2980g:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67B901F-1FF8-4B04-ADBB-66606F20A70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2980g-a:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC0577E-8CCC-4D3A-8536-61577BFA16D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1354FE59-7DB1-4CFE-9149-40EA1CE7B000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C96219-7521-4F11-A222-9BCAB0B9B9D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3500_xl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA122273-0B84-4CE6-AAF6-F89E1F986C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3550:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA518E9-3A63-4997-AC3E-2FB0B8438B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83227C65-2708-4974-BDCE-07F9849CC921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF73F5A9-F3FB-476D-8309-B1E1E485C44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_metro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC517907-C094-4B7F-8073-480DE18CDD75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3900:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04831AE8-B21E-4674-AD14-9E98AF50D250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "105544F7-F57E-4B22-921C-E5EEA82B5CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4000:*:*:sup2plus:*:*:*:*:*",
            "matchCriteriaId" : "87DF7111-AC30-4B16-8EF9-C21E0280808F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4000:*:*:sup3:*:*:*:*:*",
            "matchCriteriaId" : "FC9179DB-C0A8-4B9C-BC17-B9EA55C9B731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4000:*:*:sup4:*:*:*:*:*",
            "matchCriteriaId" : "F37FE8BD-1434-4F1D-B207-D5C8E48344AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4000:*:*:sup5:*:*:*:*:*",
            "matchCriteriaId" : "0F51C943-BBD4-4CAD-8F57-FABECDC469E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F991C2-CFF1-4FCD-BD88-8B4A9FB8A9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4224:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8348B895-7B3F-40CB-8843-02DBD28FC6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4232:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A299DDE-9979-4C3E-A9F4-F0519CA20AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4232-13:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27A63C6-255D-449F-B00B-4EB4060ED7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C88A18B-2949-4D54-8B78-61418C1DD3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4500:*:*:sup2plus_ts:*:*:*:*:*",
            "matchCriteriaId" : "0EDF42DB-BF41-4C94-8BDB-EB37D90B77EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4503:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E25997-76B2-46FF-8426-8F40002BEE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4506:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23267E55-E098-41F5-9B9A-E1919214B579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4507r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324DE8A5-FA75-4758-8775-65051504259F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4510r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843C8691-3CB5-4C7E-A6C0-47625387CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4840g:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16867F98-C635-4507-B5A9-BD19181B1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4908g-l3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83198D7C-C205-44AF-901F-6BD6D5C36244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4912g:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3021C2B-3E4B-4E81-9725-F75EA7635EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4948:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8473D554-26FD-4D38-92FC-EE3EE2F3D30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_5000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E8BD58-5E55-4F07-B115-3BE78D7B2AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_5505:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F131955B-CDE7-48BC-9F64-E56BC90F2695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_5509:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C5AE1-F133-4F68-8BBA-FCBD7D231CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B75201F-F007-4612-A3F0-ABC75C730F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000:*:*:sup2_msfc2:*:*:*:*:*",
            "matchCriteriaId" : "4C6A9A84-B0B4-4560-BF84-9C0C675A37E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000:*:*:sup720_msfc3:*:*:*:*:*",
            "matchCriteriaId" : "8354057B-818A-4BCC-87C3-3EED472B17F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-1:2.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2AF1C7-23EB-4C13-AC71-4FA7E78E8ED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-1:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF0BBC8-04BD-4867-B188-35461E50FF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-2:2.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C1E3F7-D48E-4AF1-8205-33EB71E09E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-2:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C959C93D-D58C-4AB5-9058-0CF257C68F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-x6380-nam:2.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDB5EAC-E41D-4A15-B059-45B4BE4813EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-x6380-nam:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2DF345D-AD8A-4DE6-8136-6EF7B011E4B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99DE48DF-A309-4A1C-B977-AE81B4EDB589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:2.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC58B690-8D30-4A04-82AA-A827F87DEE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6BED8BD-79D2-4DD9-A895-66A8C9349F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:2.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "41491D13-A3F9-464A-A84B-A58320838CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0747C3-2712-4FA9-92E3-260B3CF080DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:2.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF4CBFF-56C4-4411-9F12-2506C3DD563E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4D3F34-A1B3-4469-BF21-666FDAE9198B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6608:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F918F12-DC72-45B0-B776-3F744F12F3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6624:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD2CF99-7556-427B-BCE5-980BBADC4294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600:*:*:sup2_msfc2:*:*:*:*:*",
            "matchCriteriaId" : "5367C3D5-583A-4942-828F-DD9C8790C93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600:*:*:sup720_msfc3:*:*:*:*:*",
            "matchCriteriaId" : "6D4F49E8-9C23-422C-9913-9C11E7F9BF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-1:2.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64454B8-75A5-4A63-A4DC-ECA17CFBCD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-1:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6353A76-2075-4245-94C5-D23BF9C03732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-2:2.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A1FA93-21B3-4CD4-8A62-C66D82CFB2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-2:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "97742EE8-200E-4A6F-BB81-C2344EF44BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_ws-x6380-nam:2.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA58891-105C-4E1F-9B9F-540F5DC0442E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_ws-x6380-nam:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "32583745-9640-4032-B1E1-598ABB4E89A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BAA00D-994D-4F18-9858-7EAC3470FBC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510csr:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793FC8D9-A500-4D21-858F-97CE380C3774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510msr:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91A0BCA-0FB1-4389-9834-ADCE88D15A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540csr:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C0C970-2EB3-489A-AFA5-3066B78D2A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540msr:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA10A45-3421-48A0-82D7-1605641E0AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ws-c2924-xl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0B4EDC-0F63-4295-84B8-8E4DC7F522E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:3.0\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B604D3F1-98B9-487E-8E45-5BAC514689F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "851920E3-2DF8-4C74-84E0-E3950D2EA672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFAF3474-E030-4AF5-8BE0-966191D15E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EF024C-80B1-4332-ADDC-992C5F933562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(4b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4D6201-495A-4EEC-876F-09B58C1D700F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DFA6741-74AF-42E0-9A8A-D775BA9EA519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323C88E-C966-42FC-957F-EC244744A5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C33774F9-D0E0-4BB7-AE78-9B746C5FA972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0EFEE7-3EA4-4639-8B53-F7192E7C18E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A980A98-77C0-44F6-98C6-7CC4FEEC799C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD63DBE5-2149-46FF-B272-2E5A3C382548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(11\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E2E594-8B82-476B-96A6-C713FE1FA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7837C26-C795-4FAC-A11B-149C41B34A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:4.5\\(13a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FB48FD-5678-4BAD-8467-3C703E4950DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9229B19E-B65E-4C23-8F35-7019050E24B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8B8722-42A0-4CA6-8946-0D97BBABB30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "587031FB-E0AF-4BD0-8809-8690D3814F3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE163E0F-3F54-45B2-A101-6CA6FA548D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847EC2AD-F05D-47BC-841C-21F5ECF7E79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D31AB89-4194-4CE5-AD93-3058E77E7E63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC01832-ADF1-4A74-95FE-0B3DDE3AAFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CB60F6-622C-41D7-AFA4-A2DCE4D02549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2055E432-9939-48F7-A4BE-1888CC7241C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.2\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F15DB3-6BC3-4F15-A164-3D1F2FBA718D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E4BD89-21FE-492B-85C3-9BEBDB01F8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE27E478-63BF-4475-B89A-91CF2D9A6C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.2\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5754B0FA-30C6-4E12-9D6C-92F38CD3A9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.3\\(1\\)csx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21CF907-707A-43CA-984C-310062705C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.3\\(1a\\)csx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AC3C74-262E-4A11-BCE8-58DE522E23AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.3\\(2\\)csx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A2D344-D0AD-4E0A-A5F3-C4323813FDD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.3\\(3\\)csx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46DC4972-7FA1-4320-83E6-607D139121EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.3\\(4\\)csx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339DDB07-6C16-43B9-A880-77E2351B1C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.3\\(5\\)csx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBCB451E-8945-408C-94F5-36C43AA05C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.3\\(5a\\)csx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D8D9AA-154C-46B2-96B8-AADA610056E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.3\\(6\\)csx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F30211-BB7A-41D3-946F-655C028A3772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01AE0EAB-F266-437A-B615-69536AF50B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D952CE-9CDE-442D-8544-4614DBE5AC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.4\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE529454-F5E6-4417-A5D7-B1A9BCD2B5C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D0F005-80B3-41A2-8B7C-EA256C1634DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD50773D-8E63-45C7-A52D-D7B13F65327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8A2EE7-8C86-44F0-899C-FD98E08C6E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70FD634-E2D7-4E42-B140-44C5CB9294E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CCF12-AF9E-4661-9ECB-9AE0C00813D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "282793F1-296C-423A-9A2D-301DC3340664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "020B669B-DE6B-4828-BB44-D99EE576B79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D406F1D-C33D-4BC2-BBA8-740A9E114523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5\\(4b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C762F4B3-4F3D-4EE8-A914-1900AE4AA1C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9627888A-F522-4A41-8B14-F0E7096509FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C5BA8E-2A45-4952-AEE4-94CBE8B4B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA4461-2225-4D64-9CF9-68039C8E85C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5\\(13\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7860ADDE-7861-41A6-9DA9-2355FEEC4B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:5.5\\(19\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "926FC1F1-C2D1-439C-9A43-B38399A1C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A4D6E9-ADCB-4338-8CA9-A2F374F7CE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF08F95-9CF4-4AF6-BB08-021694C7AB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C9BCB53-72AA-426F-9D18-544038B65128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.1\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95B56F4-CDD1-4102-BB33-C66D3CDAC6C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.1\\(1d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDFB025-A93A-441C-84B6-EBB0902A5559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA37670F-3FF4-476E-AA4A-7F98229C6EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.1\\(2.13\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA92A7D-5D0C-42A1-8D0B-C50EA6778DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "52009F7A-2CD1-49BA-B9A6-C88766DC4D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.2\\(0.110\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CE2412-CFB8-42B0-B39E-84569C922952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.2\\(0.111\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9D3782-7638-4252-B9A1-B11CECBE0D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1345465E-2B83-40FE-BC6B-536E0A2260D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.3\\(0.7\\)pan:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236ABC7F-51AE-40A9-9A3F-F32E16A7B74E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.3\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B791566-5B22-452D-ACDA-A1085700AE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD776AC3-A10E-4B4C-BCB9-1DB1781DDA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:6.4\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3EEAE6-9EDF-4783-A083-D6C81CFF510A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "904FC5E4-6BE0-4B15-8283-26F92922B78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:7.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F47A997-B2A5-459D-8089-12B2AB438FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:7.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76E1E2-3EE9-4560-B138-06347ECA3B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:7.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "567897E0-416B-47D8-ABAF-412DA5FF9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:7.6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E0B307-56E1-4E0E-A68E-5D95CBC91A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:7.6\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DED72B-DBB7-4E51-AD6D-75EE407A3817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:11.2\\(8.2\\)sa6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97C1243-BBEB-44AC-96E1-AC46F946EA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5.2\\)xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5DF5835-5DE4-4C4E-BFF3-2B15B01771B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15864",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) TID parameter in topic.asp, (2) FORUM_ID parameter in forum.asp, and (3) PROFILE_ID parameter in profile.asp.  NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en ASPBB 0.4 permiten a atacantes remotos ejecutar órdenes SQL de su elección mediante (1) el parámetro TID en topic.asp, el parámetro (2) FORUM_ID en profile.asp, y el parámetro (3) PROFILE_ID en profile.asp.\r\nNOTA: La procedencia de esta cuestión es desconocida; sus detalles son obtenidos solamente de BID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64592E8F-2FB8-40BE-B0D0-80A7DBCB7708"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15859",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site scripting (XSS) attacks by replacing the \">\" in the tag with a \"<\", which bypasses the regular expressions that sanitize the data, but is automatically corrected by many web browsers.  NOTE: it could be argued that this vulnerability is due to a design limitation of many web browsers; if so, then this should not be treated as a vulnerability in PHP-Nuke."
      }, {
        "lang" : "es",
        "value" : "Conflicto de interpretación en includes/mainfile.php en PHP-Nuke 7.9 y anteriores permite a atacantes remotos realizar ataques de secuencias de comandos en sitios cruzados (XSS) reemplazando el \">\" en una etiqueta con un \"<\" lo que evita las expresiones regulares que sanean los datos, pero es automáticamente corregido por muchos navegadores web.\r\nNOTA: podría ser argumentado que esto es debido a una limitación de diseño de muchos navegadores web; si es así, esto no debería ser tratado como una vulnerabilidad de PHP-Nuke."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1BC17-2A99-495A-B462-D02B66F00D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9A4F5F-31CB-4097-85E9-B08B2530E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820C37B-1503-4494-8123-ECAF28386231"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/419496/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419991/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15855",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419496/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419991/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vectors, related to \"a possible security flaw caused by a bug in Perl.\" NOTE: unless CP+ includes its own copy of Perl with CVE-2005-3962, this is a different vulnerability than CVE-2005-3962; however, there is insufficient information to be sure."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Positive Software Corporation CP+ (cpplus) anteriores a 2.5.5 tiene impacto y vectores de ataque desconocidos, relacionada a \"un posible defecto de seguridad causado por un fallo de de Perl\".\r\nNOTA: a menos que CP+ incluya su propio ejemplar de Perl con CVE-2005-3962, esta es una vulnerabilidad distinta de CVE-2005-3962; sin embargo no ha suficiente información para estar seguro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:cp\\+:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD13D7A-AC13-48B7-9A19-A94D2638CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:cp\\+:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E15AEC-96F1-4D08-AEF3-1AF9C25BB311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:cp\\+:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17FD97C3-051A-4217-B6D6-A087F0588574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:cp\\+:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3707F22-568B-4B70-BE1A-4C7DAF62E66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:cp\\+:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADF0755-C785-431E-A24E-BCF92F533753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:cp\\+:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF64E19-19C3-4E18-85B8-98A4D3FE6A76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cpplus.info/feature_25.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17975",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0068/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cpplus.info/feature_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0068/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the (1) startrow and (2) catid parameter.  NOTE: this issue might be resultant from the SQL injection problem (CVE-2005-4263)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envolution:envolution:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEB6E68-A41C-4D9C-8A8B-009E4068CEAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015351",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15857",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the (1) startrow and (2) catid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envolution:envolution:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEB6E68-A41C-4D9C-8A8B-009E4068CEAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18069",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15857",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2927",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:triangle_solutions:php_support_tickets:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326B3A67-2954-4204-8F3B-0873A9872899"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015352",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nii.co.in/vuln/PHPSupportTickets.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nii.co.in/vuln/PHPSupportTickets.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2023-11-07T01:58:06.717",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4209.  Reason: This candidate is a duplicate of CVE-2005-4209.  Notes: All CVE users should reference CVE-2005-4209 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F04FD52-7EA8-430E-86C7-5D3733A449AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:worldclient:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB67A240-BF23-4B74-944D-127B263154E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17990",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/mdaemon.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/mdaemon.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4268",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-15T18:11:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cpio:2.6-8:*:fedora_core_4_64bit:*:*:*:*:*",
            "matchCriteriaId" : "05398754-82FF-4C29-86B2-17AEEF1772E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18251",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18278",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18395",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/22194",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0245.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0145.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16057",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=172669",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23855",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1338",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10450",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6860",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/234-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0245.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=172669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/234-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue was addressed in Red Hat Enterprise Linux 4 via https://rhn.redhat.com/errata/RHSA-2007-0245.html and in Red Hat Enterprise Linux 3 via https://rhn.redhat.com/errata/RHSA-2010-0145.html. \n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2010-03-15T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T20:11:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly clicking the \"Delete\" button in a repeating section in a form.  NOTE: the normal operation of InfoPath appears to involve a local user without any privilege boundaries, so this might not be a vulnerability in InfoPath.  If no realistic scenarios exist for this problem in other products, then perhaps it should be excluded from CVE."
      }, {
        "lang" : "es",
        "value" : "mshtml.dll en Microsoft Windows XP, Server 2003, e Internet Explorer 6.0 SP1, permite a atacantes causar una denegación de servicio (violación de acceso) causando que mshtml.dll procese eventos de foco de botón al mismo tiempo que un documento se está recargando, como se ha visto en Microsoft Office InfoPath 2003 haciendo clic repetidamente en el botón \"Borrar\" en una sección repetitiva en un formulario.\r\nNOTA: La operación normal de InfoPath parece conllevar un usuario local sin límites de privilegios, por lo que esto puede no ser una  vulnerabilidad de Infopath. Si no existen escenarios realistas con este problema en otros productos, entonces quizás debería ser exclido de CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/908233/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/6V00B1FEUE.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.microsoft.com/kb/908233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/6V00B1FEUE.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T20:11:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Wathfire AppScan QA 5.0.609 y 5.0.134 permite a servidores web remotos ejecutar código de su elección mediante una respuesta HTTP 401 con una cabecera WWW-Authenthicate conteniendo un campo Realm largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:watchfire:appscan_qa:5.0.134:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B455742-783D-4910-932B-5A96F79D85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:watchfire:appscan_qa:5.0.609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A080BE-A98D-4BCC-B8C1-F0BAF0D731B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_AppScanQA_RemoteCodeExec.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419586/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15873",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_AppScanQA_RemoteCodeExec.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419586/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78227&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419577/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15881",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78227&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419577/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd and (2) slocal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E38D56-80BA-460C-A296-ED7F506E4364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD01F19-4B30-4147-AC48-7F5C64EE80CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78221&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78222&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78223&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78224&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78225&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78226&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419577/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15878",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15879",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78221&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78222&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78223&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78224&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78225&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY78226&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419577/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow local users to append to arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419577/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419634/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419641/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15880",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2947",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419577/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419634/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419641/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-15T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service (user account lock out) via unknown attack vectors related to \"authentication mechanisms\" and \"form input.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:businessobjects:webintelligence:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E61DC2-79F5-4B2B-B3B8-F912C7844D5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419493/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419493/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and (2) Proxim AP-600 and AP-2000 before 2.5.5, and Proxim AP-700 and AP-4000 after 2.4.11 and before 3.1, use a static WEP key of \"12345\", which allows remote attackers to bypass authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:wireless_ap-3:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE41CF27-432E-4A11-A804-954195538FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:wireless_ap-3:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5C425E-F670-4DEF-B532-07D8DC66E8CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:wireless_ap-4:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1485FB74-AD78-40B4-8183-63B11BF27249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:wireless_ap-4:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92381317-38CE-4B56-B3AC-4465A351EDD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:wireless_ap-5:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF560B1A-F41F-4EDE-9172-60AD80EBF9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:wireless_ap-5:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7307F22-DB94-4DE4-8873-6A6CA791213C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:wireless_ap-6:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95A1268-ECCF-4AC0-BD14-2D0B9172AEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:wireless_ap-6:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95082B7-7B8D-4A7E-9506-592E2399287B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:wireless_ap-7:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF3A01B-17E5-4683-8EAC-0E174473A5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:wireless_ap-8:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA452029-2FB7-4B84-9DDC-84A3007650CF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:proxim:ap-2000:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD83FFB-8EE9-4551-B36C-4D7CF68EFF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:proxim:ap-4000:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41ED996-F360-4CC6-9916-EEE454BC5E25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:proxim:ap-4000:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7235EE55-1513-45DE-A5A8-E60A0192C35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:proxim:ap-600:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B336E98-6E84-41CA-8EF2-2E8D67B9B247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:proxim:ap-700:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1BE5EA-F7B6-4A4D-A527-DFD074B37D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:proxim:ap-700:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08771AE2-6096-4268-A0A8-28041ED49D48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://keygen.proxim.com/support/cs/Documents/802.1x_vulnerability.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18047",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-233.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://keygen.proxim.com/support/cs/Documents/802.1x_vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-233.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD), as demonstrated using hping2.  NOTE: the provenance of this issue is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:scientific_atlanta:dpx2100_cable_modem:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B63848-ABCC-43C4-903B-01426ECB36F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15870",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD). NOTE: the provenance of this issue is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:westell:versalink:327w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE77D475-5975-4C42-8730-8A8B2FF39D2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6",
            "matchCriteriaId" : "1F1F20EB-C738-4514-92AC-839A6F077515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279254C3-7424-460A-A220-B983ABA0FC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C0A93D-4B2C-4E52-B7F7-3AD5E069D0BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D3ECDC-D2D1-479E-BC92-1479EB09683D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6_pre-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1E4D8C-6B92-4F94-BA51-4D058D2E0F73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18058",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015354",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435412/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.toenda.com/files/toendaCMS_0.7_Beta.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435412/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.toenda.com/files/toendaCMS_0.7_Beta.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.8.6",
            "matchCriteriaId" : "BB5869CF-E0BD-4091-B7AA-7722F39EAF0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D64BFC-E974-460C-A635-7319676049A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFF691-770C-4181-BB40-14BD1B90F705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EF5BB8-FFEA-4927-A289-3C9A7ADEC6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB034FE1-9575-45B4-9E8F-1B068E3ED1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D7F3D2-FE93-4F2F-B8FB-F2A7869502FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7530A863-0FFF-4332-8E6F-4329AB4DE5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30E072-9E6A-49B4-A5C7-63A328598A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "434F0580-985F-42AF-BA10-FAB7E2C23ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B179E0-C843-46C9-AAD2-78E998175E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5E5A51-ED4C-4927-8C4D-502E79391E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171C82CB-2E92-4D41-B1B1-DCFE929E8270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25633253-D9DE-41F0-A787-D0E8B2B3B9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEDF9611-E4E2-4059-B45E-D3A61AC9DB47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A9D197-D889-4BE4-BE7A-2EE9536A7498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A4538C-3870-431E-A225-D8523D77A4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:larry_wall:perl:5.8.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8233B3A-E09D-425B-B1A1-65CD170FD384"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17232",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/55314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/55314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:qt-unixodbc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.3",
            "matchCriteriaId" : "DFB0E9AB-5A93-4244-B943-3895C7BCC4F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17232",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in CMake before 2.2.0-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F981201-E3E1-47E9-9B49-182DA3AF8022"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D506180-8330-431B-9920-7ACC8E4792C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98F8409-5091-4052-87D4-72DE0D359704"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA68B91-EDA4-4C67-A6AB-87B07AC1C05B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB0D186-9396-4E23-A25F-ACDE532D6258"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52B99A2-94E5-4BCF-AE64-0906DCC941A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.6.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C562058-93FF-41C7-B272-3CB2AF78E277"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.6.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90853617-283A-44F6-BBE2-C90D70A3FF24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0377ABA-3697-469C-9722-5CAFEDDD7668"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0FE0C0-58D3-4937-98EC-D5648D7A0344"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237E977B-F831-44BB-988E-CE03FEA707E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA08A35A-A5EF-40FC-9E85-0FC8B5F3F2D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38873CA1-ED6B-4B1E-8806-D3090FF9A14F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561FC285-5688-4F50-9DBE-DB561995D76E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A033A6-23CF-420E-A03F-9D472917B28E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B10B7FB-314B-4DEC-B865-28AD1919816E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B20A8E-1A16-4F82-BF38-B2FC45117DF3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4426A597-C039-4676-96D4-6F53FC445919"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DCEE6D-94B2-4F56-A0E6-AFC07CE33337"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D450A06C-8E74-4BB8-A4DA-96AD1DEF53FF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6F1C72-E9B4-4BD2-AF96-052C62B0DCD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF97ECFD-D748-4794-9C42-8FE9D25D0541"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FAD3A63-17D7-46DA-AAD7-879BE8DCE907"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941AEDB1-D7DE-442A-8A19-A9F50238794F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2EE878-4E1F-4D9E-8BC4-2CD6A686EC21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99D0E41E-63AA-4C12-85E9-C61BDBF071F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kitware:cmake:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E43851-3AF5-488F-8F59-FF8826D655F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17232",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Zaygo HostingCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via certain search module parameters, possibly the root parameter to zaygo.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zaygo:hostingcart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "8B7762EF-29B7-4972-8D2E-4B770D54071E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/hostingcart-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18036",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/hostingcart-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Zaygo DomainCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML, possibly via the root parameter to zaygo.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zaygo:domaincart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "16EF6F61-16FC-4D66-BD2E-B2F726F24FE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/domaincart-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18035",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/domaincart-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via parameters to the search module, possibly SKey to store.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nightmedia:the_city_shop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "9A0D64B7-464D-4D06-85FD-FD2152CB2287"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/city-shop-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18041",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/city-shop-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter.  NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:static_store:staticstore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.189a",
            "matchCriteriaId" : "14ED928C-5271-4404-8BE5-12E2212F6E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/staticstore-search-engine-friendly-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18037",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/staticstore-search-engine-friendly-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the search module parameter or the (2) product and (3) cart_id parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dick_copits:pdestore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "49366601-B5AD-44DF-AB48-14A2534724F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/pdestore-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18042",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15898",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/pdestore-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving \"'smart' values for userid and password,\" probably involving an SQL injection vulnerability in the (1) pass and (2) usr parameters in submit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phplogcon:phplogcon:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B197ADD6-883E-49EE-8826-0E0E8F1419A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phplogcon:phplogcon:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF29DEE-DD91-4CFA-AC90-F69397D5A3D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phplogcon:phplogcon:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B197CA2E-A278-4E81-9FD8-93E26611DBE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phplogcon/phplogcon/submit.php?r1=1.4&r2=1.5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18053",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phplogcon.com/Article9.phtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phplogcon/phplogcon/submit.php?r1=1.4&r2=1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phplogcon.com/Article9.phtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marmaraweb:marmaraweb_e-commerce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1062670-9DE5-4993-ABD7-BEFD801CBC76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419587/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15877",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419587/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitrary web script or HTML via the page parameter to index.php.  NOTE: this might be resultant from CVE-2005-4287."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marmaraweb:marmaraweb_e-commerce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1062670-9DE5-4993-ABD7-BEFD801CBC76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419588/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15875",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419588/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web script or HTML via the user_action parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edatcat:edatcat_shopping_cart_system:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DB4EF-ED64-480C-A732-6D6B5A5FF8A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/edatcat-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15889",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/edatcat-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) kword, (2) max, (3) min, (4) comp, and (5) f parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soft4e:ecw-cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.03",
            "matchCriteriaId" : "281C97EA-5B2E-4698-B19D-1EAB1CD1E7A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ecw-cart-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18025",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15890",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ecw-cart-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) product, (2) category, and (3) uid parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ectools:ectools_onlineshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "868B11E8-C9FF-4376-94F2-C2D4B24838F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ectools-onlineshop-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18028",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15891",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ectools-onlineshop-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keywords parameter in the Quick Find feature."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_express_products:commercesql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "79808884-E448-4CF8-9F2C-4D28D73D6BDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/commercesql-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17932",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15888",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/commercesql-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the affl parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3DB0B9-5D9A-41A7-9753-CDAAAAFA9BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4F5B54-0670-4175-8F83-2BE98A2DA20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3198C6-59E2-4F88-9FC2-4CB0D6FB65F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966A3300-ADD9-4CE6-BF38-9B7A2EC23464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801816B8-F27D-49DD-A8BF-D339B4CF4C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F195DCC5-6233-4898-AC33-F6CA129B04C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68EB410-6F70-4641-BBCF-9FF9F08B4193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCBEE85-FE2B-4D07-AC6A-D2758B717D1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA68F4B-EE79-4518-96F6-5563323A7F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37F9AE8-B2D0-432A-AAFE-C366B83EEB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C408FFE-7440-4822-971B-E76383BA3D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kryptronic:clickcartpro:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58103253-655C-47FF-B443-41176B4A6AA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/clickcartpro-ccp-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17927",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-January/000510.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.clickcartpro.com/forum/index.php?showtopic=12172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15896",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/clickcartpro-ccp-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-January/000510.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.clickcartpro.com/forum/index.php?showtopic=12172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.2",
            "matchCriteriaId" : "9C946A7D-7C49-43BA-8E72-C57A3B6517C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8369451E-7C00-4CC3-9B80-871559E3F59E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0640.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18046",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opencms.org/opencms/en/download/opencms.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0640.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opencms.org/opencms/en/download/opencms.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via the text parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xigla:absolute_image_gallery_xe:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "601CD7AC-B6F0-4019-9279-5964C75AADEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:appserv_open_project:appserv:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8CD53E-5AE3-43A4-8F38-ED907DF3FB76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15851",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a long name value in an Application Set response."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:ica_program_neighborhood_client:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F72C59-703A-44C4-B725-B74FC047AE21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18068",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.citrix.com/kb/entry.jspa?externalID=CTX108354",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=357&type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.citrix.com/kb/entry.jspa?externalID=CTX108354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/application/poi/display?id=357&type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in bbBoard 2.56 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly via the \"keys\" parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bbboard:bbboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.56",
            "matchCriteriaId" : "6DBE2991-3F6B-498B-AD60-61BE394122AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/bbboard-v2-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/bbboard-v2-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) sch_allsubct, (2) before, and (3) ct parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlantpro.com:atlantforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.02",
            "matchCriteriaId" : "EEA82ADC-3102-4FF0-8091-20035D5942F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/atlantforum-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/atlantforum-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) before and (2) ct parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlantpro.com:atlant_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.02",
            "matchCriteriaId" : "3B63042B-4DA6-4B77-B0BC-40DBF3607214"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/atlant-pro-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18095",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/atlant-pro-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the lire_pop function in pop.c in libremail 1.1.0 and earlier, with compiled with the debug option, allows remote attackers to execute arbitrary code via a crafted e-mail or POP server response."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libremail:libremail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "E27B6E1D-54DE-4431-978F-7507F33CE459"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/419639/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15906",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419639/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-16T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the address bar field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpxplorer:phpxplorer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.12",
            "matchCriteriaId" : "E892036E-987C-4161-81B4-2A6E5D59582C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/phpxplorer-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18080",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/phpxplorer-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via \"..\"  sequences in the p parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:indexcor:ezdatabase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.2",
            "matchCriteriaId" : "06A5A32A-7D2C-4482-95F6-AABA5ADA2662"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ezdatabase-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15908",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ezdatabase-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the db_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:indexcor:ezdatabase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.2",
            "matchCriteriaId" : "06A5A32A-7D2C-4482-95F6-AABA5ADA2662"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ezdatabase-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ezdatabase-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid cat_id parameter, which leaks the full pathname in an error message.  NOTE: these details are uncertain because the original report has terminology problems and lack of relevant details.  The description is based partially on feedback comments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:indexcor:ezdatabase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.2",
            "matchCriteriaId" : "06A5A32A-7D2C-4482-95F6-AABA5ADA2662"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ezdatabase-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18043",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15908",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ezdatabase-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF7E7DA-385E-4C8E-90BF-308213EA0550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BB91A-3627-4149-9935-86BB5FF5EE62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF72084-56B5-4E1B-B701-887984789068"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.edgewall.com/trac/wiki/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18048",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.edgewall.com/trac/wiki/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pg, (2) tid, (3) cid, and (4) fid parameters to netboardr.cgi, or (5) cid parameter to search.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:focalmedia.net:sitenet_bbs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "914809D9-AA38-4059-98FE-7CF3CD58B21B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/sitenet-bbs-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18090",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/sitenet-bbs-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to (1) forum.cgi and (2) post.cgi, or (3) the user parameter to profile.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jonathan_bravata:scarecrow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.13",
            "matchCriteriaId" : "27D30048-7E23-4638-942E-454F8517CC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jonathan_bravata:scarecrow:2.00_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D747DA86-8D2F-411A-8A35-47D2618A1051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jonathan_bravata:scarecrow:2.01_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C897F81-C4D5-4978-9C86-B0BE3B6DAA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jonathan_bravata:scarecrow:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD21775-51E8-4750-B530-53CE76B897E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jonathan_bravata:scarecrow:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A935DBD1-E9E7-4698-8813-28CC241E85B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jonathan_bravata:scarecrow:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67AB3ACD-8E9A-437E-B7F8-2A8123EA12E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/scarecrow-message-board-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18084",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15915",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/scarecrow-message-board-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "4C6418BB-9C17-42AA-B909-25A0593F68D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20FD92C-8E5C-4AE4-A0C0-9E0BDE719F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD2936-8165-46A6-89E4-817C7B15693D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB12966-C192-46F2-8E6B-799C43C427E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B9D16A-A764-4369-9CA5-8D1DE40D5921"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ezupload-pro-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ezupload-pro-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "4C6418BB-9C17-42AA-B909-25A0593F68D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20FD92C-8E5C-4AE4-A0C0-9E0BDE719F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD2936-8165-46A6-89E4-817C7B15693D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB12966-C192-46F2-8E6B-799C43C427E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B9D16A-A764-4369-9CA5-8D1DE40D5921"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ezupload-pro-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15919",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ezupload-pro-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:5.0.0_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2CD26F-FB34-4F6D-B2E1-EC3C26FBD435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:5.0.0_f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4298CE-29D5-4A3E-B6FA-D7BA6A781C37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:5.0.0_t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A9CBA9-DE79-4006-B973-7C1388E1A28C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18001",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15903",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ssh.com/company/newsroom/article/694/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ssh.com/company/newsroom/article/694/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecified search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum:2k_1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD52604-B45F-4839-A0F5-F4F052A70497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8929325A-275C-4812-9CC0-6F96FB535995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FF2D08-2062-41E8-988F-40A2B6F95ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4CE3C7-23B2-458C-B190-0DD24693F553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B90EC3A-BCC3-45D3-922C-00CAFBE3015B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum:6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD46CB65-8F52-400A-A505-6C26426C0222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum:6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D68FC5-F11A-417C-A740-F014E841FE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum:6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C9E691-6FDC-4155-9D03-767604D872B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum:6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03DC7ED5-6934-4D2A-9DC1-4ACA12A22C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum:2000_1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C753AA9-5C61-4DE9-81BF-6F5D0D2193D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum\\+:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C36A0-BF3E-4991-8078-0AD88963854A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum\\+:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3094975E-3040-4470-B37D-1D5609839AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum\\+:1.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA97705-39F3-4853-978E-D4924AE2BB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum\\+:1.002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20A78680-3017-4D41-B350-BCAF8D0FF683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum\\+:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0827D4-51C9-4778-89F2-64A8EE5604D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforum\\+:1.003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680A71A4-68B2-4277-A072-39799E2645A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/dcforum-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/dcforum-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:almondsoft:almond_classifieds:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BC0307-7D75-4C1B-ABCC-D104C8BD0809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/almondsoft-products-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18094",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/almondsoft-products-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:almondsoft:almond_personals:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D634710-8AA2-4616-84AA-68C40F5A1AAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/almondsoft-products-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18094",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/almondsoft-products-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) stop and (2) user parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ppcal_shopping_cart:ppcal_shopping_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "F18E8AEE-FD0C-4C63-BC14-C8D8E7165D49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ppcal-shopping-cart-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18032",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15892",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ppcal-shopping-cart-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the (1) s_itemname and (2) s_orderby parameters to plexcart.pl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicplex:plexcart_x3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "44901990-4AD3-4CFC-8114-2287172F9182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/plexcart-x3-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18033",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2924",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/plexcart-x3-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a \"Rose Attack\" that involves sending a subset of small IP fragments that do not form a complete, larger packet."
      }, {
        "lang" : "es",
        "value" : "HP-UX B.11.00, B.11.04, B.11.11, y B.11.23 permiten a atacantes remotos causar una denegación de servicio mediante un \"Ataque Rosa\" que conlleva enviar un subconjunto de pequeños fragmentos IP que no forman un paquete completo mayor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18082/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015361",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-062.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/376490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419594/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419594/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/11258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18082/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-062.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/376490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419594/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419594/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/11258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modification, which allows remote attackers to use the _SERVER[REMOTE_ADDR] parameter to (1) conduct cross-site scripting (XSS) attacks in the stats module or (2) execute arbitrary code via an eval injection attack in the wrapper option in index2.php."
      }, {
        "lang" : "es",
        "value" : "Limbo CMS 1.0.4.2 y anteriores, con \"register_globals\" apagado, no protege la variable $_SERVER de modificación externa, lo que permite a atacantes remotos usar el parámetro _SERVER[REMOTE_ADDR] para (1) llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) o (2) ejecutar código de su elección mediante un ataque de inyección de evaluable en la opción \"wrapper\" en index2.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4.2",
            "matchCriteriaId" : "598E2FCD-D74E-4386-B18F-E50E1898990C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/limbo1042_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18063/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015364",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419470/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15871/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/limbo1042_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18063/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419470/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15871/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote attackers to execute arbitrary SQL commands via the _SERVER[REMOTE_ADDR] parameter, which modifies the underlying $_SERVER variable."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en index.php en Limbo CMS 1.0.4.2 y anteriores permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro \"_SERVER[REMOTE_ADDR]\", lo cual modifica la variable $_SERVER subyacente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4.2",
            "matchCriteriaId" : "598E2FCD-D74E-4386-B18F-E50E1898990C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/limbo1042_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18063/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015364",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419470/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15871/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/limbo1042_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18063/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419470/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15871/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via \"..\" sequences in the option parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de travesía de directorios en index2.php en Limbo CMS 1.0.4.2 y anteriores permite a atacantes remotos incluir ficheros PHP de su elección mediante secuencias \"..\" en el parámetro \"option\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4.2",
            "matchCriteriaId" : "598E2FCD-D74E-4386-B18F-E50E1898990C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/limbo1042_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18063/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015364",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419470/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15871/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/limbo1042_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18063/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419470/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15871/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to (1) doc.inc.php, (2) element.inc.php, and (3) node.inc.php, which leaks the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4.2",
            "matchCriteriaId" : "598E2FCD-D74E-4386-B18F-E50E1898990C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/limbo1042_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18063/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015364",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419470/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2932",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rgod.altervista.org/limbo1042_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18063/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419470/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in Apani Networks EpiForce 1.9 and earlier running IPSec, allow remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apani_networks:epiforce_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "37B1E73B-35D9-4AF5-B72A-0C76F7040C5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17985/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419104/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15797/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Dec/1015340.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17985/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419104/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15797/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Dec/1015340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to inject arbitrary web script or HTML via the (1) Schedule and (2) Calendar components."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cosminexus_collaboration_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "06_10_b",
            "matchCriteriaId" : "11C21696-043C-45A9-9CAE-5A7ADC612EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cosminexus_collaboration_portal:06_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D428F8F-EFDB-4F28-A272-3CCF79EBB0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "07_10_b",
            "matchCriteriaId" : "576A4EE0-CD07-43F5-85A3-A8FC8F5500BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_portal:07_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16157164-6751-4D83-9CDE-B71946B79B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_web_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "07_10_a",
            "matchCriteriaId" : "6D173A5D-F06A-48B7-AC5C-47A587094E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_web_client:07_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134864A9-7220-4D88-8E9B-806EAEA2DB95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17634/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015241.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015242.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-023_e/01-e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17634/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015241.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015242.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-023_e/01-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to cause a denial of service of unspecified impact via repeated invalid requests to the Schedule component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cosminexus_collaboration_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "06_10_b",
            "matchCriteriaId" : "11C21696-043C-45A9-9CAE-5A7ADC612EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cosminexus_collaboration_portal:06_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D428F8F-EFDB-4F28-A272-3CCF79EBB0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "07_10_b",
            "matchCriteriaId" : "576A4EE0-CD07-43F5-85A3-A8FC8F5500BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_portal:07_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16157164-6751-4D83-9CDE-B71946B79B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_web_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "07_10_a",
            "matchCriteriaId" : "6D173A5D-F06A-48B7-AC5C-47A587094E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_web_client:07_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134864A9-7220-4D88-8E9B-806EAEA2DB95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17634/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015241.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015242.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-023_e/01-e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15500/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17634/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015241.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015242.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-023_e/01-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15500/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hitachi Groupmax Mail SMTP 06-50 through 06-52-/A and 07-00 through 07-20 allows remote attackers to cause a denial of service (service stop) via an e-mail message with an \"invalid format.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_mail_smtp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "06_52_a",
            "matchCriteriaId" : "6B36D4AA-F50D-4BA9-B327-EF9F6812FD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_mail_smtp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "07_20",
            "matchCriteriaId" : "47491E9B-F2F2-4803-BD54-BCC75AA78265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_mail_smtp:06_50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66B76BB-DA8C-4024-A724-D70F0783CBA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_mail_smtp:07_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B147AA9A-F633-42B2-A8A1-C2F7F8FE8CB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17635/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015243.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-024_e/01-e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15499/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17635/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015243.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-024_e/01-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15499/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Driverse before 0.56b have unknown impact and attack vectors, related to (1) a \"ptrace exploit\" and (2) \"some other potential security problems.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:driverse:driverse:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D783A78F-3B40-447D-AB47-6671585AE867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freshmeat.net/projects/driverse/?branch_id=61426&release_id=212356",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015252.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/driverse/?branch_id=61426&release_id=212356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015252.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in cleartext (base64-encoded), which allows remote attackers to sniff authentication credentials."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apc:powerchute_network_shutdown:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DDD3B9-11DD-4241-A735-F59D17E4BCB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7330",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015250.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Nov/1015250.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script or HTML via the (1) function, (2) year, and (3) date parameters to webcal.cgi, (4) new calendar entries, and (5) notes for entries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:webcal:webcal:3.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108162A7-59DC-48F1-B89B-E32E223B5803"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419655/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15917",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_arizona:webglimpse:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F4FAD6-6FB8-44C9-94EB-49B66CD59736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_arizona:webglimpse:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC2919D-0DD4-401C-BF99-9D42D03584EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_arizona:webglimpse:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7065D0-C201-4EDB-9DF9-6121665348A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_arizona:webglimpse:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C88EAC75-02C4-4911-B883-24F8F99288BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_arizona:webglimpse:2.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081743-C174-4888-B029-2E11601B7ADB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/webglimpse-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15916",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/webglimpse-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) newsid and (2) id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:extreme_rc_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52883D06-10A1-4574-B60C-4D97CF92590B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:extreme_rc_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE233089-5B88-46CD-BF9D-08F14AC0290D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:extreme_rc_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0FD7649-C459-4719-964F-92D706F1B267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:extreme_rc_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38DB559-9101-417F-92C5-A7F91E00DAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:extreme_rc_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D00B519-AE1F-40C3-8791-3F5209DE1462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/pafiledb-extreme-edition-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15912",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/pafiledb-extreme-edition-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the (1) id, (2) store, and (3) step parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ihtml_merchant:ihtml_merchant_mall:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42CBB33-A052-4AAD-9150-CA93AAAEDBC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ihtml-merchant-mall-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ihtml-merchant-mall-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitrary SQL commands via the (1) step, (2) id, and (3) pid parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ihtml_merchant:ihtml_merchant:2_pro:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC8EF835-8C15-453C-B82D-C1C4EF6B61BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ihtml-merchant-version-2-pro-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15911",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ihtml-merchant-version-2-pro-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files including (1) admin/uploadclient.jsp, (2) apply_firmware_action.jsp, and (3) file.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 9.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17AF7C3-3453-4343-AC57-B3BAACAD36E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D20F5D1-C28A-4D0E-B4BA-3F8A9B05933E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA3ABF2-F8D7-4D46-8862-072AD105AE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B34BF7-B96E-4C6A-B6BD-803680629300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280C9607-98C6-44CE-9017-43592EC9D013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F972C202-DEEB-49AD-BBE7-442CA0E975E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028ABC18-8944-474C-8482-2DC4F0E0B51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD764CC4-F985-4A2F-B744-0B07BE59534F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B450984-DF81-46FE-A3E2-16323D1E55A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6133BA76-655F-4023-A5C5-31919D3C45E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5D9FFC-728E-4E2A-9787-0748D0C88433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8559F336-5A94-43ED-BF2E-0126038DA3C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FE412A-DB93-41FC-85B3-38E46913BEB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63702A32-F7D3-46FF-B7B2-A845081D3AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF86C8A2-154B-49B3-B263-41826DC196BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CC77562-5C30-4DA3-AFCD-7CD63D85E298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CD71A6-724B-42C1-BBBD-456F74393909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6828C91-18F9-4E36-B496-56E559180480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2251B20D-F0AA-4FCA-8B62-B3EED16726E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D400E92-D0E4-43C2-8ECF-84352B5B2608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59115E7-A5AB-4468-BE51-AB6E8D188B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE9D413-8078-4618-B4A6-4D774D30930F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.awarenetwork.org/forum/viewtopic.php?p=2236",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419645/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420008/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.awarenetwork.org/forum/viewtopic.php?p=2236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419645/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420008/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) inreplyto, (2) article, and (3) board parameters to reply.pl, (4) branch, (5) board, and (6) stats.pl parameters to (b) stats.pl, and (7) board parameter to (c) toc.pl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:binary-concepts:binary_board_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.5",
            "matchCriteriaId" : "833A0392-2E34-4F1E-AAF7-00D669CDF363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/binary-board-system-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15913",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/binary-board-system-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID parameter to (1) zixforum/forum.asp, as used in (2) Headforums.asp and (3) Subject.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_andersson:zixforum:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA289DF-AFAB-4782-BCAF-C5E10423F046"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015359",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-April/000687.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-April/000687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ProjectForum 4.7.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted pageid parameter to admin/versions.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:courseforum:projectforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.0",
            "matchCriteriaId" : "C765173F-FA58-4B6A-85CA-F3D245875D17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/projectforum-470-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18071",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/projectforum-470-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-17T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) fwd parameter in admin/adminsignin.html and (2) originalpageid parameter in admin/newpage.html associated with a group."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:courseforum:projectforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.0",
            "matchCriteriaId" : "C765173F-FA58-4B6A-85CA-F3D245875D17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/projectforum-470-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18071",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/projectforum-470-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-19T03:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified user_id parameter and a \"/\" in the encoded_pw parameter."
      }, {
        "lang" : "es",
        "value" : "Lo página de inicio de sesión en Blackboard Learning and Community Portal System en Academic Suite 6.3.1.424, 6.2.3.23, y otras versiones anteriores a 6 permiten a atacantes remotos saltarse la autenticación y ganar privilegios como otros usuarios mediante un parámetro \"user_id\" modificado y un \"/\" en el parámetro \"encoded_pw\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D94F46-4EA2-4EDF-A0DB-3F5858AE2E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:6.2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51932C51-CCCC-419F-9655-C71B01D24336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:6.3.1.424:*:*:*:*:*:*:*",
            "matchCriteriaId" : "535D86A9-D28E-4356-AE5C-1018C1645942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ipomonis.com/advisories/Bb_6.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ipomonis.com/advisories/Bb_6.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-19T03:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by setting the context parameter to \"admin\"."
      }, {
        "lang" : "es",
        "value" : "announcement.pl en Blackboard Learning and Community Portal System en Academic Suite 6.3.1.424, 6.2.3.23, y otras versiones anteriores a 6 permiten a atacantes remotos ganar privilegios de administrador estableciendo el parámetro de contexto a \"admin\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D94F46-4EA2-4EDF-A0DB-3F5858AE2E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:6.2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51932C51-CCCC-419F-9655-C71B01D24336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:6.3.1.424:*:*:*:*:*:*:*",
            "matchCriteriaId" : "535D86A9-D28E-4356-AE5C-1018C1645942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ipomonis.com/advisories/Bb_6.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ipomonis.com/advisories/Bb_6.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-19T03:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to inject arbitrary web script or HTML via the context parameter to announcement.pl, which is reflected in the resulting page."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Blackboard Learning and Community Portal System en Academic Suite 6.3.1.424, 6.2.3.23, y otras versiones anteriores a la 6, permiten a atacantes remotos inyectar 'script' web o HTML de su elección mediante el parámetro \"context\" de announcemente.pl, lo cuál es reflejado en la página resultante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D94F46-4EA2-4EDF-A0DB-3F5858AE2E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:6.2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51932C51-CCCC-419F-9655-C71B01D24336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:6.3.1.424:*:*:*:*:*:*:*",
            "matchCriteriaId" : "535D86A9-D28E-4356-AE5C-1018C1645942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ipomonis.com/advisories/Bb_6.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/Bb_6.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-19T03:47:00.000",
      "lastModified" : "2023-11-07T01:58:07.273",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4206.  Reason: This candidate is a duplicate of CVE-2005-4206.  Notes: All CVE users should reference CVE-2005-4206 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-19T03:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list all available categories via a blank category_id parameter to category.pl.  NOTE: it is not clear whether this information is sensitive or not, so this might not be an exposure."
      }, {
        "lang" : "es",
        "value" : "Blackboard Learning and Community Portal System en Academic Suite 6.3.1.424, 6.2.3.32, y otras versiones anteriores a 6 permiten a atacantes remotos listar todas las categorías de variables mediante un parámetro \"category_id\" en blanco en category.pl. NOTA: no está claro si esta información es sensible o no, por lo que esto podría no ser una exposición."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D94F46-4EA2-4EDF-A0DB-3F5858AE2E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:6.2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51932C51-CCCC-419F-9655-C71B01D24336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:academic_suite:6.3.1.424:*:*:*:*:*:*:*",
            "matchCriteriaId" : "535D86A9-D28E-4356-AE5C-1018C1645942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ipomonis.com/advisories/Bb_6.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ipomonis.com/advisories/Bb_6.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-19T03:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to \"bypass security controls,\" aka \"JRun Clustered Sandbox Security Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "ColdFusion Sandbox en Adobe (antes Macromedia) ColdFusion MX 6.0, 6.1, 6.1 con JRun, y 7.0, no lanza una excepción si el SecurityManager está inhabilitado, lo que podría permitir a atacantes remotos \"evitar controles de seguridad\", tcc \"Vulnerabilidad de Seguridad de Caja de Arena de JRun Agrupado\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C65BE0-32FA-4D51-AA2B-E7D630470D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:6.1:*:enterprise_with_jrun:*:*:*:*:*",
            "matchCriteriaId" : "88FB2C4B-E22D-4469-AD12-403A8E8B260C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:6.1:*:j2ee_application_server:*:*:*:*:*",
            "matchCriteriaId" : "5E448558-A9F6-4506-AA6D-688C73CEC61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E5A6D-8476-401B-9A18-BDBC07CA1CDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015369",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15904",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-19T03:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka \"CFMAIL injection Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Adobe (antes Macromedia) ColdFusion MX 6.0, 6.1, 6.1 con JRun, y 7.0 permiten a atacantes remotos adjuntar ficheros de su elección y enviar correo mediante un un campo \"Subject\" artesanal, que no es manejado adecuadamente por la etiqueta CFMAIL en aplicaciones que usan ColdFurion, tcc \"Vulnerabilidad de inyección CFMAIL\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C65BE0-32FA-4D51-AA2B-E7D630470D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:6.1:*:enterprise_with_jrun:*:*:*:*:*",
            "matchCriteriaId" : "88FB2C4B-E22D-4469-AD12-403A8E8B260C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:6.1:*:j2ee_application_server:*:*:*:*:*",
            "matchCriteriaId" : "5E448558-A9F6-4506-AA6D-688C73CEC61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E5A6D-8476-401B-9A18-BDBC07CA1CDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015369",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15904",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-19T03:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local users to create an object despite the specified configuration."
      }, {
        "lang" : "es",
        "value" : "Adobe (antes Macromedia) ColdFusion MX 7.0 no respeta que la configuración CFOBJECT/CreateObject (Java) esté inhabilitada, lo que permite a usuarios locales crear un objeto a pesar de la configuración especificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E5A6D-8476-401B-9A18-BDBC07CA1CDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015371",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15904",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-19T03:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges."
      }, {
        "lang" : "es",
        "value" : "Adobe (antes Macromedia) ColdFusion MX 7.0 expone la huella digital ('hash') de la contraseña de administrador en una llamada API, lo que permite a desarrolladores locales obtener la huella digital y ganar privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E5A6D-8476-401B-9A18-BDBC07CA1CDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015371",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15904",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-19T03:47:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invalid SQL syntax error in blog.php in phpBB Blog 2.2.2 and earlier allows remote attackers to obtain the full path of the application via an invalid permalink parameter to index.php, which produces an invalid SQL query that leaks the full pathname in a SQL syntax error message. NOTE: this was originally claimed to be SQL injection, but a cleansing step strips all non-digit characters and leaves an empty permalink argument, which leads to the syntax error."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de error de sintaxis SQL no válido en blog.php de phpBB Blog 2.2.2 y anteriores permite a atacantes remotos obtener la ruta completa de la aplicación mediante un parámetro \"permalink\" no válido para index.php, lo que filtra la ruta completa en un mensaje de error de sintaxis de SQL. NOTA: Anteriormente se afirmó que esta era una vulnerabilidad de inyección de SQL, pero un paso de limpieza extrae todos los caractéres no dígitos, y deja un argumento \"permalink\" vacío, lo que conduce al error de sintaxis."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anthony_boyd:phpbb_blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.2",
            "matchCriteriaId" : "D1D947CC-28AC-4A30-AED3-A5443815E5C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/phpbb-blog-222-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21565",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.outshine.com/forums/viewtopic.php?t=308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/phpbb-blog-222-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.outshine.com/forums/viewtopic.php?t=308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-19T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the (1) dbname and (2) checkprivs parameters.  NOTE: the vendor and a third party have disputed this issue, saying that the main task of the program is to support query execution by authenticated users, and no external attack scenario exists without an auto-login configuration.  Thus it is likely that this issue will be REJECTED.  However, a closely related CSRF issue has been assigned CVE-2005-4450"
      }, {
        "lang" : "es",
        "value" : "** DISPUTADA **  Vulnerabilidad de inyección de SQL en server_privileges.php en phpMyAdmin 2.7.0 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante los parámetros (1)dbname y (2) checkprivs.\r\n\r\nNOTA: el fabricante y una tercera parte disputan esta cuestión, diciendo que la tarea principal del programa es soportar la ejecución de consultas por usuarios autenticados, y no existe ningún escenario de ataque externo sin una configuración con inicio automático de sesión. Por lo tanto, es probable que esta cuestión sea rechazada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2887738D-57A8-4E43-8498-5C8D0FAAA030"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113486637512821&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18113",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419829/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419832/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2995",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113486637512821&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419829/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419832/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08 on HP-UX B.11.00 through B.11.23 allows remote attackers to cause an unspecified denial of service via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:wbem_services:a.01.05.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53796055-A29A-4974-9088-C94C4F278EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:wbem_services:a.02.00.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA3B8C7-492C-4B05-921C-F7FD77BE5578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Dec/1015377.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00582373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00582373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Dec/1015377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00582373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00582373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C0CB57-09D3-4694-A12C-28135CD34AC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18058",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21768",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:university_of_arizona:webglimpse:2.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081743-C174-4888-B029-2E11601B7ADB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18076",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the (1) Cat parameter in default.asp and the (2) accessdenied parameter in admin/default.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmpie:ustore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F96835-48B8-4293-A390-8DB3F3C5FE53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18026",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmpie:ustore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F96835-48B8-4293-A390-8DB3F3C5FE53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18026",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpBB 2.0.18, when \"Allowed HTML tags\" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with \" (quote) characters and active attributes such as onmouseover."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E7ED09-FDD7-4FC2-AD0F-4B31E170F3F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113484567432679&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18125",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/269",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?t=352966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420537/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113484567432679&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?t=352966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420537/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/admin_disallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid append_sid function call that leaks the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E7ED09-FDD7-4FC2-AD0F-4B31E170F3F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113484567432679&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18125",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18252",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=352966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420537/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113484567432679&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=352966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420537/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to execute arbitrary SQL commands via the (1) cat and (2) srcText parameters to faq.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oodie:odfaq:1.21b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26969BAE-12AA-4CDB-B8F3-C88DD10EC4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oodie:odfaq:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44097098-8930-4E45-BF5A-703EB6A660BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/odfaq-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18121",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/odfaq-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to \".dll\" followed by arguments such as \"~0\" through \"~9\", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using \"/_vti_bin/.dll/*/~0\".  NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_services:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25100F8C-58A0-49D5-8247-8CCD099A734B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:-:*",
            "matchCriteriaId" : "C5D2C681-EB06-4B72-BD34-47AEE35CC227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18106",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/271",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Dec/1015376.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/21805",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419707/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15921",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-191A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2963",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-041",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1703",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Dec/1015376.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/21805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419707/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-191A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magnolia:content_management_suite:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D993E2-BA3E-4C29-A28C-8036C0D30C68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/magnolia-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18104",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/magnolia-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:komodo:komodo_cms:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB590FD-0E1C-47B2-B54F-F587ACB83783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:komodo:komodo_cms:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB590FD-0E1C-47B2-B54F-F587ACB83783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hot_banana:web_content_management_suite:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBF7699-3315-4472-9BEB-ED9CBD207E96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/hot-banana-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18126",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/hot-banana-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in text.php and (2) frame parameter in forum.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flip:flip:0.9.0.1029:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDDD9DB-849E-4844-8220-06FF12E7ED6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/flip-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18128",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/flip-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DRZES HMS 3.2 allow remote attackers to execute arbitrary SQL commands via the (1) plan_id parameter to (a) domains.php, (b) viewusage.php, (c) pop_accounts.php, (d) databases.php, (e) ftp_users.php, (f) crons.php, (g) pass_dirs.php, (h) zone_files.php, (i) htaccess.php, and (j) software.php; (2) the customerPlanID parameter to viewplan.php; (3) the ref_id parameter to referred_plans.php; (4) customerPlanID parameter to listcharges.php; and (5) the domain parameter to (k) pop_accounts.php, (d) databases.php, (e) ftp_users.php, (f) crons.php, (g) pass_dirs.php, (h) zone_files.php, (i) htaccess.php, and (j) software.php.  NOTE: the viewinvoice.php invoiceID vector is already covered by CVE-2005-4137."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fad_solutions:drzes_hms:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247B1333-02EA-4945-A1E9-DC93FC7D870B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in register_domain.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the \"Domain Availability\" field.  NOTE: this issue was later reported to affect CONTROLzx (renamed from DRZES) 3.3.4."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fad_solutions:drzes_hms:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247B1333-02EA-4945-A1E9-DC93FC7D870B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/controlzx-hms-hosting-management.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/controlzx-hms-hosting-management.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "roundcube webmail Alpha, with a default high verbose level ($rcmail_config['debug_level'] = 1), allows remote attackers to obtain the full path of the application via an invalid_task parameter, which leaks the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:-:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B3405D15-9AD6-4593-92BF-5368711CB34A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/418851/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419710/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422168/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/418851/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419710/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422168/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly strSearchKeywords to browse.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_collective:acuity_cms:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF67D9FB-92AA-46DB-B81D-A0E85F47A41D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/acuity-cms-26x-asp-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18070",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/acuity-cms-26x-asp-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter to default.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acidcat:acidcat:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4CD85C-9B66-44FA-96E8-DE5095830800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acidcat:acidcat:2.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE0BA5F-E9A8-47E7-A079-BF90BAC2EA0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acidcat:acidcat:2.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21571D53-1728-474D-B33E-2EF01A9EF8AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/acidcat.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18097",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419905/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/acidcat.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419905/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a request to databases/acidcat.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acidcat:acidcat:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4CD85C-9B66-44FA-96E8-DE5095830800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acidcat:acidcat:2.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE0BA5F-E9A8-47E7-A079-BF90BAC2EA0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acidcat:acidcat:2.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21571D53-1728-474D-B33E-2EF01A9EF8AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/acidcat.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18097",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419905/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/acidcat.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419905/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in account.html in Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liquid_bytes_technologies:adaptive_website_framework:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74DAD-E978-4797-98A8-64A9874DEE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liquid_bytes_technologies:adaptive_website_framework:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE068EB-D6B3-4222-8710-F4A0949C9BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liquid_bytes_technologies:adaptive_website_framework:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D3ED9E-98FF-4D11-AAB2-F00A7E5F1AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liquid_bytes_technologies:adaptive_website_framework:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72D1A2A-6A50-4AA2-BC1E-EED9A6588573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.awf-cms.org/news.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.awf-cms.org/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to obtain the full path of the application via an invalid mode parameter to community.html, which leaks the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:liquid_bytes_technologies:adaptive_website_framework:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74DAD-E978-4797-98A8-64A9874DEE39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:liquid_bytes_technologies:adaptive_website_framework:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE068EB-D6B3-4222-8710-F4A0949C9BDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:liquid_bytes_technologies:adaptive_website_framework:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D3ED9E-98FF-4D11-AAB2-F00A7E5F1AE4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:liquid_bytes_technologies:adaptive_website_framework:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72D1A2A-6A50-4AA2-BC1E-EED9A6588573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.awf-cms.org/news.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.awf-cms.org/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s parameter to faq.asp and (2) searchQuery parameter to search.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allinta:allinta:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.2",
            "matchCriteriaId" : "7E156114-3531-4C7A-80BE-A1E9B683082C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/allinta-23x-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18060",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/allinta-23x-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the change parameter.  NOTE: it is possible that this is resultant from CVE-2005-4376."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:box_uk:amaxus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3",
            "matchCriteriaId" : "23F63EEA-9598-46DB-BF7F-E79B15B373F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/amaxus-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/amaxus-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Amaxus 3 and earlier allows remote attackers to access arbitrary files via \"..\" sequences in the change parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:box_uk:amaxus:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1968280D-DC41-4931-B4EB-838A80240FD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/amaxus-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/amaxus-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) PageID and (2) SiteNodeID parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nma:baseline_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.95",
            "matchCriteriaId" : "EDCEB4C7-E0CD-4B63-A0DB-6D212D9D5EA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nma:baseline_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.95",
            "matchCriteriaId" : "EDCEB4C7-E0CD-4B63-A0DB-6D212D9D5EA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to inject arbitrary web script or HTML via the (1) sort_mode parameter to (a) fisheye/list_galleries.php, (b) messages/message_box.php, and (c) users/my.php; the (2) post_id parameter to (d) blogs/view_post.php; the (3) blog_id parameter to (e) blogs/view.php; and the (4) search field to (f) users/my_groups.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A31BF87D-6D73-442A-9C6C-7926A2A3E8BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.1.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C0A41-841E-48B2-88D3-B94A43F56D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/bitweaver-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bitweaver.org/forums/viewtopic.php?t=1299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/bitweaver-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bitweaver.org/forums/viewtopic.php?t=1299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL commands via the (1) sort_mode parameter to (a) fisheye/list_galleries.php, (b) messages/message_box.php, and (c) users/my.php; the (2) post_id parameter to (d) blogs/view_post.php; and the (3) blog_id parameter to (e) blogs/view.php, which are not properly cleansed by the convert_sortmode function in kernel/BitDb.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A31BF87D-6D73-442A-9C6C-7926A2A3E8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.1.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C0A41-841E-48B2-88D3-B94A43F56D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/bitweaver-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bitweaver.org/forums/viewtopic.php?t=1299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2975",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/bitweaver-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bitweaver.org/forums/viewtopic.php?t=1299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fileDN and (2) folderviewer_attrs parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caravel_cms:caravel_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0_beta_1",
            "matchCriteriaId" : "C81F4262-76DE-41EF-909F-624813DBD150"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/caravel-cms-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/caravel-cms-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL commands via the (1) nodeID, (2) pageID, (3) ID, and (4) parentid parameter to index.cfm; and (5) documentFormatId parameter to document/docWindow.cfm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citysoft:community_enterprise:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F52FE4C-B756-4FEE-BF88-25AB3B0F05F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18145/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18145/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote attackers to inject arbitrary web script or HTML via the (1) presentationSite, (2) docPublishYear, (3) docDescription, (4) publishState, (5) docAuthor, (6) docTitle, (7) subTopic, (8) topic, (9) topicRadio, (10) topicOnly, (11) startrow, and (12) sortby parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citysoft:community_enterprise:4.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B2D0DA-340E-4C1A-AF3D-61BD4C9B9C8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow.cfm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citysoft:community_enterprise:4.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B2D0DA-340E-4C1A-AF3D-61BD4C9B9C8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FACC367-4973-4024-B7D8-EC422C9A65C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cofax:cofax:1.9.9d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE428D53-0420-4CA6-ABFE-EDA43D3FF09A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cofax:cofax:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CDE451-A755-4EF4-A093-2FAC89098061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cofax:cofax:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DE6970-3FAE-423B-8ABC-DB87B26FCCD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cofax:cofax:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE2E91D0-D08B-4B56-BBE6-94F8E72B33CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/cofax-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/cofax-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Colony CMS 2.75 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:colony:colony_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.75",
            "matchCriteriaId" : "40A66EC5-0AD7-4579-9134-71BC18A6C1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:colony:colony_e-commerce_cms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5FF9F8-DB33-468B-923B-40F5F9F584FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:colony:colony_enterprise_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA191439-E5AD-4EC1-8643-F7D2BA09DF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:colony:colony_government_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0214DF-60D0-42E0-959F-0BEFCC678333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/colony-cms-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/colony-cms-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in home.php in contenite 0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contenite:contenite:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B45F73-DA60-4967-8699-A4D1234D4E75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/contenite-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/contenite-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.cfm in CONTENS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the near parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contens:contens:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6221DA1-529E-4239-BF03-5C63D09E3071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contens:contens:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7D2085-A347-499E-ABC1-2DFC1CF79A76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "search.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via invalid (1) submit.y, (2) bool, (3) itemsperpage, (4) submit, (5) submit.x, (6) criteria, (7) advanced, and (8) intern parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contens:contens:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6221DA1-529E-4239-BF03-5C63D09E3071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contens:contens:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7D2085-A347-499E-ABC1-2DFC1CF79A76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the StoryID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en index.php en ContentServ 3.1 y anteriores permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro \"StoryID\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contentserv:contentserv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "F4E09101-5D75-4DCF-9C34-1AF9D85C4AFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/contentserv-31-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/contentserv-31-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in damoon allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en damoon permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante parámetros de búsqueda no especificados, posiblemente el parámetro \"q\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mindroute_software:damoon:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB3C611-AD6C-487E-BCF0-A30B93B8CD08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/damoon-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18118",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/damoon-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in printer_friendly.cfm in e-publish CMS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en printer_friendly.cfm en e-publish CMS 2.0 y anteriores permiten a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:e-publish:e-publish:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "974004E3-6DF4-4D07-A47C-CD9A49EAB3B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/e-publish-cms-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/e-publish-cms-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in show.cfm in e-publish CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) obcatid and (2) comid parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en show.cfm en e-publish CMS 2.0 y anteriores permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante lo parámetros (1) obcatid y (2) comid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-publish:e-publish:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "974004E3-6DF4-4D07-A47C-CD9A49EAB3B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/e-publish-cms-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/e-publish-cms-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in EPiX 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search query parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) EN EPiX 3.1.2 y anteriores permiten a atacantes remotos inyectar 'scritp' web o HTML de su elección mediante parámetros de consulta no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:formicary_ltd.:epix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.2",
            "matchCriteriaId" : "E52A2BAA-64FD-4FC0-A7AD-F45C470D6EC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/epix-search-query-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/epix-search-query-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in FarCry 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the criteria parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farcry:farcry:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47654C5A-AE13-4E9D-B63C-5006FE969CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farcry:farcry:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9448A9BA-C1AC-4246-ABC5-9F8EC2411702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farcry:farcry:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71852523-6C56-4621-94A2-72C27A382133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farcry:farcry:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E09E9D9-D71A-4088-9C9A-E0B0B13BE9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farcry:farcry:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B02E94-DA3A-47C0-B954-AE6BFD64D410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/farcry-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/farcry-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via the LoginMSG parameter.  NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icms_content_management_systems:icms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60FE13BA-5632-4191-9A99-FB2C06ABCFC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18085",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the Event_ID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icms_content_management_systems:icms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60FE13BA-5632-4191-9A99-FB2C06ABCFC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18085",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOTE: the vendor has disputed this issue.  Cross-site scripting (XSS) vulnerability in lemoon 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter.  NOTE: the vendor has disputed this issue, saying \"Sites are built on top of ASP.NET and you use lemoon core objects to easily manage and render content. The XSS vuln. you are referring to exists in one of our public sites built on lemoon i.e. a custom made site (as all sites are). The problem exists in a UserControl that handles form input and is in no way related to the lemoon core product."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mindroute_software:lemoon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "4001E0F7-B31F-4486-A58C-E63317797FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/lemoon-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18119",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/lemoon-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search/index.php in Libertas Enterprise CMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page_search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libertas_solutions:libertas_enterprise_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "D77428D7-15EC-4B9F-B914-C707B536B3B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/libertas-enterprise-cms-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18117",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/libertas-enterprise-cms-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) _77_struts_action, (2) p_p_mode, and (3) p_p_state parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liferay:liferay_portal_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.1",
            "matchCriteriaId" : "A09A34EB-598D-4494-A64A-A3E58825CAC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/liferay-portal-enterprise-361-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18116",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/liferay-portal-enterprise-361-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Lutece 1.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lutece:lutece:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "21C6ECC8-ADA1-4760-8B44-EAFAC07B1287"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/lutece-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18114",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/lutece-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arbitrary code via a long IMAP EXAMINE command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "7D7F1033-3C99-4E4F-8068-910B23C0673F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.71",
            "matchCriteriaId" : "A9625752-74A8-417F-9125-C6BB2EC27E16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113502692010867&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Dec/1015378.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113502692010867&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Dec/1015378.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qcm:marwel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "11BDF177-EB04-4E1C-A3D9-8EAB030EC9A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/marwel-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18099",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/marwel-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter.  NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:media2_cms:media2_cms_shop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "18.2",
            "matchCriteriaId" : "B22FBBD4-1FCE-4FEC-AC4F-DA02F31DD231"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18079",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "redqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path via invalid (1) yellowpage_id, (2) skin_id, (3) supplier_id, and (4) module parameters, which leaks the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:random_mouse_software:red_queen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "441E0C57-6EB3-4BFE-991E-CD55D7458847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/red-queen-path-disclosure.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18072",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/red-queen-path-disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmc_visionpool:mercury_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "9CDE6B20-991A-4E5F-8A0A-EDFF75CBBFA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/mercury-cms-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/mercury-cms-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) content and (2) criteria parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmc_visionpool:mercury_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "9CDE6B20-991A-4E5F-8A0A-EDFF75CBBFA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/mercury-cms-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/mercury-cms-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) id parameter to newsitem.php, and (3) cat parameter to article.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pc_media:miraserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_rc4",
            "matchCriteriaId" : "39EF18EA-EEC1-44B9-987D-F2CAC493C641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/miraserver-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/miraserver-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MMBase 1.7.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066FD7CE-8472-4A1A-8766-B460D8EBBDDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7076AC8-C7EB-49DD-A0CB-DC0293A36DED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DD7BCF-60BD-4E82-90B3-563AF96FCB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524C9327-B787-4470-B701-67CC10469B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB75C3F1-CB67-4937-803E-CC337D17BADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40E338E-CB83-40F8-9E43-6FF15E7805E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "865A6411-846A-4B85-B8F8-21CF1BD7C895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1DFD79-E9F9-430A-80CC-0F34B97FF809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.7.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7FA8D2-4213-4418-BB45-FC96473285FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.7.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD0F3B8-3099-4EAA-91F2-A9CB9DDA0A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.7.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45401494-4287-43CD-B3DE-03A448B8D521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CDA290-C76B-4C44-9E53-735ECA7F64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2264499A-2C58-471F-9BBB-33C936B02522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D533CA-82F1-4210-941F-ECA34A7A67C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEEECE9-9B37-446F-B92C-80C76E82500C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mmbase:mmbase:1.7.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A49DA5-1B86-43C0-941B-59200408F157"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/mmbase-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/mmbase-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in NQcontent 3 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the text parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nqcontent:nqcontent:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21376549-9AE9-47A7-8C87-57B9503B7F71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/nqcontent-v3-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/nqcontent-v3-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_harris:mercury_mail_transport_system:4.01b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D901C261-D427-4906-BEE8-3B50C0082C0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015374",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Citrix Program Neighborhood client before 9.150 caches the user password in plaintext in the GUI while asterisks are used to visually obfuscate the password, which allows attackers with access to the session to obtain the password by using a tool to directly access the field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:program_neighborhood_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1",
            "matchCriteriaId" : "189820D6-2EA1-4359-BC9D-8CAF00660AD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015372",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX108108",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX108108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in sample scripts in IBM WebSphere Application Server 6 allow remote attackers to inject arbitrary web script or HTML via the (1) E-mail address field to (a) PlantsByWebSphere/login.jsp, (2) message field to (b) TechnologySample/BulletinBoard Script, (3) Email address field to (c) TechnologySamples/Subscription, and the (4) Movie Name, (5) Movie Reviewer, and (6) Movie Review fields to (d) TechnologySamples/MovieReview2_1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ipomonis.com/advisories/ibm_css.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ipomonis.com/advisories/ibm_css.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Teamwork 3 before alpha 1.7 has unknown impact and attack vectors, related to \"a menu security bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_lab:teamwork:alpha_1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5672A489-CDDA-4A4E-BE32-9AA58F9B604B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_lab:teamwork:alpha_1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A401DEE-C6A7-4332-9863-9BA8FA99CFDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_lab:teamwork:alpha_1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313E09A5-30E8-4C0C-84F9-D6A6EFE43E8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freshmeat.net/projects/teamwork/?branch_id=57178&release_id=214639",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21745",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://freshmeat.net/projects/teamwork/?branch_id=57178&release_id=214639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web script or HTML via the form parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tml:tml:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20A5014-752E-4233-A7E2-407CB19D8E85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0512-exploits/ztml.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15876",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0512-exploits/ztml.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tml:tml:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20A5014-752E-4233-A7E2-407CB19D8E85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0512-exploits/ztml.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15876",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0512-exploits/ztml.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication and Authorization values, which allows remote attackers to send arbitrary audio and possibly eavesdrop using the microphone via the Hands Free Audio Gateway and Headset profile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anycom:blue_usb-130-250_software:4.0.1.1500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C0CE64-E1E4-4C26-9C1C-05D1FBDBECC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:belkin:bluetooth_software:1.4.2_build_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5C16E6-CF79-4802-8772-094157A9522B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:widcomm:bluetooth_for_windows:4.0.1.1500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF12AAE-E68E-4E34-AC12-D45247BC5E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/419642/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419642/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) series, (2) cat_parent, (3) cat, and (4) div parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quicksquare_development:honeycomb_archive:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5290C7-8416-4BE4-8D3A-828EC2EAF03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quicksquare_development:honeycomb_archive_enterprise:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9FC204-C8BD-4104-8A83-F5F50003BC48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000580.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keyword parameter in search.cfm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quicksquare_development:honeycomb_archive_enterprise:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9FC204-C8BD-4104-8A83-F5F50003BC48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18127",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dev-Editor 3.0 allows remote attackers to access any directory outside the web root whose name is a substring of the web root directory name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev-editor:dev-editor:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E2CA25-80F7-43B8-8E80-B56020EEAD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev-editor:dev-editor:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28535FDA-8439-442B-B1FC-35F3A4318874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev-editor:dev-editor:2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF98D2B-9CBC-4BA2-8FA8-C984CCBEEB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev-editor:dev-editor:2.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2887E1-DD09-4161-B372-469099CA69E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev-editor:dev-editor:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A655A5-C5D3-4F0E-9852-D7580FD6EC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev-editor:dev-editor:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B477DCCE-87A9-4F5C-9F8D-9A6C89022EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev-editor:dev-editor:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D5E7561-CE2F-4B11-A7E4-66B5EE27E318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev-editor:dev-editor:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C98097B-6FA6-48A2-A7B2-8EC99393AC83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://devedit.sourceforge.net/changelog.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17537/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15393",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://devedit.sourceforge.net/changelog.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17537/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in data/images/albums."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6C4C75-D481-4B53-B94B-C92B8EFCC4F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17471",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415975",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15351",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.toenda.com/de/data/files/Software/toendaCMS_Version_0.6.0_Stable/toendaCMS_0.6.2.1_Stable.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.toenda.com/de/data/files/Software/toendaCMS_Version_0.6.0_Stable/toendaCMS_0.6.2.1_Stable.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in PHPFM before 0.2.3 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to an accessible directory, as demonstrated using a file with a .php extension, aka \"upload phpshell.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpfm:phpfm:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC60DB8-F5D7-4D98-9270-146B153701B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00085.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15335",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the path parameter and a %00 at the end of the filename, as demonstrated by an avatar filename ending with .png%00."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C962F520-4E73-459D-8C5C-9E85426D9B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:1.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F42F08A7-AF6B-4642-8172-6B4C564FBCB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:1.6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C5DDE2-0978-41D2-BCCF-A70BC6CE841A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:1.6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD305C66-3B8B-468E-945A-DFEE09E6FB8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17479",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.80.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_212005.80.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service (crash) via certain RTSP streams."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563E83E1-74C0-4312-A5C5-0223ADE55F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE079B94-A8C6-41E7-98B1-29A4DE4F66EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AC89E5-8B9C-4C6B-8976-6A4A6F922858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99A154-D3C6-4B1C-BEC9-7D1AEAFCAC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADAAD5F-3286-464E-A309-9454EE9A663F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1437DE-E19A-4C2C-9077-DB1FF48772C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0089BE-856D-4998-BBFE-1F626A43377E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE81F49-05CE-4987-90C0-B6D077B65DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650E19BC-6545-45E9-BE2B-0900323C80C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173804A3-04EE-484B-A0CF-8DFFE060EFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9DC6F1-3DB7-48B3-8202-66450B95C0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D06E900-7F9A-4BF0-8411-718AEBFCF8AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A07C4B-8A49-4126-A957-B16B5A79582B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFD255-A906-4902-9845-C33669CF9795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17519",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15387",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Interpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-3312. NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in YaBB."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45990B7-1AA5-450C-86B6-33653F332B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183071C9-0D08-4A9C-8566-2F9E81742F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1_gold_-_sp_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE218CB1-11EE-4DE2-A556-8F3F9F624D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517253F6-2875-4D01-9F6D-903AFBD7B06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29C236ED-4AD6-427F-B077-0E918FC47986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D28B213-1BC7-4FB1-84B1-31A5EB87F886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962801EC-7330-47F9-9740-BC0A236F8954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12D6447-3AFB-4F1F-A64B-76DB809C3720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1_gold_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B543E73-5055-4233-9A4B-BDD53C386CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A202178F-3791-42EB-A530-3EC02B2A15CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BC5B30-B6D7-4694-9DFB-7F96528C5855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0607CB0-EACE-40A8-9992-E645084C2B9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15368",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.yabbforum.com/downloads.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.yabbforum.com/downloads.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:2.649:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F006DC-5E90-48D8-BCE6-972D36068DEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.cerberusweb.com/showthread.php?s=&postid=30315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113500878630130&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18112",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420271/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.cerberusweb.com/showthread.php?s=&postid=30315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113500878630130&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420271/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-20T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kb_ask parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:2.649:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F006DC-5E90-48D8-BCE6-972D36068DEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113500878630130&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18112",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420271/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113500878630130&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420271/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.5.5",
            "matchCriteriaId" : "64605C37-5FF4-4926-84BD-39041A01780B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndExcluding" : "6.3.1",
            "matchCriteriaId" : "54D97A80-767B-4B3E-B908-52A595AA0FA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=343836",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17891",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18172",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18231",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18266",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18433",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18895",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24007",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24284",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015383",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-939",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_4_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/21906",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420098/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435197/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15987",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2996",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:236",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23713",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9659",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/233-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=343836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/17891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_4_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/21906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420098/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435197/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/233-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The Red Hat Security Response Team has rated this issue as having low security impact.  An update is available for Red Hat Enterprise Linux 4 to correct this issue:\nhttp://rhn.redhat.com/errata/RHSA-2007-0018.html\n\nThis issue did not affect Red Hat Enterprise Linux 2.1 and 3.",
        "lastModified" : "2007-01-31T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_by and (2) sort_order parameters to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA28C65-C87E-47B9-AEB2-A2007851A2DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000450.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/cs-cart-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21370",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000450.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/cs-cart-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) __mode and (2) __id parameters to helpdesk.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:logicnow:logicbill:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "911E6DFB-EA91-4D7F-BBFE-2A21606D1AF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/logicbill-10-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21368",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/logicbill-10-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in WowBB 1.65 allows remote attackers to execute arbitrary SQL commands via the q parameter to search.php. NOTE: the view_user.php/sort_by vector is already covered by CVE-2005-1554 and CVE-2004-2181."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowbb:wowbb:1.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE24488A-AC13-44C3-B503-5ACA900C8C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/wowbb-165-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21441",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21442",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/wowbb-165-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTML via the err parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playsms:playsms:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC6F7323-B195-4F5D-9116-657CB8428AE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113478814326427&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113970096305873&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18148",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113478814326427&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113970096305873&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Search field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esselbach_internet_solutions:esselbach_storyteller_cms:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1BC178-B9E8-497C-86CA-BFAC45E41B2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/esselbach-storyteller-cms-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18130",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/esselbach-storyteller-cms-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abledesign:abledesign:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13115EB-CCB0-450B-A98B-340B8464E8A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18122",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abledesign:d-man:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAAA64E0-D74F-441D-B361-DD0FEC1E180C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18074",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15993",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2), 12.3(3)B, and 12.3(2)T and other products, allows remote attackers to cause a denial of service by sending a \"spoofed neighbor announcement\" with (1) mismatched k values or (2) \"goodbye message\" Type-Length-Value (TLV)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:extended_interior_gateway_routing_protocol:extended_interior_gateway_routing_protocol:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E7830C-3505-41C5-B073-D2F73261CE17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113504451523186&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419898/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113504451523186&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419898/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:extended_interior_gateway_routing_protocol:extended_interior_gateway_routing_protocol:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E7830C-3505-41C5-B073-D2F73261CE17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040332.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113504451523186&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419830/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419898/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113504451523186&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419830/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419898/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Dec2Rar.dll 3.2.14.3, as distributed in the Symantec Antivirus Library and used by various Symantec products, allows remote attackers to execute arbitrary code via RAR archives with sub-block headers that contain incorrect values in the length field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dec2rar.dll:dec2rar.dll:3.2.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE46410-DDEE-48DF-BD25-C77902E62608"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/305272",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.rem0te.com/public/images/symc2.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419853/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/305272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.rem0te.com/public/images/symc2.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419853/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a URL with a long (1) cmd or (2) mode parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elog:elogd:2.6.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39A9AA4-18C5-4D37-9BEC-63FA87B49F31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113498708213563&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18124",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113498708213563&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via a message with two 802.1q tags, which causes the second tag to be redirected from a downstream switch after the first tag has been stripped, as demonstrated by Yersinia, aka \"double-tagging VLAN jumping attack.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vlan_protocol:vlan_protocol:802.1q:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E850DCCD-875D-4B7F-B543-F58559E83D8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040333.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419834/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419834/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PVLAN protocol allows remote attackers to bypass network segmentation and spoof PVLAN traffic via a PVLAN message with a target MAC address that is set to a gateway router, which causes the packet to be sent to the router, where the source MAC is modified, aka \"Modification of the MAC spoofing PVLAN jumping attack,\" as demonstrated by pvlan.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pvlan_protocol:pvlan_protocol:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638B4892-CFA6-48AF-87C6-05036F96D19E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040333.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419834/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419834/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.28_r2",
            "matchCriteriaId" : "09146840-8A3C-4686-B8F8-2592EA9C5989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149EBFB7-B58F-4557-8E46-6DF88BB5E57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D75A36-41C4-464F-8DC4-42C841ABC087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C3EE919-D05C-4625-85FE-132F6F2B932C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D99A58-8D7E-4586-A9BF-1DD2A1DBB8D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEBA0118-545E-4D7B-B819-34D157B2BA6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67826609-F4CA-42CB-A5D0-B4503DDE2C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61676BBD-95B8-44C9-BD66-79F00381BF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719A9B1D-8E32-461F-BCD4-F72C6AD3E63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD73969-39F8-4849-AF6A-15ACDC2E4537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8C1DD2-865A-4CF2-8137-3C40C01C9EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE38B045-2224-43D1-8618-0885505865C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D26DAC5-EDBD-42D8-A877-1E6EA666D72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B0A2B6-C560-4AE0-BC79-3C7BC9163EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566406CE-368A-4799-A112-E5DFC5B333D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CCC734-C15B-4D2B-BF83-F214F807C44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64796893-A90D-4B7D-BDBC-0087B57AF7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39914C6A-F4DB-43CC-B2B6-097365E55D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFDD8F7-AAFD-453F-99A4-F9C0424EA791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFEEAA6-0B50-4644-A183-F5FEE7BD7EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920FC1DB-95E2-4367-BF20-77D75BD7617D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E643F8-005A-4170-8275-8E4AB5C25209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A34C63-C17D-4026-B409-AA9A56529B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA863B0-A6AB-44BD-84E8-B6C885EFFE10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BFAEC7-6256-4B8F-83F5-60FBD1571936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83227371-ACC3-4217-BFF9-0A3AAADD50DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734B8101-BEAC-40AB-81EA-2516CA20BC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BD5253-FBC9-4384-8FC3-4E384582BE91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA73658A-8834-4EC2-8D8F-3A7D1C834669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BCE98E-546C-4852-BAE2-CF525A778B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94284C78-255E-43B7-A33E-FBC25BABEA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B298BAA-5584-4193-A3DB-31FBB0BD12B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90604A40-A1F5-4F23-9B8C-472E8C794B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1418EC80-2F42-4C1B-BA38-CA5BDEF83F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC65FE9-348D-4468-A1EF-2AC5C673DB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A400A0-B9D7-4CB2-82EA-49A599C2B30B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65587514-46AB-4D70-B7C2-FBED7F78D13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7951BAAB-CB06-4F19-891A-E07E2B3C8701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC30A1-4150-44DC-89F7-5A64B8CC4A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF04D97-A561-427B-9891-A1423B86F164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E74B0C8-2D64-4BF2-B152-87909E3029EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F6CA0B-ED91-4085-8EE0-1F4256747621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90657E7-D651-4E1E-8035-13A1F024E3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BBE5477-BE27-412A-9BA9-9690F746B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31300FA3-C57D-4564-927E-B06C0229BE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342E414D-8ED6-4E5A-88F0-57B5846A3EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0BD0FD-BD80-4197-8479-BBB070DAB890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9CA4EF-61F1-407B-B2BF-B4AFD68F50BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB80C814-5B28-46CC-8237-70A558BF049C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832AC063-6004-4A78-A964-45906361F9C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C40DFD-4FB8-40AA-ABA4-194DED1241A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992733F2-000F-4E27-8D19-AF18543E57BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36E0E49-D908-4A19-A621-6E7FB3E59A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74779CA2-6741-4053-8C23-98A1F938B264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930DAA18-113F-42B0-8382-8579575D238F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F50353-EBFB-4DE5-8D35-80C672A12E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4F43F-8E4F-4203-B640-02BBB28052A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28063C54-EE5E-44EC-8D47-E880C2BB45BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F611094-500A-4306-8C15-4878135FA45D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32096DE5-3F2C-4FF7-BDC6-E316DFDC97A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE197F27-CB34-4B0E-A30A-C9C87295AAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A4256F-EC89-425F-86FD-B0DE243EBF2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A34127E-507D-4F72-9F93-B23F91DB0F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A2D5D9-3E7E-4420-A338-B05A8C077229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76EF100-3328-4C70-A123-50A4ECFF539E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCE7803-E652-4A17-8EEB-B91C81CF48E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5CB439-5F0B-40CF-8564-6875CAC74FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5E524E-1B71-46B5-A14E-C2342851C0FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE103338-9AE7-4230-A8B2-09273004B4D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12621DED-ABF1-47A7-961C-E6DE1F6302AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8026929-4845-46E4-A6F8-E60CA498201B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE01BD68-D6DC-4220-A3F0-71961CEA205F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68DE3F16-E171-4FA3-9B00-3F944A4E7604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63F7B718-0E5C-4900-A5DE-D59D37EC79D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8805A0-F543-450D-82E9-EE923904E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58779045-578C-41D5-9CAE-D6F48C91654C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969F18EF-067A-47BA-9DC4-9FA69D9DCBB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12766AB-2AFE-4BBD-8B80-8BEA932ABDFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2C7514-8BB4-4B8A-A5AF-D4A26B232597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64C0AB94-ED91-4218-8F97-862BA57D1CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FF5C05-0A64-416C-8346-EE5FF4AA14F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C081128-2846-4257-B822-10AADE54899D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18040/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18040/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of OpenLDAP as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Gauche before 0.8.6-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gauche:gauche:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "118B2020-A741-47CC-B996-973EE052B0FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gauche:gauche:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099CF594-6D26-4475-9940-0822B8AA87A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gauche:gauche:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92AA609-E1A6-49FD-AED8-588D26A53994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gauche:gauche:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892A222E-2923-40D4-B7E5-F60D43A86487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gauche:gauche:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28006D0A-90A9-4B63-9145-5A0D1FB84B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gauche:gauche:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE9C91E-D3FB-4112-BB80-6494E0EBACD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18040/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18040/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the trace message functionality in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allow remote attackers to execute arbitrary code via a long POP3 reply."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_harris:pegasus_mail:4.21a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5611CE4D-767B-4047-AC4D-D2C97B56F6A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_harris:pegasus_mail:4.21b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE94D03-450A-4AD6-8862-67955AF70CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_harris:pegasus_mail:4.21c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6124BD9-3FF2-4253-813A-59A969F1B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_harris:pegasus_mail:4.30pb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB3084A-BA53-42EF-B9A5-F11D3EF55AAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17992",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-61/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pmail.com/newsflash.htm#secunia",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419908/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-61/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pmail.com/newsflash.htm#secunia",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419908/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allows remote attackers to execute arbitrary code via a long email message header, which triggers a one-byte buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_harris:pegasus_mail:4.21a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5611CE4D-767B-4047-AC4D-D2C97B56F6A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_harris:pegasus_mail:4.21b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE94D03-450A-4AD6-8862-67955AF70CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_harris:pegasus_mail:4.21c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6124BD9-3FF2-4253-813A-59A969F1B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_harris:pegasus_mail:4.30pb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB3084A-BA53-42EF-B9A5-F11D3EF55AAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17992",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-61/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pmail.com/newsflash.htm#secunia",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419908/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-61/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pmail.com/newsflash.htm#secunia",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419908/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.asp in ASPBite 8.x allows remote attackers to inject arbitrary web script or HTML via the strSearch parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbite:aspbite:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75EDD39-27E2-4701-9F86-2D89AEB72BA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18132",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in articles\\articles_funcs.php in phpCOIN 1.2.2 allows remote attackers to modify SQL syntax and possibly execute SQL in limited circumstances via the rec_next parameter. NOTE: the original disclosure suggests that command injection is not feasible because the injection occurs after an \"ORDER BY\" clause, but it is likely that this bug could result in an error message path disclosure due to a syntax error, in some environments.  Therefore this is an exposure and should be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D9693E-D179-414E-AA4B-50C27E4C4EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/419637/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419637/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to restrict access to required domains, which allows remote attackers to create or append to arbitrary files via the StartLog and AddLog methods in the MCINSTALL.McLog object."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:mcinsctl.dll:4.0.0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B45B1F-5624-4B1E-8C7F-24F05437C521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_security_center:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FABAFF-9E4D-4093-83AB-A68D31FC8673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_security_center:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A41649-7CA4-456C-9D26-AF8CA7AC1737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_security_center:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5AF02-737D-45B6-9287-840E901AB9C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_security_center:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC42959-5772-4500-AB00-0FD4DE4C367B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_security_center:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14412B8-3A19-4888-9402-875B15BB688C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_security_center:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18233BDF-9E72-4C77-93F8-53D61254FB4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_security_center:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEEDCBC0-9F8E-42E1-9410-1FD285E6BF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_security_center:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8195D6-F9D1-467A-BEDB-770C1179AB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_security_center:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E121CCD-A765-450A-B313-75A0C1FB4CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_security_center:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EEEC53-E69C-4B17-B9AD-9DA7840761BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_security_center:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE82552-B631-4AB3-9A06-7267CF32042E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=358",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a \"}\" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7) SELECT, and (8) COPY commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualcomm:worldmail:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB42980C-1AC7-42C2-8A7C-699FBC6EC49E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Dec/1037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17640",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=359",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15980",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Dec/1037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash (possibly via CVE-2005-2813), then calculating the credentials and including them in the secid cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015339",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419107",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15796",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting the code into the body parameter.  NOTE: if a FlatNuke administrator is normally assumed to be able to modify arbitrary content, then this issue does not cross privilege boundaries and would not be a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015339",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419107",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to server_privileges.php, as demonstrated using the dbname and checkprivs parameters.  NOTE: the provenance of this issue is unknown, although third parties imply that it is related to the disclosure of CVE-2005-4349, which was labeled as SQL injection but disputed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25A359B-8FFD-4941-9419-4E99373D9588"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18113",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to gain access via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-005.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419897/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419897/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-005.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419897/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419897/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:information_call_center:information_call_center:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A246E65-CD29-4822-AEAF-6D7E715BD853"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18159",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to UserProfile.aspx, then modifying the password field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultraapps:ultraapps_issue_manager:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D59D55-BDDF-4C22-A139-65716F0060A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.irmplc.com/advisory013.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419910/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15976",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.irmplc.com/advisory013.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419910/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss option is enabled, allows remote attackers to conduct cross-site scripting (XSS) attacks via a \"\\\" (backslash) within a \"javascript\" scheme in a style property (such as \"javas\\cript\"), which bypasses the \"javascript\" check before the \"\\\" is stripped and then rendered in web browsers that allow scripting in style sheets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:livejournal:livejournal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3EEE8D-BFBD-4DFF-B540-993E62093381"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113504421421972&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18157",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113504421421972&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:livejournal:livejournal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3EEE8D-BFBD-4DFF-B540-993E62093381"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18157",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) LIST, (2) LSUB, and (3) UID FETCH commands.  NOTE: it is possible that these are alternate vectors for the issue described in CVE-2005-4402."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45540A37-2CBF-453F-8EFF-696B9318499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A9222A-6F22-40BD-8411-69A90E8E46AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15985",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via several \"...\" (triple dot) sequences in a UID FETCH command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45540A37-2CBF-453F-8EFF-696B9318499F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER global variables when performing checks for special privileges, which allows users to gain administrator privileges by adding themselves to the SITE_MGR group."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD7614E-A0ED-417E-ACE0-659F4139D4ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4AE88C-3416-4EFA-A8F5-B1E8CC4B30CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFC7D26-0919-4821-A8FF-7CFA16FA4355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCDFCC2-7E27-407A-A0F5-CE7732508F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7087EBB9-C43E-4C6C-921A-F558C0BD8858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4671B391-6A50-45F0-B8A0-C03E141FE60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFC3F9E-0929-4A11-8922-67FBEDF25363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6FB02B0-D2F7-4722-86DC-A2491DCD5698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED55B5DE-16A7-4E1E-B5F9-55D00E1872EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.6.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32971B70-EBBA-45A2-BF7A-48868F7577AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.6.5.4b5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D44750A2-C92D-4C16-9AF6-5492E9714409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:5.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86328838-92D4-4383-9F2B-69A17F51CBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE65852-502F-481F-BA54-E984EC9E3356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403B353-20A1-4CF5-90E6-B1D0745F91A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD0E637-AA77-4D5C-B449-D17136245752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDFF2D5-6125-44BB-BA94-42B5AD84D7AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadot:metadot_portal_server:6.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46A58B85-25E8-4B3F-8895-0DA2BB4E2809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.metadot.com/metadot/index.pl?iid=2632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420002/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15975",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.metadot.com/metadot/index.pl?iid=2632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420002/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CC5F49-0E9E-45D8-827D-A5940566DB25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D94EE19-6CE9-4E02-8174-D9954CDBF02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:gsx_server:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E4BEE3-AE7B-4481-B724-2E644E18ACC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:gsx_server:2.5.1_build_5336:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAAB7052-E0B6-472E-920B-A0F0AEA25D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:gsx_server:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4088851B-C42B-4B3C-B548-68A026C2BC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:gsx_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1E0FF6-89A3-4530-A6B5-D9951C951209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:gsx_server:3.0_build_7592:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE38F15-BD42-4171-8670-86AA8169A60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:gsx_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944FE3AE-C500-4891-BC05-3F1E3417FF68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:gsx_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111932A6-B0ED-4A79-A533-AEA984DB6A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E76D03A3-DB55-48A2-B5A5-64002D28B95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1A275E-2152-4A37-8CFE-34E8900E3426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A688A2-3E9C-4AA3-832B-300A5A311C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89098CFF-4696-4BD9-9BC9-D7C2D92FE729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30DFFE7-EB73-4A88-A23B-9B386C091314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6C230D-7BAA-4A77-9E96-B1B994F4AAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0FE7C5-2C46-4B59-9242-A03B986C07DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.5.2_build_8848:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "0C605123-69F9-44AC-A17E-3C728059E628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.0.0_build_13124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B54C61-FB19-4900-A635-2F6B63BEC88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18162",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18344",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/856689",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419997/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420017/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15998",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3013",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/856689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419997/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420017/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Description, and (3) Comment fields to (a) links.php and (b) links_add.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C479F7-639D-4C3D-9449-E94426C3B1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD1988-4C10-4F78-A84A-AAFCB1DFFB6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8FB1E8-E4E3-4C72-9012-72D60E5C3B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB948F88-6C9F-44B6-850F-9F6B02738A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400EACD2-95CE-404E-B8F8-21A92A6D7817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6071EAB1-B425-43D7-ACDE-009972279603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D73944F-A924-4801-A819-730AB165171C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B59256-123E-4EEF-AB9D-665C47989A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4543096-BA8B-41A0-B0F5-CE92A063898E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E19DFA-F5D4-4D64-8B5D-65E10B7E1698"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T20:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_sess parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C479F7-639D-4C3D-9449-E94426C3B1C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD1988-4C10-4F78-A84A-AAFCB1DFFB6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8FB1E8-E4E3-4C72-9012-72D60E5C3B49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB948F88-6C9F-44B6-850F-9F6B02738A8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400EACD2-95CE-404E-B8F8-21A92A6D7817"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6071EAB1-B425-43D7-ACDE-009972279603"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D73944F-A924-4801-A819-730AB165171C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B59256-123E-4EEF-AB9D-665C47989A25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4543096-BA8B-41A0-B0F5-CE92A063898E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E19DFA-F5D4-4D64-8B5D-65E10B7E1698"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-158.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kapda.ir/advisory-158.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execute arbitrary code via a URL in the ROOT parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tolva:tolva:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E36A9A-C375-4FD2-8CBA-82169956B256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419992/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16000",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419992/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-21T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to (1) wp-includes/vars.php, (2) wp-content/plugins/hello.php, (3) wp-admin/upgrade-functions.php, (4) wp-admin/edit-form.php, (5) wp-settings.php, and (6) wp-admin/edit-form-comment.php, which leaks the path in an error message related to undefined functions or failed includes.  NOTE: the wp-admin/menu-header.php vector is already covered by CVE-2005-2110. NOTE: the vars.php, edit-form.php, wp-settings.php, and edit-form-comment.php vectors were also reported to affect WordPress 2.0.1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7BEFBD-4326-44A5-A160-9406D94AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85A88D7-07A1-4A8C-88B5-057AD9C675E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0B6EAC-E43D-4D1B-856F-7C23250A2355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4671A-8449-438E-922B-94E5542137BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://NeoSecurityTeam.net/advisories/Advisory-17.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv24-theday-2005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419994/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419999/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426304/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://NeoSecurityTeam.net/advisories/Advisory-17.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://echo.or.id/adv/adv24-theday-2005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419994/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419999/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426304/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service (kernel deadlock) by sending a SYN packet for a TCP stream, which requires an RST packet in response."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.3",
            "matchCriteriaId" : "54A62177-AABD-4770-A51F-6C30F7D90AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367F6F04-0E45-4EED-AB36-D8D1E993D29B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8229DE3A-B9CB-44FF-8409-51E09DDED479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2699E7A6-7B3A-4C4C-9472-B8B6B547624D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E88A46-CEC7-46D5-9697-232E18531FD5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ingate:siparator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.3",
            "matchCriteriaId" : "DA371916-6FC8-4CF9-8A9F-0B079A33E70D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ingate:siparator:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A3E34-3BCF-4FE7-A984-D83BCFE139F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18138",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ingate.com/relnote-434.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ingate.com/relnote-434.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in NEC UNIVERGE IX1000, IX2000, and IX3000 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix1010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A52B82D-F699-4872-BD5F-90042C259349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix1011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FE55F5-B953-4BC1-899F-4F54C133AAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix1020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4ACA7-04A8-4897-9BA6-A08840E0FECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix1050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7323D35-0227-426C-88DC-ECE1BFCE170F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC021A2-8C11-4961-9EAE-7233BA6CC73B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0228DF8E-A36E-4F57-B102-C7875464078D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479AF857-7720-4FA9-9F86-FA32D9F28783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix2010:*:bri:*:*:*:*:*",
            "matchCriteriaId" : "41EB3B04-4FB5-4B48-B997-5B343682A21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix2010:*:hub:*:*:*:*:*",
            "matchCriteriaId" : "9E13CA8C-6724-48EF-92C0-0CDFC6F7A7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix2015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF54152-1E78-44DB-916C-AF3762A66A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix2015:*:sip:*:*:*:*:*",
            "matchCriteriaId" : "F039DD2B-6A58-4572-82B7-6FC7BBD95059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nec:univerge:ix3010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89F6D127-E615-484E-8888-5B067C3B5DA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18166",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sw.nec.co.jp/ixseries/ix1k2k/Support/CERT/NISCC273756.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sw.nec.co.jp/ixseries/ix1k2k/Support/CERT/NISCC273756.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a REGISTER request with a SPI version number that contains a large number of space or tab characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interactive_intelligence:interaction_sip_proxy:3.0.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0223A8-10DA-4584-8FE1-CF97B0719053"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18197",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hat-squad.com/en/000171.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16001",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hat-squad.com/en/000171.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the PGV_BASE_DIRECTORY parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A9CE2D-8079-4E71-A049-493A7A72C9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA13EED-7C5F-4F5E-AEC2-D5DA0206B238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE53F2DA-37A7-482C-81BE-8D2D12489462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.61.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B164FD-C465-4C3D-B929-3A5B18D8897B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A0E38B-C9E3-4619-B1A1-94C11546D6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4C6AC9-0DBB-42AE-BDAE-48CDA55913E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E75ABEB-BAF8-471B-B360-2E82C0B0EDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8875F438-0D55-4530-A8B1-0499DE9A43AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:3.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45181D0F-5169-44DC-BEA7-242651B68175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/help_text_vars.php?r1=1.63&r2=1.64",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpgedview_337_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18177",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419906/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15983",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/help_text_vars.php?r1=1.63&r2=1.64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rgod.altervista.org/phpgedview_337_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419906/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to execute arbitrary code via a URL in the PGV_BASE_DIRECTORY parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.7",
            "matchCriteriaId" : "AED43D4D-7487-499F-B870-E1E76E505E0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A9CE2D-8079-4E71-A049-493A7A72C9A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA13EED-7C5F-4F5E-AEC2-D5DA0206B238"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE53F2DA-37A7-482C-81BE-8D2D12489462"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.61.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B164FD-C465-4C3D-B929-3A5B18D8897B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A0E38B-C9E3-4619-B1A1-94C11546D6DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4C6AC9-0DBB-42AE-BDAE-48CDA55913E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E75ABEB-BAF8-471B-B360-2E82C0B0EDE8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8875F438-0D55-4530-A8B1-0499DE9A43AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/help_text_vars.php?r1=1.63&r2=1.64",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rgod.altervista.org/phpgedview_337_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18177",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419906/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15983",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/help_text_vars.php?r1=1.63&r2=1.64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rgod.altervista.org/phpgedview_337_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419906/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code via (1) the username field in login.php, or the (2) user_language, (3) user_email, and (4) user_gedcomid parameters in login_register.php, which is directly inserted into authenticate.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.7",
            "matchCriteriaId" : "AED43D4D-7487-499F-B870-E1E76E505E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A9CE2D-8079-4E71-A049-493A7A72C9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA13EED-7C5F-4F5E-AEC2-D5DA0206B238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE53F2DA-37A7-482C-81BE-8D2D12489462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.61.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B164FD-C465-4C3D-B929-3A5B18D8897B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A0E38B-C9E3-4619-B1A1-94C11546D6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4C6AC9-0DBB-42AE-BDAE-48CDA55913E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E75ABEB-BAF8-471B-B360-2E82C0B0EDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgedview:phpgedview:2.65_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8875F438-0D55-4530-A8B1-0499DE9A43AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.35&r2=1.71.2.36",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.36&r2=1.71.2.37",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rgod.altervista.org/phpgedview_337_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18177",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419906/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15983",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.35&r2=1.71.2.36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.36&r2=1.71.2.37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rgod.altervista.org/phpgedview_337_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419906/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.40_pre",
            "matchCriteriaId" : "207DC21E-8556-4B9A-B6C0-4906BB24E229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE27BA8-4627-48AE-8982-997C4C37DE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12ACC08-3A4C-409A-88AC-772C0B91DDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EB876E-523F-4AF7-9444-FDC9138E07C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23F8C9A-CF89-41A9-8A38-3F8E9BB67F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000B8F7F-E868-4B81-8D23-6D62C2C9E4BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8AABD7E-2623-460A-83CC-16A3719B349D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.28a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6ED671F-87B4-459B-B315-9ADE5595525E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.28c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F647D7-C492-4323-8AE6-09D570772BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A001CB-A09E-439E-8AA9-E58B66D5DF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.31a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235CC1D0-AB62-408A-82A0-009940828327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E948B8-1AEB-4333-B24D-BA7574A0EEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0CB8A1-1596-44DD-9F03-82806E249615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.33a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53DC3942-0166-4A52-9F2D-F06E3729FAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EE6DC1-54D1-4F74-8549-0FE1174DD495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC12496F-A606-4AA2-BC4B-A0E853604F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30E5984-E20C-4A43-B6F5-3EDA71C919A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.37a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B605F8D2-631A-4E85-8344-7C7DABBA661A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955C1C1B-90D4-42F5-8573-51B32B432442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blenloader:2.40_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC8CA41-812B-448B-9CCE-359333A69BB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.overflow.pl/adv/blenderinteger.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419907/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15981",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/238-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.overflow.pl/adv/blenderinteger.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419907/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/238-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:avaya:modular_messaging_message_storage_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0_sp_4",
            "matchCriteriaId" : "294E473E-CF68-47AA-B630-20050F9DD322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:avaya:modular_messaging_message_storage_server:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25F5CF2-F891-41CA-A40C-13966F72FDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:avaya:modular_messaging_message_storage_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7417958C-5321-41D6-9D1A-D16BF5511E81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18204",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-235.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-235.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conversion to wide characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4361030D-230A-45CD-AC84-9603DADC75BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:jrun:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C101B23-DD69-4020-A252-A808925DB093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:jrun:4.0:sp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "7490205B-E8CF-4088-8FD7-3CEE672E2A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:jrun:4.0_build_61650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E7B136-FAC8-4105-825F-6CC31A76E64B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015370",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=360",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via \"a malformed URL.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4361030D-230A-45CD-AC84-9603DADC75BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:jrun:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C101B23-DD69-4020-A252-A808925DB093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:jrun:4.0:sp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "7490205B-E8CF-4088-8FD7-3CEE672E2A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:jrun:4.0_build_61650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E7B136-FAC8-4105-825F-6CC31A76E64B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015370",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the \"Add to archive\" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by tricking the user into adding a file whose filename contains a non-default code page and non-ANSI characters, as demonstrated using a Chinese filename, possibly due to buffer expansion when using the WideCharToMultiByte API.  NOTE: it is not clear whether this problem can be exploited for code execution. If not, then perhaps the user-assisted nature of the attack should exclude the issue from inclusion in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5611BDE-8CB6-4FCE-BB12-D16BF60BCE64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3631",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18193",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015386",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-864.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15994",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10854",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-864.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4F9A11-BF2F-4C12-AE12-480EE547DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A4931F-1EA7-48E5-B369-FA013FB87D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/opencms-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/opencms-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) oe-action and (2) page parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openedit_inc:openedit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "65703217-2D7C-4B12-B28C-878F7BE365DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/openedit-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18168",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16004",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/openedit-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the bab[searchfor] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:papaya:papaya_cms:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD76AC5-BFB1-44ED-A628-AC5430B29B46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/papaya-cms-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/papaya-cms-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) menuid parameter to (a) index.php and (b) guestbook.php, and the (2) forumid and (3) reporeid_print parameters to (c) print.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.2",
            "matchCriteriaId" : "971FF217-A1E4-4564-9AF0-302D273C78F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/papoo-multiple-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18152",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=21870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=21871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16020",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3046",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/papoo-multiple-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=21870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=21871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the story_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703FD7D9-5D17-4C57-882A-8EF33CDE44F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/phpslash-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16021",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/phpslash-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Plexcor CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plexcor:plexcor_cms:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A9C3345-E6B9-4424-99C4-2F9110094063"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/plexcors-cms-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/plexcors-cms-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. NOTE: the vendor has disputed this vulnerability, stating that the \"XSS flaw was only part of the custom implementation of the [polopoly] site\".  As of 20061003, CVE has no further information on this issue, except that the original researcher has a history of testing live sites and assuming that discoveries indicate vulnerabilities in the associated package"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polopoly:polopoly:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "DC6C08FF-3CB1-42BC-8ECE-ECA82E1F70AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-September/001056.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/polopoly-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-September/001056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/polopoly-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Polopoly",
        "comment" : "1. The XSS flaw described was only part of the custom implementation of the http://www.polopoly.com/ site. It was never part of any version of any Polopoly product, nor delivered to any of Polopoly’s customers.\n2. The XSS flaw that existed (the search form in the upper right corner) on the www.polopoly.com site has been fixed.\n3. When www.polopoly.com had the XSS flaw it was based on Polopoly 8.6. Polopoly 9.x was never involved what so ever in this issue. And as I said earlier, the flaw was not part of Polopoly 8.6 either, it was only in custom implementation code of the www.polopoly.com site.\n4. The www.polopoly.com site is not personalized nor permission controlled, so there was no information of any value to steal by exploiting the XSS flaw.",
        "lastModified" : "2006-10-05T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iatek:portalapp:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500B0569-2726-4170-91A4-90A72F548E9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/portalapp-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16008",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/portalapp-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iatek:siteenable:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3",
            "matchCriteriaId" : "DDE665DC-D540-4A58-A0D0-3567903E4C46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/siteenable-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/siteenable-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ret_page parameter to login.asp or the (2) do_search and (3) search parameters to content.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iatek:intranetapp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3",
            "matchCriteriaId" : "54428241-652B-452F-9184-FF0039F686CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/intranetapp-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/intranetapp-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp, (2) search_employees.asp, (3) cat.asp, and (4) links.asp; (5) projectid parameter to pmprojects.asp, (6) ret_page parameter to login.asp, and (7) skin_number parameter to default.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iatek:projectapp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3",
            "matchCriteriaId" : "2BF088A1-BC1D-4727-BCD9-32046ABBE660"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/projectapp-mutliple-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18199",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21962",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21963",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21964",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21965",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21966",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21967",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21968",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16011",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3040",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/projectapp-mutliple-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute arbitrary SQL commands via the p_news_id parameter to (1) news_and_events_new.asp and (2) news.asp.  NOTE: on 20060227, the vendor disputed the accuracy of this report, saying that the p_news_id, news_and_events_new.asp, and news.asp are not specifically part of their product, although they could be dynamically generated through use of the product.  Some investigation by CVE suggests evidence that the news_and_events_new.asp page has at least a forced invalid SQL syntax error, but this could not be repeated for news.asp"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quantum_art:qp7_enterprise:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29519F03-D101-4FD3-866C-97CDABA2F1E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/qp7enterprise-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16022",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/qp7enterprise-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ramsite:r1_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "4C699289-8843-4FA8-9EBC-A0997D12B7DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ramsite-r1-cms-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18196",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ramsite-r1-cms-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) iid, (2) iid2, (3) r, (4) cart, (5) str, (6) nf, and (7) a parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:computeroil:redakto_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "E1A83ABF-F5CF-457D-9047-426A124710F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/redakto-wcms-multiple-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16013",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/redakto-wcms-multiple-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) type and (2) count parameters, and (3) the query string in a story."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scoop:scoop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1_rc1",
            "matchCriteriaId" : "441E3572-21BF-47DB-898A-F77C5CC1D654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/scoop-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16014",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/scoop-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) keyword and (2) invalid parameter to articleSearch.asp; (3) username and (4) invalid parameter to lostPassword.asp; (5) Username, (6) Password, and (7) invalid parameter to account_login.asp; (8) area, (9) articleZoneID, (10) r, and (11) invalid parameters to category.asp; and invalid parameters to (12) articleZone.asp, (13) prePurchaserRegistration.asp, and (14) requestDemo.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commercial_interactive_media:scoop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "6EA29A51-1344-4B8A-9E18-CC00B7A87C03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/scoop-multiple-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16015",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/scoop-multiple-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sitekit CMS 6.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) textonly, (3) locID, and (4) lang parameters to (a) Default.aspx, and the (6) ClickFrom parameter to (b) Request-call-back.html and (c) registration-form.html.  NOTE: the vendor states \"This issue was resolved by a minor update to Sitekit CMS v6.6, sanitising the html code and eradicating related security issues.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitekit_solutions:sitekit_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.6",
            "matchCriteriaId" : "C1D5D332-074F-4AE9-AEC9-F6B37D3023F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/sitekit-cms-multiple-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000611.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22071",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22072",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22073",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16016",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3050",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/sitekit-cms-multiple-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Starphire SiteSage 5.0.18 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the norelay_highlight_words parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:starphire_technologies:sitesage:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82817CDF-212F-46D4-8D9C-469FDA68B3FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:starphire_technologies:sitesage-ee:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B23EF6F-6A2D-4691-8E00-9F3B2E7F1CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:starphire_technologies:sitesage-le:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A41B08C-08BC-40BD-BF5C-269A9ACD8C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:starphire_technologies:sitesage-sb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA754F4F-2F20-4118-BA8E-76D5050A2332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:starphire_technologies:sitesage-se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0A2357-7F53-4603-A558-3D579751957E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/sitesage-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/sitesage-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speartek:speartek:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B36FFFB-FE80-4286-BA79-0B1195321F67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/speartek-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/001008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/speartek-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/001008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Speartek",
        "comment" : "We are aware of numerous existing script vulnerabilities and exploits and stand by the security of our system and our ability to address these.  This particular exploit is not particularly serious as no sensitive or private user information is ever held within cookies during our checkout process.  All user information and client information is secure in our platform.  We take all security threats quite seriously and view the efforts of the author of this particular exploit as harmful to our professional image.  This is especially important to note because the particular script vulnerability that has been raised poses no real threat to the stability or security of our systems.  Again, we are formally responding to this posted cross-site script vulnerability to communicate that we take all such potential security issues very seriously and this particular issue has been addressed.\n\nIn version 7.0.0 of our software, we have addressed the mentioned cross site scripting vulnerabilities.  On any page that a form is on, the query string is sanitized to eliminate the vectors outlined in the XSS vulnerability.  Form data is handled to protect against a form post from a different site to try and initialize a cross site scripting attacking via a form post. Sensitive data is not stored in session cookies and in the event that a cookie was stolen, it would contain nothing useful for the attacker.  Our software is a hosted application, which allows us to make quick remedies as new exploits are found.  Also, our system is monitored consistently and alerts are sent to our administrators when any malicious attempt is seen.   The details of this alert include the data sent, from what referral and if there is a specific user that is being targeted on our system.",
        "lastModified" : "2006-11-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) spip_login.php3 and (2) spip_pass.php3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEC874-206B-4C45-92F5-C6C650F92782"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/spip-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18211",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/spip-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.cfm in SpireMedia mx7 allows remote attackers to execute arbitrary SQL commands via the cid parameter.  NOTE: the vendor has disputed this issue, stating \"This information is incorrect, unproven, and potentially slanderous.\" However, CVE and OSVDB have both performed additional research that suggests that this might be path disclosure from invalid SQL syntax"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiremedia:mx7:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58D8E20-4268-4FFC-BCD6-E03740E7179E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/spiremedia-cms-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3053",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/spiremedia-cms-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search_query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forum_one:syntaxcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "6251B9F0-CAD2-4C64-AD26-C29641FFEF37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/syntaxcms-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/syntaxcms-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter in a search page, as demonstrated using (1) page1631.aspx and (2) page496.aspx."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangora:tangora_portal_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "73CE34A8-B925-4E4A-85EA-CC78E75084F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/tangora-portal-cms-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/tangora-portal-cms-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Text-e 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:text-e:text-e_cms:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C244F23E-462F-4E64-8D31-FAE70A14AA23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/text-e-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/text-e-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3001_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786346D5-13D8-45C9-B91D-C2AACF675377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A512328-2FD0-4B1D-9327-A13A0BCE9C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3020_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D50FE2-A4E6-4EF4-A91C-88FB0AF6CCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6548F964-B8EE-4B39-87CF-99743D41C42C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08810E6-33B6-45FF-91C7-EED10DC023EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD1A1AC-980F-428E-8BAF-0FC821014868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED2D96-5CC9-4851-986A-C9ED5E2D96CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC150564-7413-401A-9DD8-8AD773F1D8F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA0DDDD-C987-4DA6-ADEE-77B387C26A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49696766-ECCE-4903-AA54-271EFEA58B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923949D1-06EC-462F-A3BC-FCAB448042A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901B1838-7169-41E5-80EF-29BB680BF937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAEAA5F-0A98-48B7-8012-9B9909243135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB38834B-E4AB-43F4-888B-14B088C95594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F8059B-3968-4D63-B1B3-74E545C918D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701CDA0D-F932-4251-B484-8F20F0AE9003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E674AA43-905E-40E0-A70F-77D05C62C18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AB682-2965-4C8D-B323-AB510E424407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F7F019-A0A4-49CD-BB28-24BF7725AC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175CD875-3402-4B06-A3FA-7DFFCBB44056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9017BB-5848-4361-ABB9-C69FB3AB90FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "207034E8-35F7-4E78-A3FC-C86D20EB8D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C544E523-15E5-4CE5-8113-53454F5D9973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09F6EBD-C3FC-4680-BE31-A766D863237D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8C3FDA-D321-4202-A8EA-6C1464558A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B68705AB-A133-401F-9F41-64594E071816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9092680-E154-4EAB-A2D5-B692073F894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF5F3FA-5FA4-408E-BA62-3943C5DFD859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC9764-5BF5-449F-9200-5569C13F8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12F2AAC-DB5B-4C28-86C5-F59490362E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071F52AD-D59B-4673-BCBE-112B94D3EB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80709CB0-D386-4C4F-B3EE-7A0501FD7248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFAF42-B894-4D62-A9CF-3349A43191AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE5BB7F-D8B4-441B-9F45-56F622EEAA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B87A7EC-DC23-4075-8C4A-2317FF34BDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AC18E3-D12B-489D-9D95-6C9210235FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB969E-8BE9-46E0-B8AA-5057E320F1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36291ADE-3D5A-4E49-8BA7-B71CAAA226B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D953DA9F-B54E-4941-85BE-48933C98DB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E298AD-26AC-4E1D-83D8-5C2016CC6559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "590283B1-4965-44D3-A0D4-CD90DD6B2D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DAF71-5763-44D8-AD1E-5ADE8BC15120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA54782-93A8-47BE-863D-89CA3678BF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F66A10-246D-447B-941F-F1175684F0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82435757-D892-4298-9176-5EC1FEC93037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A90348C-94E2-4F04-A887-E7EFFC1ACF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5E136E-9215-46A8-A40A-AE964C588A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3005_concentrator_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17196F00-9D7A-4AF6-AE1E-EA2E450A8ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32200DE2-71BA-417C-AF24-3BE549A68711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7.1.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F3F37E-4BBD-4A0E-A1DF-64602D75207D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_asa_ids:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701810DC-0A46-4D01-90BD-03AAF277E4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.2.3_\\(110\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "900DC321-4CEF-4810-8247-B82FE93F48BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.3.3_\\(133\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "422F8E64-2376-4E82-A1A2-916BFB7172AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5C8F8B-4F20-4635-81FF-92F144F43793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.0:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "22B6CD99-5B21-4961-AD47-B1722E586664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.1:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "3BF391B2-17C6-4633-8CE9-35B637BFDC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.3:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "7889030E-97F7-4CCD-8050-5250B1F58C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.3:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "26B0CB70-CC82-4FF1-882C-0712354DA113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.3.5.1:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "543A3774-28EB-406D-830E-957B5E9E7A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.3.6.1:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "B0B5C19A-58BB-4A7A-886D-3567B37F466D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.4:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "4126D9DE-A75E-4A9E-9DA7-1477D5688872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.5:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "0354C50C-4104-4960-B1EE-F212CD3D6AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.6:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "DE9B81AC-1D16-4FDF-B438-3D3ED2BE9538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.6.2:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "8F515D7A-D663-49F0-8F12-1484000505FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.6.3:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "A668278F-8080-4295-95EB-88341478D16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.6.4:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "A66BED35-F385-4A0C-9416-6F007536133E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.42:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "5EA57609-522C-4431-92AE-4FF11AA67320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D05855-C8C1-4243-8438-5A36A01A8F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.0:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "A60B49A7-B569-4485-A6B3-E14B9FB96950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.0.1:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "FA889730-B2FF-4219-BBCA-A4364BA61EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.0.3:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "8731D5CC-A6F9-48DB-B1D1-FD50CEAC63D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB11A75E-2E4B-4B83-B763-CBBC1D9DFB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.1.1:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "DFFE6A50-B704-42BB-8FFF-27E9F4D3B576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109147BF-3225-48E4-8BE1-2E5B59921032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2:*:windows_server:*:*:*:*:*",
            "matchCriteriaId" : "7CDA01B6-6887-40BB-B541-65F198D03219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "86806D6E-1BDF-4253-AEB7-D9D88D224812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(1.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BD6882-379C-4EA7-8E51-124273C5A56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "680E5A81-6409-4CE7-8496-D7845FD7E851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3868E060-0278-491A-9943-1A2E435C7606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F39D3441-C84A-403A-ACB4-8019579EE4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61ED039B-C3E6-4BC8-A97A-351EC9CEAF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2793200-D95D-4BD3-8DF2-4A847230FBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E587654-B5A0-47A4-BED6-D8DB69AEF566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F07B954-817F-47AC-BCAC-3DA697A6E2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC1B599-05C0-4FB5-A47B-5D858DAB43A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12ECF578-84BF-4F41-9462-C09FA517F2A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_501:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151D5A44-2D0D-478A-B011-A0892817B814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_506:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E346F334-9BA3-4BDC-8D0F-D749A7D76E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_515:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6EE5C14-F556-48A5-BB3F-5465DC823B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_515e:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286199EA-71CF-46B4-9131-F1752C2EA82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_520:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E437F4-1B19-4B57-9EAD-3AC04717E389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_525:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B2019F-DF6E-4924-B0D2-37094B5265F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_535:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9600B7CF-4AEB-4319-8EF4-4FEA40EF6367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C5A417-C48D-4799-A766-7B231ADF27C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026A2C0D-AD93-49DC-AF72-8C12AD565B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920FAF7C-2964-497B-B1F8-3B060AAB4C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D499F38-A34C-44D0-A061-C3AE08CF178B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E564B5-A39F-4837-93B8-1331CD975D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.1\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEDB9DD-C862-4783-9F96-88836424B298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.1\\(6b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD36C4A-4B90-4012-B4A5-6081C413E302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39A993C-5A36-4D3F-B8B6-9B3252713127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C4F7D5-DCD0-409C-86BF-A96A5253DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8198D129-76D0-4983-BFC4-8EC724FE1B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEECFAA-9DD5-4950-B9F1-CF8582225314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49566EAC-05AF-4880-8000-351AF538E4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E9FBEE-3213-47FA-8CBA-C285533265FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "118CBF59-DAD8-468E-B279-F6359E4624F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(7.202\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "957E6F8F-6881-44DE-A687-9D1E0C13F6CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56328FE-F499-4325-AFEC-45BFEAB7662D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA2E425-904C-4070-8F5F-B81BCF3147F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604CF950-5D4B-4DC6-819E-0528B22CB05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12887E5-A2BB-4B1E-9621-2961458BCE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1\\(4.206\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5BE2F7-687C-477B-818B-A102526DF36D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999A0969-60EB-4B2E-A274-9F05D9F840E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "626E41D2-A5EF-493D-9486-3D9BC3793EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA31E4D-2215-4E4A-BCCC-B3D922CB752D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(3.210\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F16AD2C-1CC1-43D9-A944-F67071B62E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A42FFBF7-9ADB-4F14-BED8-F2E53BEE7B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D16481-CA9A-4B4D-AC9D-3A4F0387FF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E4588E-6C1F-4720-8082-0EF299435CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24E0E92-59D7-4B16-8B0D-2FD0EE821D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED24C763-7558-4AC0-AE10-FDA3D3078D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC85ED3-B598-4A87-A2B8-8D3B52ECC2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(1.200\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84CE24E-4ED6-43D0-A234-FBD24D22A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF84B9FE-7C6C-4578-A5A9-EF0D5EEEEC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3E2B4-3A36-44B5-90D3-1BF9FAD98579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C558CED8-8342-46CB-9F52-580B626D320E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F85D19E-6C26-429D-B876-F34238B9DAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09063867-0E64-4630-B35B-4CCA348E4DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F98CD7-A352-483C-9968-8FB2627A7CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97FE485-705F-4707-B6C6-0EF9E8A85D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B925E8-D2C2-4E8C-AC21-0C422245C482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9170562-872E-4C32-869C-B10FF35A925E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0927A68-8BB2-4F03-8396-E9CACC158FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "559DDBA3-2AF4-4A0C-B219-6779BA931F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1.5\\(104\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76AED68-8304-4BC6-9D98-64231B08A6A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5226C9CC-6933-4F10-B426-B47782C606FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "757DAE9A-B25D-4B8A-A41B-66C2897B537E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3DC170-E279-4725-B9EE-6840B5685CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8091EDA9-BD18-47F7-8CEC-E086238647C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F867890-74A4-4892-B99A-27DB4603B873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE05B514-F094-4632-B25B-973F976F6409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3392428D-1A85-4472-A276-C482A78E2CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D74D2C-662B-4D24-89EE-3DB73F96BBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40954985-16E6-4F37-B014-6A55166AE093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.109\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C097809-1FEF-4417-A201-42291CC29122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6D5FD3-CF95-4A3B-9ADB-CEC77F73CA78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_field_notice09186a00805bf1c4.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420020/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420103/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_field_notice09186a00805bf1c4.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420020/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420103/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3534",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wouter_verhelst:nbd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.5",
            "matchCriteriaId" : "E963ACA0-8AA5-4C12-A66F-B0308C682989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wouter_verhelst:nbd:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54469EAE-B59D-46F0-95D6-C7A3E1A5783E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wouter_verhelst:nbd:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C9D230-C76A-42B7-8C28-CEECAB2DF91E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=116314",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18135",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18171",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18209",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18315",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43353",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/43610",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=9201144&forum_id=40388",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=380202&group_id=13229",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=380210&group_id=13229",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-924",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-14.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21848",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16029",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/237-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=116314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=9201144&forum_id=40388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=380202&group_id=13229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=380210&group_id=13229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/237-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show and (2) type parameter.  NOTE: the provenance of this information is unknown, although it was later rediscovered."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbox:musicbox:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDAA1E7-8318-4FBD-9EEA-04CA03F892FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-03/0515.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18369",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22272",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16030",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0124",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-03/0515.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MediaWiki before 1.5.4 uses a hard-coded \"internal placeholder string\", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute Javascript using inline style attributes, which are processed by Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.3",
            "matchCriteriaId" : "226217AC-8AF5-4EB1-B094-B5CCE496A037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C96D337-1D37-4ADE-871D-9829928EE80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFB843C-4513-4569-9746-DA9FDD7A5CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377F0F7A-8E50-4803-9670-F719D17400D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4CCA5C-3594-41B4-99F3-FC99BA0495BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0A0C81-CDB6-4A11-B6B0-DECB12558DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BD0855-A9C8-47CD-BB50-E422E0C4A1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A9DCC7-CF58-44CC-9489-51FA79EECDF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80D651C6-116D-448A-8569-BAB9BAEC7D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AFC6EE-41C7-4369-8BA1-DDBF8A744ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F54837-5004-4D10-B3B0-502CED4F6592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09F36C1-CBC0-489E-B62D-4590A2E5A4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F0067D-534A-4238-A244-D92A73845432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEC422E-49BC-41D4-9F71-B834D4108EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D854161-28AA-4386-B90A-97F9692CE37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A0FA49-99DC-4691-968F-6AEB76B74370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0C6A2C-992B-45A0-8E0C-1AE983881337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292A77C7-8C7B-4F3A-B7FD-3505A9F37E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77FC97A-3BB2-4AA5-B0D6-C0D1FBEA5FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9393EF-083A-4662-BC7A-89979C2B8546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DE6A4E-6BCE-499E-B017-1E0F8D1F65B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD90730F-BF26-46C5-83F8-039CD661C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DDA753-26F5-4142-B227-07DDF14DD8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D3B5E2-AC84-421D-AC10-3266D9575922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326D4BFB-EFE7-4EAC-AA71-45E8C7E41538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736DFCB7-B747-4F98-AB87-9023BCD0B5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174665BA-F231-45F6-922C-933B8A613009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B175F5A-7CB6-44E6-9E98-FB40F6D14FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45833DC-F104-42BB-8688-4DE66AFF72F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A75AFB-2706-42FF-8534-B910997987AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F335EB4-1A74-4FAE-ADAF-AC9FB37A80DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116C8AA3-481D-409A-ABA8-C8DA1EE8FF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DCE478-7D30-4BBC-8878-C3745D6ADAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBFFA2C-6768-4CB9-B0B0-BDB79CA1DEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0C4A1E-B084-4C78-BEE4-4E733159F367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E70F32-2F26-4836-8A4F-0A0B06EAD371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE506B8C-245E-4A7E-A24C-FABB1D4531EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934382C1-088A-4AEE-A71A-E9802AC9C1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9028E-1BDE-4BA0-A479-7A30020331D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D02E4C1-2BA7-4BC0-9C11-D0F74181DF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728E2852-5658-4DCC-AF1E-718B292F06C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B28DC19-7E6A-4CC7-86A9-10EA9FD79FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD296DF-21C6-43E4-AC4D-8F57220ECDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AD23BE-5400-43D8-A667-7AE60B0500B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFE2FA-CAE0-42C3-AA84-4F8D59045A78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18219",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mediawiki.org/wiki/Download",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mediawiki.org/wiki/Download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to the user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-square:httprint:202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B322B02F-F7A7-4041-82A6-F3B6C9D56DF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://net-square.com/httprint/#history",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_httprint_Multiple_Vulnerabilities.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420101/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16031",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://net-square.com/httprint/#history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_httprint_Multiple_Vulnerabilities.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420101/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T21:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service (crash) via a long Server field in an HTTP response."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-square:httprint:202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B322B02F-F7A7-4041-82A6-F3B6C9D56DF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://net-square.com/httprint/#history",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_httprint_Multiple_Vulnerabilities.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420101/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16031",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://net-square.com/httprint/#history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_httprint_Multiple_Vulnerabilities.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420101/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3536",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22270",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15246",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3537",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"missing request validation\" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15246",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connected file descriptors or socketpairs and setting a large data transfer buffer, then preventing Linux from being able to finish the transfer by causing the process to become a zombie, or closing the file descriptor without closing an associated reference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550DFE6E-DCE6-4649-8746-522996021DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF51F68C-60A5-451F-9150-6DABBAE1D41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3BF9D6-BE14-4590-91B8-501DC92261BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F04081-D672-488E-A91D-5088DD04AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDB59EF-74EF-462E-BC84-89201F734380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0755A136-3DE3-4B61-B5EF-F6282AACD38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D950C3-0DDC-4549-99F8-1E206768219A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195A133A-26C9-401E-913F-285BA220D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D68E21-6C58-46A7-96F2-9A79DD880803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D11B12-AFD7-4055-A366-D932CA1BA8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC990132-9DF2-4D23-B9DA-0819809A3CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA51D40-E72C-40A4-B238-70F6806FA1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1B7D68-E41E-4A5A-9606-F14F057B39E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BCB10C-FD72-4F18-84C9-AE0603402426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF742FF1-5504-41BB-8FAA-D71B83C791B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C6D04-3226-4654-9A41-0325B48A2F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072A77AD-BB27-4C24-91A0-A12D6E741593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF900D1D-E351-4407-8269-80E5403432B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44915F9F-88DF-4304-8F66-58A869654BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC2D90D-2115-406C-B609-870B241F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF681CC1-B3EC-467A-A10D-10840D3D4575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8660C030-328E-4221-847E-AC4BDA08CE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47AEC277-F9A4-412F-B2EA-C1AEA336A46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7234AF29-BCDA-4728-A141-C169EE59CEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374851C5-C61D-4964-8B4A-473B0A008F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD55C81-3687-46BF-880E-58D7E005A185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2953267F-16BF-404F-83F1-73E0908979B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D953B61-3457-4A0E-A668-BA4937B79784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5F3607-C0DD-494C-AB6E-46E383A6B17D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19138F52-25EA-42B6-89DC-692A8AF0A720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2EBADC-0817-4E38-9F49-8446D8A20CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340368E7-0005-4F8A-8AF1-C20A1198288C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC860DD-57DF-4474-AE2B-9AADB9060175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1D576A-0763-4611-B3CF-CD8514F18783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F570226-CA89-46F4-8C68-9A59BC0602A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162A88DA-E2EA-4E92-B174-9AD86BE8D983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE5C4F5-C64D-4714-B02E-689B435E3E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164F4483-9F28-491A-8F99-4242C9B9CBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34803A7D-45C4-4DBE-BF18-19CE9DE62A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1178D6EE-A462-4CC1-B430-9A44C75D2336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4360530E-6E07-48F9-B8F8-B36622331052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17508D09-AE14-4458-93A2-E2764452EA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F2CD4A-CCA9-4743-86C4-7675D2487E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C1504C-03C5-49E4-8192-E1E698CF07A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3172A-E663-42F6-90E7-51C3850AF9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F6692C-494F-44ED-97C6-A6CD05334DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77231F8B-137F-4FAE-BCD9-658F32943CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552ED77A-F09A-4923-A907-8E0DF8445363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF940EA-676A-42C8-A6E0-7F53C8A34340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DCCFB1-054F-4BF0-92F1-78A2063415D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D3222C-7469-42F6-984D-3223BCD8080E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697B7069-D08D-41BD-8285-A1ABA0E1142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72173CFB-BAB6-456C-B5F2-3AA31D799E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD08A67-195F-431B-98A5-42B2966055DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658C7317-D50B-475A-9E0E-E68AECD49B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1270F454-8E05-413C-BAF4-35D062CA5803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=362",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-22T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service (memory consumption and application crash) via HTML files with a large ROWSPAN attribute in a TD tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A419AE8-F5A2-4E25-9004-AAAB325E201A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857C92E2-6870-409A-9457-75F8C5C7B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3112AFEB-7893-467C-8B45-A44D5697BB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC83309-3A97-4619-B5C1-574610838BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891514D5-50C8-4EDC-81C5-24ABF8BCC022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:textedit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "11760FE6-58C1-4FF1-972E-21790E5D5A8A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/jarticle.html?artnum=303382-en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18220",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security-protocols.com/advisory/sp-x22-advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/351217",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16045",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/jarticle.html?artnum=303382-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security-protocols.com/advisory/sp-x22-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/351217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might allow local users to gain privileges via a malicious \"program.exe\" file in the C: folder, which is run by naPrdMgr.exe when it attempts to execute EntVUtil.EXE under an unquoted \"Program Files\" path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:common_management_agent:3.5:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "877F58FB-FAA7-4A01-8F04-E813C51BD710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_enterprise:8.0i:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "435524F4-62F0-40A7-A214-F0C83145B70B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://reedarvin.thearvins.com/20051222-01.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420104/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16040",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://reedarvin.thearvins.com/20051222-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420104/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nexus Concepts Dev Hound 2.24 and earlier stores username and password information in cleartext in the devhound.tdbd file, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8B3368-2E38-414D-A5F6-0C19ADB13F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF82EFEB-2044-46C5-92C9-28D2C515AA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD4669B-A654-4F3D-88A5-6CF2CA8AFA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2CBCEF-6D8E-40EB-872C-3AD0A635C5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262693AA-A5E3-4C95-8FDD-81B87B240A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD99F34-116C-4C05-BA2D-9F04226007FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3E8036-FDE6-470C-8EB4-E140CD439C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92028B43-5A53-40C5-B7BB-6024A45E2168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F530D6F-B32E-4792-992B-A1084C1A0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBCBCD9-D9DE-48AD-98D2-FE32F4058D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A3CA1-D8CC-4AF2-92B2-60A49282AACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B94A836-EBA3-4D19-876A-6874B5F5A439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F359443-A3C8-4626-BABC-59AD4993B871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED59151-D206-49A1-A3B5-61B14C698839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F047C8-E9E4-46C5-839F-33AAB03DB6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46884085-0443-4248-BE18-F32F1816B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A1C219-56F2-4EED-81A8-0D5AF71ECEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9691C823-3FAB-4906-9C3C-B88F9056C639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5453F8-3963-45AC-A5DC-DDCD0258739F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C865EEFD-5212-4BDF-9A01-BBDEE0A3B324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C445658-0CD2-479E-8901-405F987275D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35D603F-C124-4FB0-A9F4-BD42057832C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18164",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16042",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Nexus Concepts Dev Hound 2.24 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple unspecified user input fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8B3368-2E38-414D-A5F6-0C19ADB13F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF82EFEB-2044-46C5-92C9-28D2C515AA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD4669B-A654-4F3D-88A5-6CF2CA8AFA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2CBCEF-6D8E-40EB-872C-3AD0A635C5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262693AA-A5E3-4C95-8FDD-81B87B240A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD99F34-116C-4C05-BA2D-9F04226007FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3E8036-FDE6-470C-8EB4-E140CD439C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92028B43-5A53-40C5-B7BB-6024A45E2168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F530D6F-B32E-4792-992B-A1084C1A0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBCBCD9-D9DE-48AD-98D2-FE32F4058D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A3CA1-D8CC-4AF2-92B2-60A49282AACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B94A836-EBA3-4D19-876A-6874B5F5A439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F359443-A3C8-4626-BABC-59AD4993B871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED59151-D206-49A1-A3B5-61B14C698839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F047C8-E9E4-46C5-839F-33AAB03DB6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46884085-0443-4248-BE18-F32F1816B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A1C219-56F2-4EED-81A8-0D5AF71ECEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9691C823-3FAB-4906-9C3C-B88F9056C639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5453F8-3963-45AC-A5DC-DDCD0258739F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C865EEFD-5212-4BDF-9A01-BBDEE0A3B324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C445658-0CD2-479E-8901-405F987275D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35D603F-C124-4FB0-A9F4-BD42057832C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18164",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16042",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-23T00:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nexus Concepts Dev Hound 2.24 and earlier allows remote attackers to obtain the installation path via a URL containing a non-existent .dll file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8B3368-2E38-414D-A5F6-0C19ADB13F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF82EFEB-2044-46C5-92C9-28D2C515AA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD4669B-A654-4F3D-88A5-6CF2CA8AFA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2CBCEF-6D8E-40EB-872C-3AD0A635C5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262693AA-A5E3-4C95-8FDD-81B87B240A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD99F34-116C-4C05-BA2D-9F04226007FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3E8036-FDE6-470C-8EB4-E140CD439C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:1.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92028B43-5A53-40C5-B7BB-6024A45E2168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F530D6F-B32E-4792-992B-A1084C1A0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBCBCD9-D9DE-48AD-98D2-FE32F4058D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A3CA1-D8CC-4AF2-92B2-60A49282AACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B94A836-EBA3-4D19-876A-6874B5F5A439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F359443-A3C8-4626-BABC-59AD4993B871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED59151-D206-49A1-A3B5-61B14C698839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F047C8-E9E4-46C5-839F-33AAB03DB6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46884085-0443-4248-BE18-F32F1816B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A1C219-56F2-4EED-81A8-0D5AF71ECEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9691C823-3FAB-4906-9C3C-B88F9056C639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5453F8-3963-45AC-A5DC-DDCD0258739F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C865EEFD-5212-4BDF-9A01-BBDEE0A3B324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C445658-0CD2-479E-8901-405F987275D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexus_concepts:dev_hound:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35D603F-C124-4FB0-A9F4-BD42057832C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18164",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.asp in pTools allows remote attackers to execute arbitrary SQL commands via the docID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallel_tools_consortium:ptools:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB6AA6F-7311-4CD3-B37A-0D5A7DB9180B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18133",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files via \"../\" sequences in the template parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:extensis:netpublish_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D274A607-1E54-4237-8C78-C0CD0B22C223"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113511429307550&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18173",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015393",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.extensis.com/en/support/kb_article.jsp?articleNumber=3302201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15974",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113511429307550&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.extensis.com/en/support/kb_article.jsp?articleNumber=3302201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in TN3270 Resource Gateway 1.1.0 allows local users to cause a denial of service and possibly execute arbitrary code via format string specifiers in syslog function calls."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curtis_hawthorne:tn3270_resource_gateway:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0F9D99-BB0C-4064-8D7D-5567DE1966AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curtis_hawthorne:tn3270_resource_gateway:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218C30F6-0658-4F73-9CFB-A4973935F6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curtis_hawthorne:tn3270_resource_gateway:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9495E78A-8937-4583-8DCA-EAC13D99C812"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18185",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=379592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=379592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WAXTRAPP 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:waxtrapp:waxtrapp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "0A024706-2615-4AA0-B97F-0A02B50C50BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/waxtrapp-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/waxtrapp-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WANDSOFT e-SEARCH allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keywords parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wandsoft:e-search:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3C54EE-352A-4EB1-935A-88B4838D488D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/wandsoft-e-search-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18217",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/wandsoft-e-search-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case.  NOTE: the vendor has stated that this problem could not be reproduced, and has asked the researcher for more information, without a response as of 20060103"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwasher:csm_appliance_suite:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101286FB-6B8B-4584-840C-83EB51CD78B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420106/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420158/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420678/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420106/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420158/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420678/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-23T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in WebDB 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search parameters, possibly Search0.  NOTE: the vendor has disputed this issue, saying that \"WebDB is a generic online database system used by many of the clients of Lois Software. The flaw that was identified was some code that was added for a client to do some testing of his system and only certain safe commands were allowed. This code has now been removed and it is not now possible to use SQL queries as part of the query string.  No installation or patch is required All clients use a common code library and have their own front end and databases and connections. So as soon as a change / upgrade / enhancement is made to the code, all users of the software begin to use the latest changes immediately.\"  Since the issue appeared in a custom web site and no action is required on the part of customers, this issue should not be included in CVE"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lois_software:webdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "A61ECCAB-52B0-4140-801E-0560501DF796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lois_software:webdb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55954F79-CB1A-429A-B98B-E2922E9C21A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/webdb-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/webdb-sql-inj-vuln.html#c114176251867558161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18226",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3071",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/webdb-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/webdb-sql-inj-vuln.html#c114176251867558161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3341",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-27T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by (1) register-q.sh and (2) register-p.sh."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dhis_tools:dns_package:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "1D7E082C-27FB-4850-B1F3-09BB64DA1099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18227",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18228",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-928",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21934",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/21935",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16065",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23859",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3343",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-27T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tkdiff before 4.1.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tkdiff:tkdiff:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BAE942-2E82-4E4E-BAB3-437CA0514C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tkdiff:tkdiff:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D8A4CE-02FF-4874-8DD8-524C108016F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tkdiff:tkdiff:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DDB159-B9E0-4024-A4B8-1537249122A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tkdiff:tkdiff:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695BBE2C-99AB-487F-8979-90AABC692246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tkdiff:tkdiff:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63CA190-1E63-497D-AD57-AAD3C99DBA32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18083",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18215",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1015421",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=380030&group_id=64960",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-927",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:001",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/21933",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16064",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23858",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=380030&group_id=64960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3535",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-27T23:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in KETM 0.0.6 allows local users to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ketm:ketm:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0EB6E7-7F76-428A-A2D9-D5347E081F41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18225",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-926",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16049/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16049/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via (1) the sortby parameter in members.php and (2) IMG tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59B4A30-B3F1-4200-844E-E3F7EEA91214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B24DACA-1F61-4AD6-9074-F330EFB28B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2252C51-1FA4-469B-B241-8EDB1D3DFB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.206:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5335762A-EA49-48D3-8A0C-0C031FECBC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.207:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A8E77C-4687-4A3E-8112-52717E885C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CDAEAF-9E2E-42F4-B7D7-EF121CC5F978"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18190/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420109/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15931",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18190/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420109/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratings_include.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59B4A30-B3F1-4200-844E-E3F7EEA91214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.206:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5335762A-EA49-48D3-8A0C-0C031FECBC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.207:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A8E77C-4687-4A3E-8112-52717E885C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CDAEAF-9E2E-42F4-B7D7-EF121CC5F978"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18190/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420109/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18190/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420109/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the max_file_size parameter to (1) bug_file_add.php, (2) bug_report.php, (3) bug_report_advanced_page.php, and (4) proj_doc_add_page.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9407F704-FF3C-4976-BE4C-A1DDC16715D0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FB3D29-644D-4E5F-875D-C87CCE3EF95C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5173B32-1099-47C9-996B-56DB29456BB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9B4611-C002-40F5-978C-BB90F1A893C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B419B788-ADDD-4C0A-8E02-CBB58FD21938"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B347D6C8-4607-481D-863E-7F41E9868041"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E387645-BC7A-4EA5-AE9E-A3C66994391B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F434D16-4F09-4BCF-BD3E-9114876C2575"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80575A3-87E7-40BC-9BCB-E12BB7938A77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD480B-7CFB-4FD3-8E47-028F32AEF902"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04989B5F-30B2-43A0-A061-BF43EEA8756C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7C781D-F5D1-4C63-B6E3-230DEC80104E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0755FA0-2365-42B4-8E42-214D5BAD71A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35248DDA-D37D-4D72-9FF8-6813BA4C87BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67C54F4-4155-43DA-8E07-579249759989"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C376D216-914A-4D96-8603-C6861B3E2857"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A07B4C-CE12-4381-BFE4-CE79411F5069"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "065C222C-638F-4303-BE6A-7FED59E21FB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB502B29-FBC5-4984-A735-AA0B6DF4A58D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F759138-7079-471F-B30D-ED62351CFCB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAFD163-7FE7-48FB-8860-7B00B0FFA628"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C074DBE-AFC9-4094-A170-A31D79C139D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53520AA0-E5AB-450A-9D95-E075B552D2E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D77F95A-0059-4442-8D9D-AA7F101FBBE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC255D-6B0F-412D-B639-B9F9656E4839"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70450FAB-7886-418E-B471-8F16A68F9658"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4CFE80-223F-45DA-A9FB-03474F61E027"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29FF305-E773-497E-9C47-7D87383F1440"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8724300D-CBDC-4C66-BF78-038F838C06DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7283A58-EE8E-493F-8E51-C97FF87ECA16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E42F3A0-5FDB-4053-9EA5-D19B7061CDE8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101BF6DC-0F73-41E0-A0EE-BA1EA7397423"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC458D9-12B1-4CF1-980E-BC86E874BBA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202C65A-33FB-4742-8706-2BDD5B442030"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E7658F-A543-46F5-B79D-E0E25B7C574F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E7458-6655-4C86-85A9-81004FF38321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377932&group_id=14963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-12.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16046/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377932&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16046/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_user_page.php), or (3) the sort parameter to view_all_set.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.19.3",
            "matchCriteriaId" : "C952E055-D5AC-4C5E-9B7E-CB58247FB795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0_rc3",
            "matchCriteriaId" : "6E5E1AE7-A73F-43B2-AA6D-DB700E25880B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21FF02F-982C-429F-A14D-D6E18058DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9407F704-FF3C-4976-BE4C-A1DDC16715D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5173B32-1099-47C9-996B-56DB29456BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9B4611-C002-40F5-978C-BB90F1A893C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B347D6C8-4607-481D-863E-7F41E9868041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F434D16-4F09-4BCF-BD3E-9114876C2575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD480B-7CFB-4FD3-8E47-028F32AEF902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7C781D-F5D1-4C63-B6E3-230DEC80104E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0755FA0-2365-42B4-8E42-214D5BAD71A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35248DDA-D37D-4D72-9FF8-6813BA4C87BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67C54F4-4155-43DA-8E07-579249759989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C376D216-914A-4D96-8603-C6861B3E2857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A07B4C-CE12-4381-BFE4-CE79411F5069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB502B29-FBC5-4984-A735-AA0B6DF4A58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F759138-7079-471F-B30D-ED62351CFCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF83421-973D-4AC9-BDA3-4161B9CF2D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084BD5F4-37F8-4913-8045-769FD81F8C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B09948-A44C-47D8-A5EC-3873FF36F451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D72C1E-73E5-4F51-9D30-D28026939C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C469C66-B64B-49BD-9D1C-D15F0E9028EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28223A1-359F-434C-BAAA-82A5F310FA44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF1F18B-AE36-48F3-B784-5C97B3F2535E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAFD163-7FE7-48FB-8860-7B00B0FFA628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C074DBE-AFC9-4094-A170-A31D79C139D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53520AA0-E5AB-450A-9D95-E075B552D2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8462CB86-30B1-43D8-B306-271709423DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131A96BB-EF2E-4AE2-9334-91CA96222BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17DC6205-7016-40C3-921A-B5AEC8513CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721A536A-9626-4BD7-B84A-E3C4074F1217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D77F95A-0059-4442-8D9D-AA7F101FBBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89786096-AE1B-491B-8284-DBCC2F6112F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC255D-6B0F-412D-B639-B9F9656E4839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4CFE80-223F-45DA-A9FB-03474F61E027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8724300D-CBDC-4C66-BF78-038F838C06DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7283A58-EE8E-493F-8E51-C97FF87ECA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101BF6DC-0F73-41E0-A0EE-BA1EA7397423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC458D9-12B1-4CF1-980E-BC86E874BBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202C65A-33FB-4742-8706-2BDD5B442030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E7658F-A543-46F5-B79D-E0E25B7C574F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377932&group_id=14963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-12.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16046/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377932&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16046/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified \"port injection\" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack vectors.  NOTE: due to a lack of relevant details in the vendor changelog, which is the source of this description, it is unclear whether this is a duplicate of another CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3A1BAC-F777-413E-BFB7-972C687C2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377932&group_id=14963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-12.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16046/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377932&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16046/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via (1) the return parameter in login_cookie_test.php and (2) ref parameter in login_select_proj_page.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3A1BAC-F777-413E-BFB7-972C687C2D92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377932&group_id=14963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-12.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16046/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377932&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16046/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script in Mantis 1.0.0rc3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) view_type and (2) target_field parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3A1BAC-F777-413E-BFB7-972C687C2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377932&group_id=14963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-12.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16046/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377932&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16046/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0_rc3",
            "matchCriteriaId" : "6E5E1AE7-A73F-43B2-AA6D-DB700E25880B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21FF02F-982C-429F-A14D-D6E18058DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9407F704-FF3C-4976-BE4C-A1DDC16715D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5173B32-1099-47C9-996B-56DB29456BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9B4611-C002-40F5-978C-BB90F1A893C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B347D6C8-4607-481D-863E-7F41E9868041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F434D16-4F09-4BCF-BD3E-9114876C2575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD480B-7CFB-4FD3-8E47-028F32AEF902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7C781D-F5D1-4C63-B6E3-230DEC80104E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0755FA0-2365-42B4-8E42-214D5BAD71A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35248DDA-D37D-4D72-9FF8-6813BA4C87BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67C54F4-4155-43DA-8E07-579249759989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C376D216-914A-4D96-8603-C6861B3E2857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A07B4C-CE12-4381-BFE4-CE79411F5069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB502B29-FBC5-4984-A735-AA0B6DF4A58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F759138-7079-471F-B30D-ED62351CFCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF83421-973D-4AC9-BDA3-4161B9CF2D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084BD5F4-37F8-4913-8045-769FD81F8C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B09948-A44C-47D8-A5EC-3873FF36F451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D72C1E-73E5-4F51-9D30-D28026939C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C469C66-B64B-49BD-9D1C-D15F0E9028EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28223A1-359F-434C-BAAA-82A5F310FA44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF1F18B-AE36-48F3-B784-5C97B3F2535E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAFD163-7FE7-48FB-8860-7B00B0FFA628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C074DBE-AFC9-4094-A170-A31D79C139D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53520AA0-E5AB-450A-9D95-E075B552D2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8462CB86-30B1-43D8-B306-271709423DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131A96BB-EF2E-4AE2-9334-91CA96222BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17DC6205-7016-40C3-921A-B5AEC8513CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721A536A-9626-4BD7-B84A-E3C4074F1217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D77F95A-0059-4442-8D9D-AA7F101FBBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89786096-AE1B-491B-8284-DBCC2F6112F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC255D-6B0F-412D-B639-B9F9656E4839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4CFE80-223F-45DA-A9FB-03474F61E027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8724300D-CBDC-4C66-BF78-038F838C06DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7283A58-EE8E-493F-8E51-C97FF87ECA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101BF6DC-0F73-41E0-A0EE-BA1EA7397423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC458D9-12B1-4CF1-980E-BC86E874BBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202C65A-33FB-4742-8706-2BDD5B442030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E7658F-A543-46F5-B79D-E0E25B7C574F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E7458-6655-4C86-85A9-81004FF38321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18181/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mantis 1.0.0rc3 does not properly handle \"Make note private\" when a bug is being resolved, which has unknown impact and attack vectors, probably related to an information leak."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3A1BAC-F777-413E-BFB7-972C687C2D92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2005-11-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmcGui.exe in Sygate Protection Agent 5.0 build 6144 allows local users to obtain management control over the agent by executing the GUI (SmcGui.exe) and then killing the process, which causes the privileged management GUI to launch."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sygate_technologies:protection_agent:5.0_build_6144:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD1EACF-149B-42BB-A8B6-586F61D03442"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18175/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irmplc.com/advisory014.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419909/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15977/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18175/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irmplc.com/advisory014.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419909/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15977/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) 4.0 through 5.1 allows remote attackers to bypass filtering via a URL that does not include a .exe extension but returns an executable file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mimesweeper_for_web:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "947EF78C-0E17-4C8E-AD28-F0534A20107F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mimesweeper_for_web:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EAB5F2-58E0-4D58-9888-3AC2CEB0F580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mimesweeper_for_web:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5B5254-0907-4BF7-95E4-C3C867D446B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mimesweeper_for_web:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4446BA66-DC81-430B-B259-247E371054B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mimesweeper_for_web:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832A72B9-E466-4B4E-98D3-F7F4F8803B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mimesweeper_for_web:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D98B72C-99E5-4980-8305-EF40C469C33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mimesweeper_for_web:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33679F4E-A838-4356-9EE2-0E8BBC5D224D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.digitalarmaments.com/2005161283546323.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419904/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15982/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalarmaments.com/2005161283546323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419904/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15982/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to execute arbitrary SQL commands via (1) the setLang parameter in index.php and (2) unspecified search module parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:direct_news:direct_news:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4CA1B1-DC1A-48AD-8628-BE5E59E6F0B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/direct-news-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21854",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15957/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/direct-news-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15957/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Chatspot 2.0.0a7 module for phpBB allows remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatspot:chatspot:2.0.0a7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B051F0-3C5D-4412-A75F-F0BF3B98CB9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18184",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=379608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=379608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Chatspot 2.0.0a7 module for phpBB might allow remote attackers to impersonate other users via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatspot:chatspot:2.0.0a7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B051F0-3C5D-4412-A75F-F0BF3B98CB9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18184",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=379608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=379608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly DoPays) allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in (1) profile.htm, (2) card.htm, (3) bank.htm, (4) subscriptions.htm, (5) send.htm, (6) request.htm, (7) forgot.htm, (8) escrow.htm, (9) donations.htm, and (10) products.htm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:epay:3.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "FA7D0F6E-2880-4443-8B8C-FFEE9579DA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/alstrasoft-epay-enterprise-v30-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18153",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/alstrasoft-epay-enterprise-v30-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2023-11-07T01:58:09.077",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3345.  Reason: This candidate is a duplicate of CVE-2005-3345.  CVE-2005-3345 had already been assigned, but not published, before this candidate was created.  Notes: All CVE users should reference CVE-2005-3345 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LD_PRELOAD to modify expected function calls in the setuid application."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CA4642-65F9-459B-A89A-DEC2D375E6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8191863F-F89D-41E8-91F8-8FC1D3EB25D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7770880B-A0E2-49C8-A9BB-D217A6956400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633BCC6F-3E3E-43F9-B7B6-E83BCB4D5048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBF494D-6888-4A67-9E91-B7844C3FCD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDEA7D6-EB9E-465A-BA6B-E1584A413544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B37D1F24-B45D-4217-972E-61BED886275A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D3E1C8-ADCB-4A5F-8078-66942E36DF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FB980-F17F-43A9-8DA4-B2A99E29DF3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AF8092-4E2B-474C-9B5D-1252A2A3624C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298502A9-5E53-4CBE-BCCA-6D86EFDD3BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sublimation.org/scponly/#relnotes",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sublimation.org/scponly/#relnotes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T01:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enabled, allows local users to execute arbitrary applications via \"getopt\" style argument specifications, which are not filtered."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74980DC-9A5B-4959-8193-1D7BE85CAEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0863C35F-6061-426B-B656-E7B4A02D3E95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B689CE-F02B-4315-9E74-BC360EAFB937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C3262EA-F693-439B-922D-3F0DA09D0753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B37D1F24-B45D-4217-972E-61BED886275A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D3E1C8-ADCB-4A5F-8078-66942E36DF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FB980-F17F-43A9-8DA4-B2A99E29DF3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scponly:scponly:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298502A9-5E53-4CBE-BCCA-6D86EFDD3BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sublimation.org/scponly/#relnotes",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sublimation.org/scponly/#relnotes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T02:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B3EF74-4784-47A7-8994-21EF489F4008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893741D3-062B-45F9-B5A3-1B81058E7FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D53B5F-6AEE-4192-B838-E1DA92C59285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1883A98C-E595-4F3C-87BF-A63393F9F561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4B035-B73E-48E9-BBB9-83219F5D2A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9452C271-2812-4775-8396-394C642EACFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D351AF2-C0AB-4BB3-8692-677A3025A615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B900D9A7-913A-4176-90CF-C7C3B09A4261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B692910E-633D-4A88-B245-56A2B58DD4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86EE5DB-442B-4C78-8152-AF1048C6A974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B82A1A-56EB-41D5-8619-2A717E3A6ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64434BFC-DDC0-4C7D-B578-472B0610C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F28D9-B000-4C26-A911-5E1B8A867BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A123F78-A671-4FB5-AE78-83762E9323C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C34288-A326-4B71-99B0-DA9FFD28160F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=329387",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18218",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420353/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16061",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=305353",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=329387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420353/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=305353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.asp in NetDirect ShopEngine allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netdirect:shopengine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4423DC-5E81-4445-B133-2FD4BB8DD25A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18136",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epic_designs:eggblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "7644CAFE-C22A-4ACA-8E7C-0B7BE2D98A06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/eggblog-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/eggblog-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the q parameter, as used by the Keyword and Search fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epic_designs:eggblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "7644CAFE-C22A-4ACA-8E7C-0B7BE2D98A06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/eggblog-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/eggblog-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the \"user area\" in RWS Statistics Counter before 2.4.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rws:statistics_counter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "FB8C61A4-113B-43F0-9CA5-5D4278DFD727"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18158",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rws.com.ua/counter_service.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rws.com.ua/counter_service.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to inject arbitrary web script or HTML via the (1) RowKeyValue parameter in the PORTAL schema; and the (2) title and (3) content input fields when creating an forum article."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server_discussion_forum_portlet:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76EBAFA-A18B-408C-8A2B-BE0C222943AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113532626203708&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16048",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113532626203708&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a df_next_page parameter with a trailing null byte (%00)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server_discussion_forum_portlet:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76EBAFA-A18B-408C-8A2B-BE0C222943AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113532633229270&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16048",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113532633229270&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sign.php in codegrrl SimpBook 1.0, when html_enable is on, allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simpbook:simpbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F7BA32-C5AF-4CB9-B0E0-4A08567D5965"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113535570125766&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18256",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113535570125766&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) slsmgr and (2) slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:solaris_pc_netlink:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20468E0B-25E1-48A0-97B5-653FEEC0AB7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18230",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015408",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015409",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102117-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102122-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102117-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102122-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long APPE command.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BBB39E-C916-49B0-B316-B67726CB62D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18245",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in an openforum action (openforum.php) in index.php, (2) cat parameter in getfile.php, and (3) target parameter in download_now.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev:dev_web_management_system:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B658A3-65E9-473F-871B-C963E14B9889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/dev_15_sql_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18239",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015410",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420253/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16063",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/dev_15_sql_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420253/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) ENTER_ARTICLE_TITLE, (2) SPECIFY_ZONE, (3) ENTER_ARTICLE_HEADER, and (4) ENTER_ARTICLE_BODY indices in the language array parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev:dev_web_management_system:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B658A3-65E9-473F-871B-C963E14B9889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/dev_15_sql_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18239",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015410",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420253/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16063",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/dev_15_sql_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420253/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the (1) lang_settings and (2) language parameters in (a) accounts/inc/include.php and (b) admin/inc/include.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deerfield:visnetic_mail_server:8.3.0_build1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C966349-2C04-4F69-836E-423272DCD8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A1B67D-FE00-4E52-9947-577A0552C01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.3.0r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C5CDAE-78A6-4F09-963D-B066795966B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113570229524828&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17046",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-62/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420255/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16069",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113570229524828&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-62/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420255/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte (%00) in the lang parameter, possibly due to a directory traversal vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deerfield:visnetic_mail_server:8.3.0_build1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C966349-2C04-4F69-836E-423272DCD8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A1B67D-FE00-4E52-9947-577A0552C01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.3.0r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C5CDAE-78A6-4F09-963D-B066795966B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113570229524828&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17046",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-62/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420255/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16069",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113570229524828&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-62/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420255/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter to mail/settings.html before it is stored in a database, which can allow remote authenticated users to include arbitrary PHP code via a URL in a modified lang_settings parameter to mail/index.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deerfield:visnetic_mail_server:8.3.0_build1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C966349-2C04-4F69-836E-423272DCD8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A1B67D-FE00-4E52-9947-577A0552C01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.3.0r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C5CDAE-78A6-4F09-963D-B066795966B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113570229524828&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17046",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-62/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420255/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16069",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113570229524828&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-62/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420255/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout and layout_settings variables when an unrecognized HTTP_USER_AGENT string is provided, which allows remote attackers to access arbitrary files via a request with an unrecognized User Agent that also specifies the desired default_layout and layout_settings parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deerfield:visnetic_mail_server:8.3.0_build1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C966349-2C04-4F69-836E-423272DCD8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A1B67D-FE00-4E52-9947-577A0552C01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.3.0r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C5CDAE-78A6-4F09-963D-B066795966B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113570229524828&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17046",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-62/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420255/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113570229524828&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-62/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420255/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-28T19:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linuxbox.org/pipermail/funsec/2006-January/002455.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18255",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18364",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18415",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015416",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-001.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://vil.mcafeesecurity.com/vil/content/v_137760.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.f-secure.com/weblog/archives/archive-122005.html#00000753",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/181038",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/912840.mspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420288/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420351/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420357/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420367/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420378/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420446/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420546/30/7730/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420664/30/7730/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420682/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420684/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420687/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420773/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16074",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-362A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-005A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3086",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linuxbox.org/pipermail/funsec/2006-January/002455.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-001.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://vil.mcafeesecurity.com/vil/content/v_137760.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.f-secure.com/weblog/archives/archive-122005.html#00000753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/181038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/912840.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420288/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420351/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420357/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420367/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420378/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420446/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420546/30/7730/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420664/30/7730/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420682/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420684/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420687/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420773/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA05-362A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-005A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3345",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-28T22:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rssh 2.0.0 through 2.2.3 allows local users to bypass access restrictions and gain root privileges by using the rssh_chroot_helper command to chroot to an external directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rssh:rssh:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3708773-21D3-4A11-A259-B9E8E81F916E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rssh:rssh:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F835C18-5D15-43FD-B009-E7332E51A8AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rssh:rssh:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58936DD-0289-4B93-B351-CB1A3F4D54E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rssh:rssh:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0624666-0D2F-40FB-A9B2-5C868D6F3515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rssh:rssh:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB6E21A-9555-4655-B23C-998FFCFE83F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rssh:rssh:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC1BDE2-DFD4-4A3C-93E7-5E67C53AFCB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=344424",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18224",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18237",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/308",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-15.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.pizzashack.org/rssh/security.shtml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16050",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23854",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=344424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.pizzashack.org/rssh/security.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the loginid parameter, a different vulnerability than CVE-2005-3875."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprise_heart:enterprise_connector:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C66E87-A81F-4779-A8A7-B3DF46799247"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113510305413525&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419895",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15984",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113510305413525&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to cause a denial of service via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:adtran:netvanta:3xxx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093D7E4E-6DCC-4BBB-B6B2-2A679E95CC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:adtran:netvanta:4xxx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEA4735-EC77-4179-86DC-C8BF702CCD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:adtran:netvanta:5xxx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1B393E-6DC3-4F5F-B24C-8207245C74E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18179",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.adtran.com/support/isakmp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.adtran.com/support/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unknown impact via format string specifiers in crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:adtran:netvanta:3xxx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093D7E4E-6DCC-4BBB-B6B2-2A679E95CC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:adtran:netvanta:4xxx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEA4735-EC77-4179-86DC-C8BF702CCD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:adtran:netvanta:5xxx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1B393E-6DC3-4F5F-B24C-8207245C74E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18179",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.adtran.com/support/isakmp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.adtran.com/support/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unknown impact via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:adtran:netvanta:3xxx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093D7E4E-6DCC-4BBB-B6B2-2A679E95CC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:adtran:netvanta:4xxx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEA4735-EC77-4179-86DC-C8BF702CCD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:adtran:netvanta:5xxx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1B393E-6DC3-4F5F-B24C-8207245C74E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18179",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16028",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.adtran.com/support/isakmp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.adtran.com/support/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (Build 4.4.000 Oct 26 2005) allow remote attackers to inject arbitrary web script or HTML by sending (1) the href parameter to index.fts, or the param1 parameter to (2) /domains/index.fts, (3) /config/licence.fts, or (4) /config/systemacl.fts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:floosietek:ftgate:4.4_build_4.4.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830822CA-16C7-4B47-B048-ECA3E90EFB31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015399",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15972",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.000 Oct 26 2005) allow remote attackers to execute arbitrary code via format string specifiers in the (1) USER, (2) PASS, and (3) TOP commands to the POP3 server; and the (4) LIST and (5) AUTHENTICATE commands to the IMAP server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:floosietek:ftgate:4.4_build_4.4.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830822CA-16C7-4B47-B048-ECA3E90EFB31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15972",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in index.fts in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.000 Oct 26 2005) allows remote attackers to execute arbitrary code via a long tzoffset value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:floosietek:ftgate:4.4_build_4.4.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830822CA-16C7-4B47-B048-ECA3E90EFB31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15972",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.80 and 3.0, FortiClient 2.0,; and FortiManager 2.80 and 3.0 allow remote attackers to cause a denial of service (termination of a process that is automatically restarted) via IKE packets with invalid values of certain IPSec attributes, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the vendor advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:fortinet:fortios:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2815EF-253B-4E3D-BFA7-265021783158"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:fortinet:fortios:2.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "767E66F6-7AF3-4541-8797-D7503D852044"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:fortinet:fortios:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631ED29C-890E-4C53-8ADB-0061125FEEDF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fortinet:forticlient:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "343CE116-E1F3-4D0B-BA0C-E47991381DE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fortinet:fortimanager:2.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17E0546-1109-46F9-96A3-B88A2BA0AB0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fortinet:fortimanager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4009E181-9A4D-42FF-A7C6-4267E54097E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/VU226364.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/VU226364.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myezshop:myezshop_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD6764F-3717-4F0A-850C-75BB48A4F39F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18086",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) GroupsId and (2) ItemsId parameters in admin.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myezshop:myezshop_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD6764F-3717-4F0A-850C-75BB48A4F39F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18086",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute arbitrary code via a URL in the config[basedir] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plogger:plogger:-:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D44A681E-87BB-4F3C-A447-F959C6C0CF33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeconnects.webcindario.com/index.php?option=com_content&task=view&id=41&Itemid=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://masendav.com/~duke/PloggerChanges_files/FileComparisonReport1.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015380",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.plogger.org/two-point-one/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15992",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeconnects.webcindario.com/index.php?option=com_content&task=view&id=41&Itemid=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://masendav.com/~duke/PloggerChanges_files/FileComparisonReport1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.plogger.org/two-point-one/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paperthin:commonspot_content_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "5F4B06D6-933F-41CC-9D80-26B19C3C2AD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paperthin:commonspot_content_server:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B65A6B89-32F0-4774-BA1F-698CE336E38F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paperthin:commonspot_content_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBABD66E-0CD4-4436-9A34-CB1DEC4EE07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paperthin:commonspot_content_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04FBE572-5702-490B-A55E-6CCF87A91B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paperthin:commonspot_content_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B84A930-A286-4C54-BB43-E32D462BAADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18257",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21931",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16071",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paperthin:commonspot_content_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "5F4B06D6-933F-41CC-9D80-26B19C3C2AD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paperthin:commonspot_content_server:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B65A6B89-32F0-4774-BA1F-698CE336E38F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paperthin:commonspot_content_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBABD66E-0CD4-4436-9A34-CB1DEC4EE07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paperthin:commonspot_content_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04FBE572-5702-490B-A55E-6CCF87A91B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paperthin:commonspot_content_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B84A930-A286-4C54-BB43-E32D462BAADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18257",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) COUNTRYNAME, (2) EMAIL, and (3) FUELAP_TEMPLATENAME parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fatwire:updateengine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "BA05A51D-0A09-41A3-8709-DF306CC02837"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/fatwire-updateengine-62-multiple-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18259",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16073",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/fatwire-updateengine-62-multiple-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in an unspecified input form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B21484-6747-4724-A0D2-6A6A896991D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7340336-C0CD-4A0E-84B3-D4F8F79C7672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3BBEA1-5991-4870-AC7F-043223876BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA71817-96F5-49F7-B725-357E591C1F29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18213",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-025_e/01-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-025_e/01-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B21484-6747-4724-A0D2-6A6A896991D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7340336-C0CD-4A0E-84B3-D4F8F79C7672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3BBEA1-5991-4870-AC7F-043223876BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA71817-96F5-49F7-B725-357E591C1F29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18213",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-025_e/01-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-025_e/01-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple HTTP response splitting vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to inject arbitrary HTTP headers via unknown attack vectors in an unspecified input form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B21484-6747-4724-A0D2-6A6A896991D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7340336-C0CD-4A0E-84B3-D4F8F79C7672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3BBEA1-5991-4870-AC7F-043223876BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA71817-96F5-49F7-B725-357E591C1F29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18213",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-025_e/01-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-025_e/01-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Day Communique 4 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:day:communique:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83353336-E213-4598-8489-C9918C203554"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/communiqu-4-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18258",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/communiqu-4-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Electric Sheep 2.6.3 client allows local users to execute arbitrary code via a long window-id parameter. NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundaries.  Therefore this may not be a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_draves:electric_sheep:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250A9C45-501D-4E7E-9F56-6BC201C09CE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://draves.org/HyperNews/get.cgi/flame/1478.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://draves.org/HyperNews/get.cgi/flame/1478/1.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://electricsheep.org/index.cgi?&menu=talk",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://electricsheep.org/release_notes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420160/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://draves.org/HyperNews/get.cgi/flame/1478.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://draves.org/HyperNews/get.cgi/flame/1478/1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://electricsheep.org/index.cgi?&menu=talk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://electricsheep.org/release_notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420160/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Electric Sheep 2.6.3 does not require authentication or integrity checks from the server to the client, which allows remote attackers to download and display arbitrary MPEG movie files via (1) DNS spoofing, (2) a URL on the command line, or (3) a URL in the configuration file. NOTE: the same attack vectors apply to common web browsers that are able to communicate with untrusted web servers, and other problems related to DNS design issues.  Therefore this may not be a specific vulnerability.  However, a client would reasonably expect to receive content only from the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_draves:electric_sheep:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250A9C45-501D-4E7E-9F56-6BC201C09CE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420161/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420161/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows \"remote code execution in the Web browser\" via unspecified attack vectors, probably related to cross-site scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A348CABB-CD52-4C55-9653-154C75605CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA74505A-3550-4646-B2D6-6E6D0924023D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC77D81A-12AA-4948-9970-9461289DC648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A10ABE-E778-4133-B1AA-05FE6829A34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CB97F9-9DF6-4493-A245-F4901F4DD22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C862131A-64D8-4C2D-815F-19971D63AF00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18250",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015422",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22119",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3084",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application crash) via a callsign that is not followed by a NULL (\\0) character."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.4",
            "matchCriteriaId" : "E493369E-9E6B-4EE3-B152-E444B143603B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7c_release_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39405043-3AC2-4F05-A4C1-3BE195B52629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7c_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B84161-C71D-4628-96BB-53AB309A06CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7c_release_2_patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC41F6C1-C086-4566-AD15-3A168D84DB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7c_release_2_patch_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1426A226-D457-4444-80CA-9A53C50A0516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7c_release_2_patch_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DB4C95-10FA-41A1-9788-FE5FA400F1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7d1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4189A91-DB01-4C61-BB88-2020FAE9C589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7d2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D72429-55F8-4432-9B1E-D5867AF19CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7d3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3055C-9706-4165-AB74-94AAB1D2BAD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7d4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286A8DE6-FD52-42F4-A6AF-36799CEECD2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7d5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E43F75-822D-4DF5-8CBB-854B069D1D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7d6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE314C04-8ABC-4543-A963-76B80FD3675F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7d7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF0820D-E31F-4308-8A2A-413B64B4AEDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7d8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3375EC5B-7A6C-4DCC-8897-5D0A5F9673F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7d9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B96CCB7A-A14C-41BF-B315-7BFF1D8343F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2522F8-7AC4-4058-AF76-61177589B278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0195ABCA-BDDB-41E7-BE34-8A7EAEDC063E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E416437-2528-405A-A4F5-132399EBB6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299E6D69-CED1-403E-ACA0-1B1B1923CE99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D9A487-6B55-4D97-9B64-DDE908420817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7g0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5231E037-D966-4803-8F6B-E1F4C42705AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.7g2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A47E0BE-0A13-4FB1-B16B-677F2A7C9962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C98A2DE-C6BD-42ED-B3E0-F0D2573BE3A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDE88AC-67A8-4575-85FC-03E1CF217899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8250CB-BA59-490D-A135-288D3D5FB695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6788DBC8-080A-45F8-AF06-9F3CAF699390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:1.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD22237-0800-4082-9DFA-656751D796C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "144036C4-54EF-40E9-8ACA-1C4E9292C546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzflag:bzflag_server:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD44A73B-ABF0-45C0-91C2-1F02E17AD6A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/bzflagboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/%2Acheckout%2A/bzflag/bzflag/ChangeLog?rev=2.103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18238",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015418",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16066",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/bzflagboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/%2Acheckout%2A/bzflag/bzflag/ChangeLog?rev=2.103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-29T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18229",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015414",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0156.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/3095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsurveyor:phpsurveyor:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA0CC28-1114-4CFC-B445-2FDF5D972AD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18167",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=381050&group_id=74605",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpsurveyor.org/mantis/view.php?id=286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpsurveyor.org/mantis/view.php?id=287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=381050&group_id=74605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpsurveyor.org/mantis/view.php?id=286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpsurveyor.org/mantis/view.php?id=287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3 allow remote attackers to cause a denial of service (crash or hang of server components that are automatically restarted) via a long crafted string on (1) port 7800 (the GUI Server port) or (2) port 7801 (the Device Server port)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:netscreen-security_manager_2004:*:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD7A53B-4A8D-412D-AB74-B185DE4B63BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:netscreen-security_manager_2004:*:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA60F85-5421-4CC7-9B04-F405044DA0CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1281.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015417",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1281.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dream4:koobi:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC11BFF-3C7D-4146-90C9-552E02884EE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/16078",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which allows local users to obtain the passcode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spb:kiosk_engine:1.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBC5FAF-D81F-4D4E-9AA3-01B1A1FC5F1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.airscanner.com/security/05083101_kioskpass.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420258/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.airscanner.com/security/05083101_kioskpass.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420258/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-30T11:03:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via (1) removable media containing a program that will execute because of the autorun setting and (2) applications that are able to invoke other applications, as demonstrated by a file: URL specifying a .exe file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spb:kiosk_engine:1.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBC5FAF-D81F-4D4E-9AA3-01B1A1FC5F1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.airscanner.com/security/05083102_kioskremove.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420450/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.airscanner.com/security/05083102_kioskremove.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420450/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.10.2",
            "matchCriteriaId" : "AA550D1F-C383-4AD1-9648-18E609159214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:5.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5364C4-C5A5-4621-AC56-BB845BEF8A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9180C95-FF6F-4A0C-9DE0-DFF6D8387698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FA1404-9FA2-4379-96BC-6D7970C0EAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EABEE7AB-7C45-473E-9873-0423F2249F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F66F57-6AEB-4E3C-B148-BC7D11E1EBEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611AD3E5-708F-46BB-B21D-09598E1C4771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD59AEEB-D524-4337-8962-B29863CBC889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15245AF-B9B6-4D46-A901-A781FC0BAF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A3E1EB-89A5-4326-8977-9B462065C39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD607D2-2B07-474B-A855-2C3319B42CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4B4665-84C4-4129-9916-ABAC61B81FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4131A4A5-5D67-4522-9A6E-E708815B5B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C30DD0-C957-44BA-B44C-7B424E664B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E24A5-A864-4F42-A053-2FDA9D09A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0993A56D-3A68-464A-B580-BE2EC3846F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF6186E-90D1-4D22-A469-0E955D5F1EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7323E750-C596-46FC-AA85-9271CC9C2CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A53A0AC-B047-4E60-A7E6-2E2710379F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6F8A23D-2106-4803-AD52-DCB42FB51E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE1799-48D4-491A-AB1E-25169ED99F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etl:delegate:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6584618-DFEC-416F-8335-7106EA25BE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etl:delegate:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18763780-3419-4EFE-ABC7-0BE51CC90881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7EA693-9873-4201-B66D-D0AC08E7F560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022F8E8E-F6A1-4782-82D0-686E6FADCF44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E269F0-8CFD-45DB-AF82-F9F57EDD0D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752CC26D-33D2-43F1-A43B-E101553895C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317134CF-981A-44CC-B068-BA762AED5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20BAB657-CAB8-4473-9EE5-5F725F2EB1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D1387B-91E2-4AC8-B387-B50F4D7DFDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19028501-E538-4F36-8DF7-3D2A76D86895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7173317-9F5E-4F80-A957-02084B8DC8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297935D9-E108-4DB1-B4C8-2AC43DB6EA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "770BBF88-63D2-4AD6-B28F-5664DFFD746E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B16588-35CA-4640-8FA8-BC63D91C7416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA35F28-CAA5-4C03-ABB8-4647537CC8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAC824F-2031-4427-BF38-C32A7644D2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7884CCA6-2031-41DB-860D-AF18047AF617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\ndnrd, dnrd, 2.10"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.16",
            "matchCriteriaId" : "33D4F84E-71E7-4D95-B0FF-D7254322F3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8A0122-81ED-4951-BE34-9E8240FD297C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7BEE9-06FF-487D-B77D-5F05AA5C6324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C1E89A2-4993-4208-B67F-52B08A6F1BDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B340CA64-2358-46E6-8F65-725B6ACE77D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADBB8B1-C732-49BA-9270-F5551A9E2D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C62126-2E61-4532-BFA2-D66FCCC8C9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4472A3D7-8E17-4D80-AA2D-724C74EEF9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07CDE603-2A52-4C6F-B6A3-563D516BB4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3E5668-9B66-4C80-8C38-6FF01C342182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB793844-A30A-4F97-954B-690083E77430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B636157B-E627-4EF1-B6C2-640648C001D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34EEA40F-CD68-4AE9-A305-402BFBEEA23B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FFBCCC-3595-4148-A3CD-28FD390FB786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7722F1-D913-42A0-93EA-48140F47F221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E26E04-71AA-4A00-B0EE-9A04A63ADBBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A413F4D-123A-4AA6-A097-9900F9B39817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:2.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F03070D-C76A-4A31-AA0C-E32442EBE83B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain \"ptrace corner cases\" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.alioth.debian.org/pipermail/kernel-svn-changes/2005-August/002597.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openvz.org/news/updates/kernel-022stab045.1-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gelato.unsw.edu.au/archives/linux-ia64/0409/11073.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148862",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155283",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.alioth.debian.org/pipermail/kernel-svn-changes/2005-August/002597.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openvz.org/news/updates/kernel-022stab045.1-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gelato.unsw.edu.au/archives/linux-ia64/0409/11073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0489",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The /proc handling (proc/base.c) Linux kernel 2.4 before 2.4.17 allows local users to cause a denial of service via unknown vectors that cause an invalid access of free memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18173",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nLinux, Linux kernel, 2.4.27"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0528",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2023-11-07T01:57:16.670",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2003-0985.  Reason: This candidate is a duplicate of CVE-2003-0985.  Notes: All CVE users should reference CVE-2003-0985 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecified attack vectors related to the fan control unit (FCU) driver."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.7",
            "matchCriteriaId" : "DE052A66-B94C-43F8-ADF7-523568FDB7D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=301324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=301324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY_PATH environment variable that references a malicious library."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FCCA0BA-C9AB-4E79-B9B8-4BB31BE09296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CoreGraphics Window Server in Mac OS X 10.4.1 allows local users with console access to gain privileges by \"launching commands into root sessions.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=301742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2005/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=301742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2005/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted packets, as demonstrated by \"OpenSSL ASN.1 brute forcer.\"  NOTE: this issue might overlap CVE-2004-0079, CVE-2004-0081, or CVE-2004-0112."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "1D663FA7-C80B-4076-8A04-68D27660A8DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cirt.dk/advisories/cirt-32-advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/8732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/ASN.1-Brute.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-32-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/8732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/ASN.1-Brute.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "This vulnerability is addressed in the following product update:\r\nhttp://www.novell.com/products/consoles/",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Based on our research we believe that the &quot;OpenSSL ASN.1 brute forcer.&quot; is actually exploiting flaws CVE-2003-0543, CVE-2003-0544, CVE-2003-0545.  Those issues are all addressed in Red Hat Enterprise Linux and therefore CVE-2005-1730 is a duplicate assignment.",
        "lastModified" : "2007-04-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file_name parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gforge:gforge:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF5AB4B-9002-49FD-A02E-9537C73D97ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gforge:gforge:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE3B595-4902-4A29-83CC-B05932605B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gforge:gforge:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C5E4D8-0B12-4026-9818-173ADA040C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gforge:gforge:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11701B3-7DF7-4E2A-8D6C-8C97970B1145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111695779919830&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/13845",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13716",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111695779919830&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a direct request to /mailboxesdir/username@domainname. NOTE: Sun and Apache dispute this issue.  Sun states: \"The report makes references to source code and files that do not exist in the mentioned products."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:javamail:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D05527-847C-4630-9667-F41DD78917DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:javamail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "398E46A2-D9BF-4AF6-B068-A28233B76ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:javamail:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB65E60-8259-4C08-AC3B-7D3FE51F42F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111697083812367&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111697083812367&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not believe this is a security issue; this is a deliberate circumvention of the Javamail API. The Javamail API provides a comprehensive and secure method to retrieve mail. In this example, the author retreives the message directly from the mail directory on the\nfilesystem.  Even if the user insists on using this incorrect way of accessing mail, then the\npermissions set by the dovecot and tomcat packages are enough to protect against\ndirect access to most of the files listed in the bug report.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter.  NOTE: Sun and Apache dispute this issue.  Sun states: \"The report makes references to source code and files that do not exist in the mentioned products."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache_tomcat:apache_tomcat:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42077DB7-35C3-4350-8612-6C3F61DA394B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:javamail:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D05527-847C-4630-9667-F41DD78917DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:javamail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "398E46A2-D9BF-4AF6-B068-A28233B76ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:javamail:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB65E60-8259-4C08-AC3B-7D3FE51F42F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:javamail:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5102D9EA-DF23-473D-82A1-717FA9083635"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111697083812367&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13753",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111697083812367&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in poll_vote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativer_pfad parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_poll_creator:php_poll_creator:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C1A882-53C9-40CA-84BC-B7DD79EEED5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111704581329860&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15510",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014061",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16846",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.svt.nukleon.us/lab/svadvisory6.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111704581329860&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/16846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.svt.nukleon.us/lab/svadvisory6.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1918",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:tar:1.13.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CD7558-833D-473B-99A4-854FB6CC6C9A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "409E324A-C040-494F-A026-9DCAE01C07F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
            "matchCriteriaId" : "6474B775-C893-491F-A074-802AFB1FEDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*",
            "matchCriteriaId" : "81B543F9-C209-46C2-B0AE-E14818A6992E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "DB89C970-DE94-4E09-A90A-077DB83AD156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "84A50ED3-FD0D-4038-B3E7-CC65D166C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18988",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20397",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015655",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0195.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430297/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/5834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430297/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/5834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1919",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2023-11-07T01:57:31.810",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the fpr parameter to the deleteKey function in gpg_keyring.php, as called by (a) import_key_file.php, (b) import_key_text.php, and (c) keyring_main.php; and (2) the keyserver parameter to the gpg_recv_key function in gpg_key_functions.php, as called by gpg_options.php.  NOTE: this issue may overlap CVE-2007-3636."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:gpg_plugin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "EE0468B4-8DC6-4247-B998-70A346A8EB85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/37923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/37924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26035",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200708-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-July/001710.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/473370/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/24874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/35355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/35364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/37923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/37924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200708-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-July/001710.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/473370/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/24874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/35355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/35364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via \"..\" (dot dot) sequences in a request to the Report service (TCP 8022)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_small_business:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F615B93-3009-4862-BE44-83A5724A658C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cirt.dk/advisories/cirt-40-advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15500",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-14/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015141",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15291",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cirt.dk/advisories/cirt-40-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/15500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-14/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with that ID to execute arbitrary code or cause a denial of service by modifying those files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:a:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFAEE62-246B-4687-8B9A-A6C142D72308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:b:*:*:*:*:*:*",
            "matchCriteriaId" : "21946EC8-3327-4AE6-9A0D-09C1EBCC7683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netmail:3.5.2:c:*:*:*:*:*:*",
            "matchCriteriaId" : "0B922B34-BBCA-4791-92EF-43ADDA7E2473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15763",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/17456",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/15763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/17456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Apple Mac OS X kernel before 10.4.2 allows remote attackers to cause a denial of service (kernel panic) via a crafted TCP packet, possibly related to source routing or loose source routing."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.1",
            "matchCriteriaId" : "FF85B7AF-AD76-40EA-BB6C-1236E0188129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=301948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2005/Jul/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/17880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=301948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2005/Jul/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/17880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via a large number of large DNS packets with the Z and QR flags cleared."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7EA693-9873-4201-B66D-D0AC08E7F560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022F8E8E-F6A1-4782-82D0-686E6FADCF44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E269F0-8CFD-45DB-AF82-F9F57EDD0D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752CC26D-33D2-43F1-A43B-E101553895C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317134CF-981A-44CC-B068-BA762AED5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20BAB657-CAB8-4473-9EE5-5F725F2EB1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D1387B-91E2-4AC8-B387-B50F4D7DFDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19028501-E538-4F36-8DF7-3D2A76D86895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7173317-9F5E-4F80-A957-02084B8DC8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297935D9-E108-4DB1-B4C8-2AC43DB6EA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "770BBF88-63D2-4AD6-B28F-5664DFFD746E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B16588-35CA-4640-8FA8-BC63D91C7416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA35F28-CAA5-4C03-ABB8-4647537CC8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAC824F-2031-4427-BF38-C32A7644D2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7884CCA6-2031-41DB-860D-AF18047AF617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906D87C-5557-4FC0-BBF3-7169EF35DEAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014557",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=482568",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.FreeBSD.org/ports/portaudit/e72fd82b-fa01-11d9-bc08-0001020eed82.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=482568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.FreeBSD.org/ports/portaudit/e72fd82b-fa01-11d9-bc08-0001020eed82.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\ndnrd, dnrd, 2.19.1\r\nThis vulnerability affects all versions of dnrd prior to 2.19.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to cause a denial of service (infinite recursion) via a DNS packet that uses message compression in the QNAME and two pointers that point to each other (circular buffer)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20BAB657-CAB8-4473-9EE5-5F725F2EB1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D1387B-91E2-4AC8-B387-B50F4D7DFDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19028501-E538-4F36-8DF7-3D2A76D86895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7173317-9F5E-4F80-A957-02084B8DC8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297935D9-E108-4DB1-B4C8-2AC43DB6EA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "770BBF88-63D2-4AD6-B28F-5664DFFD746E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B16588-35CA-4640-8FA8-BC63D91C7416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA35F28-CAA5-4C03-ABB8-4647537CC8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAC824F-2031-4427-BF38-C32A7644D2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7884CCA6-2031-41DB-860D-AF18047AF617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906D87C-5557-4FC0-BBF3-7169EF35DEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ABE899F-8C96-4C64-8916-902846DFBFB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115CFC38-1CDB-456E-AC0A-FF02D50A6BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C237BF63-7580-47D3-A6ED-F20A040E132B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D93AD9-D6FF-42F9-82E3-76D4FAC077A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78082473-E735-4879-9200-0EF501C4BBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94B9867-D6DB-4CD1-9E87-7FBA6CABED61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248AB0D6-21FD-463F-BA22-CAD623D81D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA3413D-333E-418C-A715-50D05B1FB148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F1C429-978E-4A8E-8356-0AF790D2F487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BE4CA9-79C9-4220-BAC3-9267AA0018BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2585141E-AB34-4D8B-B0DC-B5E38C4B0ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E910C79-9F6A-4C39-BCCD-116EC2941DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnrd:dnrd:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CBFC5B-3F05-4030-880E-3F7060ED1A52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=482568",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.FreeBSD.org/ports/portaudit/e72fd82b-fa01-11d9-bc08-0001020eed82.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=482568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.FreeBSD.org/ports/portaudit/e72fd82b-fa01-11d9-bc08-0001020eed82.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2340",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.3",
            "matchCriteriaId" : "02607C2D-80F9-454B-A82C-0F892826AA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0392.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0398.html",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0402.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/332",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securitytracker.com/id?1015463",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-41-advisory.pdf",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/629845",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/687201",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22333",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22334",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22335",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421547/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421566/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16212",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-011A.html",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24054",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0398.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0402.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cirt.dk/advisories/cirt-41-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/629845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/687201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421547/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421566/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-011A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2341",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service allows remote attackers to cause a denial of service (hang) via an e-mail attachment with a crafted TIFF file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_attachment_service:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "6264B96E-29D0-402B-AB80-A553C1F3A561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "903C5597-9F41-43C3-B311-F551D12339A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18277",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015426",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/570768",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16098",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0011",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/570768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2342",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Research in Motion (RIM) BlackBerry Router allows remote attackers to cause a denial of service (communication disruption) via crafted Server Routing Protocol (SRP) packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7A2FFD-C840-459C-95C2-92FEDF341D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5E40FD-5EC5-4D71-8B53-805A7399675D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_router:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "19D60287-6FB4-4F5E-A863-1E092D5F637E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18277",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securitytracker.com/id?1015427",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/728075/728850/728215/?nodeid=1167898",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/392920",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16100",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0011",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/18277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/728075/728850/728215/?nodeid=1167898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/392920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2343",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Research in Motion (RIM) BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service (hang) via a Java Application Description (JAD) file with a long application name and vendor string, which prevents a browser dialog from being properly dismissed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_desktop_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9477C1A-2072-4362-BD67-27C721E7E805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_device_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500A2D65-7220-4252-856F-052EA40EFB12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7100g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE6C1404-8B96-460C-9060-04C402E23AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7100i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08E215F-7EF3-4012-8D14-689EE1550A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7100r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CD32AF-AB92-4215-9062-BB3E97444518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7100t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE29076-C3FD-475A-AE95-41E78596AC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7100v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD365609-508D-4501-86DB-2D510F0F1071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7100x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6142B7E1-002A-4BA5-A062-2614029FCA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7105t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBCA036-2636-451D-A03F-20D4B2837D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7130e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA64687-7D57-4630-A948-A4C510164AEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7230_3.7.1_.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC44A87-CE11-48F8-BBF1-7971784D4A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7230_3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7FE590B-9A8A-4839-91F9-941B192EA2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7230_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5080187-373E-47FE-9970-30049690E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E4214E-8D31-4E0C-8266-89D228605A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7280:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5038858C-709E-4C0D-80A9-41E8A3D07633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F290329-09CC-40C8-A928-CD66841B68D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8485224-909C-440C-93BB-B059E89CBB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD18A44-5A92-41DF-B67E-A4EF010BCE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5FCD19-F244-4E53-A843-AF4D053C3680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:7780:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30142764-C686-432F-BFA4-F7D42C232CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:8700c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DC35A6-D335-4968-81AD-5A4FE982F550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:8700f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7A8585-EE80-46F4-95A6-229A0A34D3BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry:8700r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC877CE-41BC-49CF-9381-209EA4222AEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015428",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/7925/8142/?nodeid=1167791",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/829400",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16099",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0011",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securitytracker.com/id?1015428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/7925/8142/?nodeid=1167791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/829400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2344",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics (PNG) file that triggers a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7A2FFD-C840-459C-95C2-92FEDF341D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5E40FD-5EC5-4D71-8B53-805A7399675D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F49149-8B10-4C98-AD6F-066CD05FB637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18393",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/728075/728850/728215/?nodeid=1167794",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/646976",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16204",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0127",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24063",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/18393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/728075/728850/728215/?nodeid=1167794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/646976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the \"Notes\" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D7DD7B-CA90-44A5-9B7B-4A4985150689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63D40DF-C6F3-4502-9816-939265F10532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957BA698-9D48-4906-9FF3-584927C978B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94646433-DE15-4214-9C78-7D1DAB5A12D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19537",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27342",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-29/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21246773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/383092",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449126/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4093",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-29/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21246773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/383092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449126/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 7.0.2."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter or (2) name field when entering a session or sending a message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:liveresponse:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE565273-2E54-409C-A1C7-3EB21C7C72DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112274359718863&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00092-07302005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18395",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18397",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14425",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112274359718863&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00092-07302005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) date parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:liveresponse:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE565273-2E54-409C-A1C7-3EB21C7C72DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112274359718863&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00092-07302005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112274359718863&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00092-07302005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users and possibly remote attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:liveresponse:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE565273-2E54-409C-A1C7-3EB21C7C72DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112274359718863&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00092-07302005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112274359718863&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00092-07302005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include scripts, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:liveresponse:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE565273-2E54-409C-A1C7-3EB21C7C72DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112274359718863&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00092-07302005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18399",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14425",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112274359718863&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00092-07302005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the target userid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcxp_toppe_cms:pcxp_toppe_cms:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B23DFF2-05F3-4268-A432-CA3FA3AE7260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcxp_toppe_cms:pcxp_toppe_cms:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F304B1-CE43-4A25-959D-B86A9779BEB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112274251601106&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112274251601106&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via the msg variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pc-experience:pc-experience:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03974E87-5232-40CC-8946-6E1A6F653CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pc-experience:pc-experience:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D0FD4D-8878-4815-953A-F0240C124655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toppe:toppe_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37963268-9693-497C-BDA8-ECAC87F5E8DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112274251601106&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112274251601106&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the auth_user function in admin.php in OpenBook 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbook:openbook:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA590D2-B4B1-478A-956E-3E35906F281B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112291283419785&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014606",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18475",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14444",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112291283419785&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3376760A-F66D-4AEA-8A8E-3ABEB39D67C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3BBA56E-6A81-4977-8C87-CD2A19C777B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7982E45-2702-4120-87C3-0CB3F9DA0897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B531FC5-154F-4858-BB5C-F1D3F752E2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12877C25-B604-450A-A527-4C223DC3DCEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3CD7BBB-5193-4159-AA56-554EFDBECE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE389FEE-6F5F-4950-988F-42A26D19EAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F72E477-4851-4C6E-814E-7520AE764EF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.mysql.com/eventum-users/2072",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112292193807958&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16304",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014603",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00093-07312005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18400",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18401",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18402",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14436",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.mysql.com/eventum-users/2072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112292193807958&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00093-07312005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.auth.php, getCustomFieldReport function in (4) custom_fields.php, (5) custom_fields_graph.php, or (6) class.report.php, or the insert function in (7) releases.php or (8) class.release.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3376760A-F66D-4AEA-8A8E-3ABEB39D67C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3BBA56E-6A81-4977-8C87-CD2A19C777B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7982E45-2702-4120-87C3-0CB3F9DA0897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B531FC5-154F-4858-BB5C-F1D3F752E2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12877C25-B604-450A-A527-4C223DC3DCEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3CD7BBB-5193-4159-AA56-554EFDBECE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE389FEE-6F5F-4950-988F-42A26D19EAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:eventum:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F72E477-4851-4C6E-814E-7520AE764EF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.mysql.com/eventum-users/2072",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112292193807958&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16304",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014603",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00093-07312005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18403",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18404",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18405",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18406",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14437",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.mysql.com/eventum-users/2072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112292193807958&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00093-07312005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2_release1",
            "matchCriteriaId" : "BE688DA7-6BB6-43D3-B874-21C09247479D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-306.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-306.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to \"the utility used to update Java shared archives.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F16DD53-A994-48C8-9F4A-C34251AB2996"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2005/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-306.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2005/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-306.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to \"Mac OS X specific extensions.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1CC03E-A182-453F-AD88-C82094BB1129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-306.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-306.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autonomy:keyview_export_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CD7AAC-E4E2-47E4-A34D-47C670FA6254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autonomy:keyview_filter_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754BD2C9-2100-4B21-B164-47487434D9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6DDCD8-B9AD-4757-A067-CF99372D7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D037CC-1207-48E2-882E-8B236EE7138F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5059BEF2-84EB-4B5F-84F5-9E3200B068F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB71B7AA-957B-46A6-9BC9-CE23EC721189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46CF28C0-51AD-4783-B1F0-205DF64D133A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0015A2-A70E-4B0C-B59A-44F5F611293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94927A9-61FD-459F-9A6D-E581A4AF505C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B32BA2-9EB7-4294-A857-226A5B1CC401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF64CA16-6C20-42E1-BA68-BD63A873BFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D7DD7B-CA90-44A5-9B7B-4A4985150689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AEB13D-C7C6-426F-8484-85EFF7245DF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16100",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16280",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-32/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-34/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-36/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-37/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-66/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015657",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/884076",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23065",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23066",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23068",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424626/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424666/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424689/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424692/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0501",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-32/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-34/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-36/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-37/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-66/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/884076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424626/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424666/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424689/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424692/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autonomy:keyview_export_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CD7AAC-E4E2-47E4-A34D-47C670FA6254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autonomy:keyview_filter_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754BD2C9-2100-4B21-B164-47487434D9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6DDCD8-B9AD-4757-A067-CF99372D7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D037CC-1207-48E2-882E-8B236EE7138F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5059BEF2-84EB-4B5F-84F5-9E3200B068F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB71B7AA-957B-46A6-9BC9-CE23EC721189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46CF28C0-51AD-4783-B1F0-205DF64D133A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0015A2-A70E-4B0C-B59A-44F5F611293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94927A9-61FD-459F-9A6D-E581A4AF505C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B32BA2-9EB7-4294-A857-226A5B1CC401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF64CA16-6C20-42E1-BA68-BD63A873BFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D7DD7B-CA90-44A5-9B7B-4A4985150689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AEB13D-C7C6-426F-8484-85EFF7245DF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16100",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16280",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-30/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-66/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015657",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23066",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424717/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-30/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-66/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424717/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the \"More Info\" button in the \"Application Protection\" dialog, which allows local users to execute arbitrary programs as SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_agent_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D811B9-6F92-4BEF-B502-7CBA79D90056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_pc_protection:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE67F5C0-C165-446B-A67D-71876965F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_pc_protection:3.6cpu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE7A456-FD11-4506-8015-677CDD8912D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_server_protection:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC89FBB-BC07-421F-BC6D-0582CFA98E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:realsecure_desktop:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40DB2F47-5FF4-47AD-AD9B-CB665B1957FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:realsecure_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBD8328-8261-43DE-B90C-160CE823BE12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service (crash) via a long bind request, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9989FEB-3B5E-40FF-BDBF-CFC835BCF93B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B2AFF7-3921-402A-AE7A-BB9E2E8AA0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2974F32F-19F1-42E5-AB4C-59ACC6D07ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4BF6EB6-8A21-4FFD-A15F-797824D0F515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A0BACA-DD1E-44AB-BF02-1F0DB179FF00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636FC0B6-8C7B-416E-9343-B6712C93D036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD364F0-EE5B-4082-AD87-C9769F492E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06DBE88F-F765-448E-88AF-3ED9FB98181A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE30DC2C-35E9-4E4E-A8FF-2A31CF28B6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EE627-6072-4359-981B-0168F7D44B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D6F4E6-2C8A-40B6-9DB9-38E15D2AFEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00B8057-26DF-4064-A934-0AA88A0C1A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFA5487-2D61-4E61-98A3-51882A8CE0C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E5E3-F66C-4184-9C4F-B06391147130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95404CC-47B8-40C6-BCED-FC3E68CA8D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39B06CE-E38C-469B-8E24-87B26F3BEB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F342FD1-7A60-4E7D-B56A-E1C3D560C728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDDB5FD-9152-4A9C-829B-8BA2ACB3A5A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015611",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21229907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=389",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21229907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arbitrary world-writable files as root by specifying an alternate file in the password database option."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426535/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426535/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.[PID] temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426535/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426535/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data intended for the ServerSocket of a different Java program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F16DD53-A994-48C8-9F4A-C34251AB2996"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=302265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-306.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=302265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-306.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:vpnremote:4.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34A9D34-66C8-4F80-BEE1-FE54B26C75FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:vpnremote:4.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44447C89-447B-4A44-8CCB-04BC07BC0B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:vpnremote:4.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033F393F-0C64-4E22-83A7-80D8B906F697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:vpnremote:4.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52930C94-EFA0-4148-9DDF-D3FDD7042AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:vpnremote:4.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5543E576-3FA0-4514-BF69-8C9A9AD1706F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:vpnremote:4.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835AF5F9-F693-40B5-846A-A5B52A6E9055"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-230.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-230.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:10.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "E971D8BF-C1B8-4489-9824-D7F1ACBA8DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:10.0.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "42C40382-8A43-47BC-B112-1FF87D513F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:10.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "41015020-77F1-4604-8F90-1D3398ABF96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:10.0.3:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "8F09FC85-710E-4B98-BB7B-D388F3EB58DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:10.0.4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "0CCEE460-284C-408D-A4FB-A49622004E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:10.0.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "82258764-D89B-482B-BB7E-31D86BD6C586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:10.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7621E796-2AF1-447B-B350-74841A85855E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5695A49-561F-434E-92AE-AEF13162BD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:0.288:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "FA36B216-65D0-490C-8102-7D99D21417CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:0.297:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "CD6C057A-407C-4794-9250-80E07C8E09CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "19BC5A59-BCBD-4859-8329-B4974D43DB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "003D7E29-9970-4984-9756-C070E15B7979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0.0.305:*:mac_os:*:*:*:*:*",
            "matchCriteriaId" : "3ADE53B2-53D5-4E84-9CFF-9D7C12727115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0.0.331:*:mac_os:*:*:*:*:*",
            "matchCriteriaId" : "EB4B64DF-7D14-460C-AE2D-02C67575CC9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "382E5B10-AE07-4325-BEE7-7B0432CDF845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "96897C76-EB4F-49A7-997E-C735CDD2B83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0.3:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "10A106E1-78FE-4CA3-9B3B-956B88E758E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0.4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7E2DC70C-42FF-493D-AA17-4BE1EA475839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "71ACF9F5-6779-41FD-9F96-4DD202035DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "F29F875A-883C-4C8D-BF8D-4A1D83286A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348F3214-E5C2-4D39-916F-1B0263D13F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336246FA-A06F-4792-9923-E6948F3494FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C7BF07-8B9A-4BDF-BEA9-C55ABDEA8165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1059:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC15988-96A0-4EBE-BF99-14D46F5A9553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F65BDA-393F-4274-B193-B578255DB013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4CADDC-84D2-45D9-99BA-A662D7490154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:rhapsody:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2B8F89-AFE2-4029-A9D3-88C99EC4774C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:rhapsody:3.0_build_0.815:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDA20ED-8151-44EC-AAFC-A273E918AE29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19358",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19365",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/172489",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_18_realplayer.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-762.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-788.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17202",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.service.real.com/realplayer/security/03162006_player/en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1057",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/172489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_18_realplayer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-762.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2005-788.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.service.real.com/realplayer/security/03162006_player/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:zonealarm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.337.0",
            "matchCriteriaId" : "58FAC945-D7DA-4951-9D64-61D88E5D1FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:zonealarm_security_suite:5.5.062.004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FEA5E2-4BA9-4B5E-AB26-C6B4E1669DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:zonealarm_security_suite:6.5.737:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8710D833-CD8E-4E44-9770-B784330BEAF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26513",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1018588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/25365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/25377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/36110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1018588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/25365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/25377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/36110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E12F60-B4AF-4EF1-A4AA-5E9F0B8B0690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059218D3-A3AD-4A10-9AA4-FBB689321D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.9/SCOSA-2006.9.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18958",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.9/SCOSA-2006.9.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Fortinet FTP anti-virus engine by sending a STOR command and uploading a file before the FTP server response has been sent, as demonstrated using LFTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8_mr10",
            "matchCriteriaId" : "7363C344-1CA6-4F53-8004-689633230CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3_beta",
            "matchCriteriaId" : "3B78DFB1-2D05-4AAE-BB9E-B6653C3164B4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fortinet:fortigate:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B13D8D-D888-41BE-A9A3-85053378769D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042139.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113986337408103&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18844",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0539",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042139.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113986337408103&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8_mr10",
            "matchCriteriaId" : "7363C344-1CA6-4F53-8004-689633230CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3_beta",
            "matchCriteriaId" : "3B78DFB1-2D05-4AAE-BB9E-B6653C3164B4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fortinet:fortigate:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B13D8D-D888-41BE-A9A3-85053378769D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18844",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortiguard.com/advisory/FGA-2006-10.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424858/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0539",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortiguard.com/advisory/FGA-2006-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424858/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3126",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink attack on temporary (a) output and (b) error files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antiword:antiword:0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21ACF11A-3596-485D-A2C9-E8FB416B5C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antiword:antiword:0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0134D2CC-8A35-4D1F-9F03-05E1DB2151D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15866",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18530",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-945",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16278",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0242",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24194",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/15866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) via a long HTTP request that causes an out-of-bounds read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:winproxy:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E136E6F-0787-4E6C-BF59-36DC5F533E08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18288",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=363",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16148",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB30030-A195-4626-AAED-D421454D911D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015565",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=378",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22975",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and re-focusing to a malicious window."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFFB565-F656-43E3-89E1-E412DC4C9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4336F0E-75FE-4592-9D98-4F689804956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2006/02/13/419439.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18787",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/2707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5MP0B0UHPA.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424863/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424940/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0553",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/02/13/419439.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/2707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5MP0B0UHPA.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424863/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424940/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3340",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tuxpaint-import.sh script in Tux Paint (tuxpaint) 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:new_breed_software:tux_paint:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C41AFCA-600E-403C-9B49-5C21DF9CAA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18474",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18475",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18476",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-941",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/22453",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16250",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0193",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24128",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/243-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/243-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3342",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:norman_ramsey:noweb:2.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29101EBF-8641-42E4-8AD1-1AFF1B26E2E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:norman_ramsey:noweb:2.10c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D7C511-2C3B-49C2-A792-97C35EEE52F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18809",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18812",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18967",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19027",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-968",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-14.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16610",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-254-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0547",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-254-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3356",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice (\"double decrement\") as a result of multiple calls to the mntput function when the dentry_open function call fails, which allows local users to cause a denial of service (panic) via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169130",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0101.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c7dce9209161eb260cdf9e9172f72c3a02379e6",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16283",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25302",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10731",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c7dce9209161eb260cdf9e9172f72c3a02379e6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3357",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "154566FB-0D1A-4DC2-AFE6-49DE93850951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB477AFB-EA39-4892-B772-586CF6D2D235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4962BB-0E61-4788-B582-21F05CD33AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35906CD-038E-4243-8A95-F0A3A43F06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B940BB85-03F5-46D7-8DC9-2E1E228D3D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82139FFA-2779-4732-AFA5-4E6E19775899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AB120B-2FEC-4EB3-9777-135D81E809AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7FF669-12E0-4A73-BBA7-250D109148C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB7EE53-187E-40A9-9865-0F3EDA2B5A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D06AE8A-9BA8-4AA8-ACEA-326CD001E879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC1A04B-0466-48AD-89F3-1F2EF1DEBE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F34D08-430E-4331-A27D-667149425176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248BDF2C-3E78-49D1-BD9C-60C09A441724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0FDE3D-1509-4375-8703-0D174D70B22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE732B5-00C9-4443-97E0-1DF21475C26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79C41D3-6894-4F2D-B8F8-82AB4780A824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "449A5647-CEA6-4314-9DB8-D086F388E1C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A407B7-F432-48F0-916A-A49952F85CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5AC769-D07D-43C7-B252-A5A812E7D58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF4DBF6-DAF0-47E7-863B-C48DB7149A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F19D71-0A58-4B03-B351-596EB67ECF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBB3FF9-CF5A-4E7B-ACE3-A198343AD485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D721FFB5-D6D3-4F60-8B09-B3AD07EE6D4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=37791",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008//May/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0159.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18307",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18333",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18339",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18340",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18429",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18585",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18743",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21848",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22233",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22368",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22523",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22669",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23260",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/29849",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30430",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015447",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102640-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.apache.org/viewcvs?rev=358026&view=rev",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-03.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425399/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445206/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445206/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0074/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-241-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA08-150A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0056",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3920",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3995",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4300",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4868",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1246/references",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1697",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2006-09/msg00016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11467",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=37791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008//May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0159.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/29849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102640-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewcvs?rev=358026&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425399/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445206/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445206/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450315/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2005/0074/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntulinux.org/usn/usn-241-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA08-150A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1246/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2006-09/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Apache",
        "comment" : "Fixed in Apache HTTP Server 2.2.2 and 2.0.58 http://httpd.apache.org/security/vulnerabilities_22.html\nhttp://httpd.apache.org/security/vulnerabilities_20.html",
        "lastModified" : "2008-07-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3359",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain socket calls that produce inconsistent reference counts for loadable protocol modules."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404339c66aLroC1_zunYKhEIbtIWrnwg",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175769",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10214",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404339c66aLroC1_zunYKhEIbtIWrnwg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085FA7DD-8048-4768-816C-82828022FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966A8542-E5E1-468F-989E-47F71123A426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77F1733-6755-44E7-8ECC-CFB397FC79A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18289BB-6568-4671-BC70-C8744DD2E0C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19009",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/437212",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/apsb06-02.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425900/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/437212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/apsb06-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425900/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated users to execute arbitrary code via a long FETCH command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2006.02_premium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA7F7E4-4023-4B94-AEEE-5D658F0F5AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2006.02_standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC104EA1-FCF0-4807-B4BA-736EF388C6A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19168",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ipswitch.com/support/ics/updates/ics200603prem.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427536/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ipswitch.com/support/ics/updates/ics200603prem.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427536/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3538",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ifax_solutions:hylafax:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E96D129-69B3-4D49-99BD-60F58110269F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18314",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18337",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18489",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hylafax.org/archive/2005-12/msg00119.php",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.hylafax.org/content/HylaFAX_4.2.4_release",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:015",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420974/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16150",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0072",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hylafax.org/archive/2005-12/msg00119.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hylafax.org/content/HylaFAX_4.2.4_release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420974/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3539",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hylafax:hylafax:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1932A13-7BC2-4E15-B1E6-54B62F36B5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hylafax:hylafax:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1986347-8C08-4F35-BA61-6155DC68263E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hylafax:hylafax:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCC3306-1850-4CDE-B97C-377CD3FE3D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hylafax:hylafax:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C0F177-AD00-4D46-B80F-ACE1C5A75595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hylafax:hylafax:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA4C7C6-EF84-436F-94F8-8600372CBE92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18314",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18337",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18366",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18489",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-933",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hylafax.org/content/HylaFAX_4.2.4_release",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:015",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420974/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16151",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0072",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hylafax.org/content/HylaFAX_4.2.4_release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420974/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3540",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:petris:petris:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "EBB812AF-D61C-4174-9838-0CBEAE3883D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18362",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18384",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-929",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16190",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3597",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2023-11-07T01:57:53.007",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3573.  Reason: This candidate is a duplicate of CVE-2005-3573.  A CNA error by MITRE introduced the duplicate.  Notes: All CVE users should reference CVE-2005-3573 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 allows allows remote attackers to perform unauthorized actions as the administrator via URLs, as demonstrated using the setUsr operation to change a password.  NOTE: this issue can be leveraged with CVE-2005-3619 to automatically perform the attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.1",
            "versionEndExcluding" : "2.0.2",
            "matchCriteriaId" : "44000DAA-EDCB-4FA3-9915-342FCB9FD2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1.1",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "EBEC78F0-BFD0-4B7B-A27E-6341F7303C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.2",
            "versionEndExcluding" : "2.5.3",
            "matchCriteriaId" : "B81861ED-57CF-4753-9E24-34A9B1E43584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.vmware.com/kb/2118366",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21230",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.corsaire.com/advisories/c051114-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441726/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441825/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3075",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://kb.vmware.com/kb/2118366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.corsaire.com/advisories/c051114-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441726/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441825/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1 upgrade patch 6 allows remote attackers to inject arbitrary web script or HTML via messages that are not sanitized when viewing syslog log files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A348CABB-CD52-4C55-9653-154C75605CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA74505A-3550-4646-B2D6-6E6D0924023D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC77D81A-12AA-4948-9970-9461289DC648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A10ABE-E778-4133-B1AA-05FE6829A34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CB97F9-9DF6-4493-A245-F4901F4DD22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C862131A-64D8-4C2D-815F-19971D63AF00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.corsaire.com/advisories/c051114-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435610/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435888/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.corsaire.com/advisories/c051114-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435610/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435888/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nVMware, ESX Server, 2.5.2 upgrade patch 2, and later\r\nVMware, ESX Server, 2.1.2 upgrade patch 6, and later\r\nVMware, ESX Server, 2.0.1 upgrade patch 6, and later"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.1",
            "versionEndExcluding" : "2.0.2",
            "matchCriteriaId" : "44000DAA-EDCB-4FA3-9915-342FCB9FD2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1.1",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "EBEC78F0-BFD0-4B7B-A27E-6341F7303C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.2",
            "versionEndExcluding" : "2.5.3",
            "matchCriteriaId" : "B81861ED-57CF-4753-9E24-34A9B1E43584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.vmware.com/kb/2118366",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21230",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.corsaire.com/advisories/c051114-003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/822476",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441727/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441825/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19249",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3075",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://kb.vmware.com/kb/2118366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.corsaire.com/advisories/c051114-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/822476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441727/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441825/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3623",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://lkml.org/lkml/2005/12/23/171",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16570",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11707",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://lkml.org/lkml/2005/12/23/171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3624",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1512A96-B8E7-4DB7-A4CB-8FD3773BFC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787B918D-9CCC-44FE-92AF-E8DF1E91A3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C116493B-2837-4531-9291-A9FF03099A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.23_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525BD04B-387F-4713-BC89-472D0D0BCFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdegraphics:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF92649-90CE-4E75-A938-61D0916B5A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdegraphics:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA505B4-0C17-49C8-9533-CA8CE3AA77D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C08E0A-651F-458B-BCEC-A30DCD527E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6000D6AF-C056-4BC0-A54C-72E23E52AB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D036E4-FA49-417D-968B-9D73B16A09BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kpdf:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAF6452-F3B0-4F62-893E-BCFA6AB7AE3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kpdf:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC2AB9CB-DEAB-45AB-A7CA-D19E069907EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kword:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC32BAA-99B3-4B40-83A3-ED9E1B12B295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679D9520-DE8E-4D06-A227-3B1C1D05977D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8ABD90-AD2B-4FA0-A355-9D7CD6D3C486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86C7D6F-C39E-4403-86C6-F87599570E97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236005A1-C175-44D3-8D0C-C48F943F3D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF2AD80-5E65-4B57-933B-C395E98EF10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C92A0E-1DDA-4F83-A904-24A35C38883A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9178B36F-41D5-4AE7-B9C8-56BDEADE76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B93B3ED-AF82-49A9-8C7F-E5F652F19669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "A6B060E4-B5A6-4469-828E-211C52542547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "974C3541-990C-4CD4-A05A-38FA74A84632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "58792F77-B06F-4780-BA25-FE1EE6C3FDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "C9419322-572F-4BB6-8416-C5E96541CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "BFC50555-C084-46A3-9C9F-949C5E3BB448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "9C25D6E1-D283-4CEA-B47B-60C47A5C0797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "AD18A446-C634-417E-86AC-B19B6DDDC856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E4BB852E-61B2-4842-989F-C6C0C901A8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "24DD9D59-E2A2-4116-A887-39E8CC2004FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F28D7457-607E-4E0C-909A-413F91CFCD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3528DABD-B821-4D23-AE12-614A9CA92C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86-64:*:*:*:*:*",
            "matchCriteriaId" : "0315FB43-D199-4734-B724-50ED031C0020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D69B83-4EF3-407B-8E8C-DE623F099C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:x86-64:*:*:*:*:*",
            "matchCriteriaId" : "7D221688-18A0-453D-8D13-6B68011FCA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597094EC-D23F-4EC4-A140-96F287679124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:x86-64:*:*:*:*:*",
            "matchCriteriaId" : "C4FCF0D3-A6CB-448E-B0D3-DA82BE02DEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F0D201-B1DC-4024-AF77-A284673618F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "052E3862-BFB7-42E7-889D-8590AFA8EF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB0B27C-04EA-426F-9016-7406BACD91DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "409E324A-C040-494F-A026-9DCAE01C07F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
            "matchCriteriaId" : "6474B775-C893-491F-A074-802AFB1FEDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C84296C-2C8A-4DCD-9751-52951F8BEA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6996B14-925B-46B8-982F-3545328B506B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C720DACC-CF4B-4A00-818C-8303A7D7DED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "9B502A61-44FB-4CD4-85BE-88D4ACCCA441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "84A50ED3-FD0D-4038-B3E7-CC65D166C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D76A8D-832B-411E-A458-186733C66010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7458BA31-812E-40C9-BB92-8688A3BCBA56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "300A6A65-05FD-401C-80F6-B5F5B1F056E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3D53C9-3806-45E6-8AE9-7D41280EF64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29C5A03-A7C9-4780-BB63-CF1E874D018D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85EF0EE-3E61-4CA3-9F00-610AB2E1CFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70440F49-AEE9-41BE-8E1A-43AB657C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EE2D72-B1E6-4380-80B0-E40A23DDD115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "F239BA8A-6B41-4B08-8C7C-25D235812C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "89BA858B-9466-4640-84AE-DC5BDC65D6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:s_390:*:*:*:*:*",
            "matchCriteriaId" : "85F2D904-E830-4034-9CCB-0FF65019622C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3EA56868-ACA1-4C65-9FFB-A68129D2428A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "1BA2E629-58C6-4BA0-A447-F8F570B35E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3BEE15E9-9194-4E37-AB3B-66ECD5AC9E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C89BA3B6-370B-4911-A363-935A9C9EACF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "4F1B4D15-0562-44D6-B80B-35A8F432BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D84ABF78-0D85-4E15-907E-B5ACE86EB8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9C7018E7-F90C-435D-A07A-05A294EA2827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:*",
            "matchCriteriaId" : "16915004-1006-41D6-9E42-D1A5041E442D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "994ABCE2-3B9E-4E4E-83F7-CE2A79C70F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB70F82-52BB-4D0D-9A24-9AF67278466D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100A2456-BF20-4461-8DC9-C61889322B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7D4F57-E186-497A-B390-92E5D2C7E894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux:fuji:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC3F6F3-9A6E-4A98-A967-6776C872475C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_hosting_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC3218DD-A565-4AB8-86FE-E7F59AC0535F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_workgroup_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97AEDB57-202F-4B53-8815-21836F177060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C3FFDD-03BF-4FD4-B7A7-B62AFD5DBA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_home:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "065FF0F1-7FAC-4584-92EA-EAA87DC76FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_multimedia:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27180A1-9767-4CD3-978C-7538155B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_personal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAAA9376-A060-49AE-86A7-6B28E26ED5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DCF0D-3241-453A-A0E4-937FE25EC404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B484D091-62DE-4EF2-AC54-26896CA8B315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:10.0_x86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5AC26E-3F3F-4D14-BE65-82B4432AB382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9428589A-0BD2-469E-978D-38239117D972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "6E94583A-5184-462E-9FC4-57B35DA06DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E905FAAD-37B6-4DD0-A752-2974F8336273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "3BD12488-1ED8-4751-ABF5-3578D54750A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "AE3733CF-4C88-443C-9B90-6477C9C500D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9C500A75-D75E-45B4-B582-0F0DF27C3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "86FD134D-A5C5-4B08-962D-70CF07C74923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "FA84692E-F99D-4207-B4F2-799A6ADB88AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "8B0F1091-4B76-44F5-B896-6D37E2F909A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0177.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-003.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18312",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18332",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18334",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18373",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18375",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18414",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18423",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18425",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18642",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18644",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0163.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16143",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0047",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24022",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9437",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/236-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0163.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/236-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3625",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka \"Infinite CPU spins.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1512A96-B8E7-4DB7-A4CB-8FD3773BFC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787B918D-9CCC-44FE-92AF-E8DF1E91A3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C116493B-2837-4531-9291-A9FF03099A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.23_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525BD04B-387F-4713-BC89-472D0D0BCFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdegraphics:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF92649-90CE-4E75-A938-61D0916B5A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdegraphics:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA505B4-0C17-49C8-9533-CA8CE3AA77D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C08E0A-651F-458B-BCEC-A30DCD527E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6000D6AF-C056-4BC0-A54C-72E23E52AB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D036E4-FA49-417D-968B-9D73B16A09BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kpdf:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAF6452-F3B0-4F62-893E-BCFA6AB7AE3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kpdf:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC2AB9CB-DEAB-45AB-A7CA-D19E069907EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kword:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC32BAA-99B3-4B40-83A3-ED9E1B12B295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679D9520-DE8E-4D06-A227-3B1C1D05977D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8ABD90-AD2B-4FA0-A355-9D7CD6D3C486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86C7D6F-C39E-4403-86C6-F87599570E97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236005A1-C175-44D3-8D0C-C48F943F3D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF2AD80-5E65-4B57-933B-C395E98EF10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C92A0E-1DDA-4F83-A904-24A35C38883A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9178B36F-41D5-4AE7-B9C8-56BDEADE76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B93B3ED-AF82-49A9-8C7F-E5F652F19669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "A6B060E4-B5A6-4469-828E-211C52542547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "974C3541-990C-4CD4-A05A-38FA74A84632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "58792F77-B06F-4780-BA25-FE1EE6C3FDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "C9419322-572F-4BB6-8416-C5E96541CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "BFC50555-C084-46A3-9C9F-949C5E3BB448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "9C25D6E1-D283-4CEA-B47B-60C47A5C0797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "AD18A446-C634-417E-86AC-B19B6DDDC856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E4BB852E-61B2-4842-989F-C6C0C901A8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "24DD9D59-E2A2-4116-A887-39E8CC2004FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F28D7457-607E-4E0C-909A-413F91CFCD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3528DABD-B821-4D23-AE12-614A9CA92C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86-64:*:*:*:*:*",
            "matchCriteriaId" : "0315FB43-D199-4734-B724-50ED031C0020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D69B83-4EF3-407B-8E8C-DE623F099C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:x86-64:*:*:*:*:*",
            "matchCriteriaId" : "7D221688-18A0-453D-8D13-6B68011FCA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597094EC-D23F-4EC4-A140-96F287679124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:x86-64:*:*:*:*:*",
            "matchCriteriaId" : "C4FCF0D3-A6CB-448E-B0D3-DA82BE02DEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F0D201-B1DC-4024-AF77-A284673618F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "052E3862-BFB7-42E7-889D-8590AFA8EF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB0B27C-04EA-426F-9016-7406BACD91DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "409E324A-C040-494F-A026-9DCAE01C07F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
            "matchCriteriaId" : "6474B775-C893-491F-A074-802AFB1FEDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C84296C-2C8A-4DCD-9751-52951F8BEA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6996B14-925B-46B8-982F-3545328B506B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C720DACC-CF4B-4A00-818C-8303A7D7DED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "9B502A61-44FB-4CD4-85BE-88D4ACCCA441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "84A50ED3-FD0D-4038-B3E7-CC65D166C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D76A8D-832B-411E-A458-186733C66010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7458BA31-812E-40C9-BB92-8688A3BCBA56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "300A6A65-05FD-401C-80F6-B5F5B1F056E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3D53C9-3806-45E6-8AE9-7D41280EF64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29C5A03-A7C9-4780-BB63-CF1E874D018D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85EF0EE-3E61-4CA3-9F00-610AB2E1CFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70440F49-AEE9-41BE-8E1A-43AB657C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EE2D72-B1E6-4380-80B0-E40A23DDD115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "F239BA8A-6B41-4B08-8C7C-25D235812C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "89BA858B-9466-4640-84AE-DC5BDC65D6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:s_390:*:*:*:*:*",
            "matchCriteriaId" : "85F2D904-E830-4034-9CCB-0FF65019622C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3EA56868-ACA1-4C65-9FFB-A68129D2428A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "1BA2E629-58C6-4BA0-A447-F8F570B35E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3BEE15E9-9194-4E37-AB3B-66ECD5AC9E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C89BA3B6-370B-4911-A363-935A9C9EACF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "4F1B4D15-0562-44D6-B80B-35A8F432BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D84ABF78-0D85-4E15-907E-B5ACE86EB8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9C7018E7-F90C-435D-A07A-05A294EA2827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:*",
            "matchCriteriaId" : "16915004-1006-41D6-9E42-D1A5041E442D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "994ABCE2-3B9E-4E4E-83F7-CE2A79C70F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB70F82-52BB-4D0D-9A24-9AF67278466D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100A2456-BF20-4461-8DC9-C61889322B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7D4F57-E186-497A-B390-92E5D2C7E894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux:fuji:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC3F6F3-9A6E-4A98-A967-6776C872475C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_hosting_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC3218DD-A565-4AB8-86FE-E7F59AC0535F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_workgroup_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97AEDB57-202F-4B53-8815-21836F177060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C3FFDD-03BF-4FD4-B7A7-B62AFD5DBA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_home:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "065FF0F1-7FAC-4584-92EA-EAA87DC76FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_multimedia:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27180A1-9767-4CD3-978C-7538155B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_personal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAAA9376-A060-49AE-86A7-6B28E26ED5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DCF0D-3241-453A-A0E4-937FE25EC404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B484D091-62DE-4EF2-AC54-26896CA8B315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:10.0_x86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5AC26E-3F3F-4D14-BE65-82B4432AB382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9428589A-0BD2-469E-978D-38239117D972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "6E94583A-5184-462E-9FC4-57B35DA06DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E905FAAD-37B6-4DD0-A752-2974F8336273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "3BD12488-1ED8-4751-ABF5-3578D54750A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "AE3733CF-4C88-443C-9B90-6477C9C500D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9C500A75-D75E-45B4-B582-0F0DF27C3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "86FD134D-A5C5-4B08-962D-70CF07C74923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "FA84692E-F99D-4207-B4F2-799A6ADB88AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "8B0F1091-4B76-44F5-B896-6D37E2F909A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0177.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-003.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18312",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18332",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18334",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18335",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18373",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18375",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18414",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18423",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18425",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18642",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18644",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0163.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16143",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0047",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24023",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9575",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/236-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0163.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/236-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3626",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1512A96-B8E7-4DB7-A4CB-8FD3773BFC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787B918D-9CCC-44FE-92AF-E8DF1E91A3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C116493B-2837-4531-9291-A9FF03099A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_software_products:cups:1.1.23_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525BD04B-387F-4713-BC89-472D0D0BCFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdegraphics:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF92649-90CE-4E75-A938-61D0916B5A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdegraphics:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA505B4-0C17-49C8-9533-CA8CE3AA77D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C08E0A-651F-458B-BCEC-A30DCD527E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6000D6AF-C056-4BC0-A54C-72E23E52AB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:koffice:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D036E4-FA49-417D-968B-9D73B16A09BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kpdf:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAF6452-F3B0-4F62-893E-BCFA6AB7AE3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kpdf:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC2AB9CB-DEAB-45AB-A7CA-D19E069907EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kword:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC32BAA-99B3-4B40-83A3-ED9E1B12B295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679D9520-DE8E-4D06-A227-3B1C1D05977D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgi:propack:3.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8ABD90-AD2B-4FA0-A355-9D7CD6D3C486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86C7D6F-C39E-4403-86C6-F87599570E97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236005A1-C175-44D3-8D0C-C48F943F3D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF2AD80-5E65-4B57-933B-C395E98EF10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C92A0E-1DDA-4F83-A904-24A35C38883A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tetex:tetex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9178B36F-41D5-4AE7-B9C8-56BDEADE76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B93B3ED-AF82-49A9-8C7F-E5F652F19669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "A6B060E4-B5A6-4469-828E-211C52542547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "974C3541-990C-4CD4-A05A-38FA74A84632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "58792F77-B06F-4780-BA25-FE1EE6C3FDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "C9419322-572F-4BB6-8416-C5E96541CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "BFC50555-C084-46A3-9C9F-949C5E3BB448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "9C25D6E1-D283-4CEA-B47B-60C47A5C0797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "AD18A446-C634-417E-86AC-B19B6DDDC856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E4BB852E-61B2-4842-989F-C6C0C901A8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "24DD9D59-E2A2-4116-A887-39E8CC2004FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F28D7457-607E-4E0C-909A-413F91CFCD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3528DABD-B821-4D23-AE12-614A9CA92C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86-64:*:*:*:*:*",
            "matchCriteriaId" : "0315FB43-D199-4734-B724-50ED031C0020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D69B83-4EF3-407B-8E8C-DE623F099C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:x86-64:*:*:*:*:*",
            "matchCriteriaId" : "7D221688-18A0-453D-8D13-6B68011FCA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597094EC-D23F-4EC4-A140-96F287679124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:x86-64:*:*:*:*:*",
            "matchCriteriaId" : "C4FCF0D3-A6CB-448E-B0D3-DA82BE02DEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F0D201-B1DC-4024-AF77-A284673618F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "052E3862-BFB7-42E7-889D-8590AFA8EF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB0B27C-04EA-426F-9016-7406BACD91DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "2641EE56-6F9D-400B-B456-877F4DA79B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E0B458EA-495E-40FA-9379-C03757F7B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
            "matchCriteriaId" : "409E324A-C040-494F-A026-9DCAE01C07F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "1728AB5D-55A9-46B0-A412-6F7263CAEB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
            "matchCriteriaId" : "6474B775-C893-491F-A074-802AFB1FEDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C84296C-2C8A-4DCD-9751-52951F8BEA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6996B14-925B-46B8-982F-3545328B506B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC80CF67-C51D-442C-9526-CFEDE84A6304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C720DACC-CF4B-4A00-818C-8303A7D7DED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "9B502A61-44FB-4CD4-85BE-88D4ACCCA441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "84A50ED3-FD0D-4038-B3E7-CC65D166C968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D76A8D-832B-411E-A458-186733C66010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7458BA31-812E-40C9-BB92-8688A3BCBA56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "300A6A65-05FD-401C-80F6-B5F5B1F056E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3D53C9-3806-45E6-8AE9-7D41280EF64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29C5A03-A7C9-4780-BB63-CF1E874D018D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85EF0EE-3E61-4CA3-9F00-610AB2E1CFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:slackware:slackware_linux:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70440F49-AEE9-41BE-8E1A-43AB657C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EE2D72-B1E6-4380-80B0-E40A23DDD115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "F239BA8A-6B41-4B08-8C7C-25D235812C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "89BA858B-9466-4640-84AE-DC5BDC65D6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:s_390:*:*:*:*:*",
            "matchCriteriaId" : "85F2D904-E830-4034-9CCB-0FF65019622C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3EA56868-ACA1-4C65-9FFB-A68129D2428A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "1BA2E629-58C6-4BA0-A447-F8F570B35E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3BEE15E9-9194-4E37-AB3B-66ECD5AC9E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C89BA3B6-370B-4911-A363-935A9C9EACF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "4F1B4D15-0562-44D6-B80B-35A8F432BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D84ABF78-0D85-4E15-907E-B5ACE86EB8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9C7018E7-F90C-435D-A07A-05A294EA2827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:*",
            "matchCriteriaId" : "16915004-1006-41D6-9E42-D1A5041E442D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "994ABCE2-3B9E-4E4E-83F7-CE2A79C70F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB70F82-52BB-4D0D-9A24-9AF67278466D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trustix:secure_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100A2456-BF20-4461-8DC9-C61889322B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7D4F57-E186-497A-B390-92E5D2C7E894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux:fuji:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC3F6F3-9A6E-4A98-A967-6776C872475C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_hosting_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC3218DD-A565-4AB8-86FE-E7F59AC0535F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_workgroup_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97AEDB57-202F-4B53-8815-21836F177060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C3FFDD-03BF-4FD4-B7A7-B62AFD5DBA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_home:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "065FF0F1-7FAC-4584-92EA-EAA87DC76FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_multimedia:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27180A1-9767-4CD3-978C-7538155B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_personal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAAA9376-A060-49AE-86A7-6B28E26ED5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DCF0D-3241-453A-A0E4-937FE25EC404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B484D091-62DE-4EF2-AC54-26896CA8B315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_server:10.0_x86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5AC26E-3F3F-4D14-BE65-82B4432AB382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9428589A-0BD2-469E-978D-38239117D972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "6E94583A-5184-462E-9FC4-57B35DA06DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E905FAAD-37B6-4DD0-A752-2974F8336273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "3BD12488-1ED8-4751-ABF5-3578D54750A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "AE3733CF-4C88-443C-9B90-6477C9C500D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9C500A75-D75E-45B4-B582-0F0DF27C3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "86FD134D-A5C5-4B08-962D-70CF07C74923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "FA84692E-F99D-4207-B4F2-799A6ADB88AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "8B0F1091-4B76-44F5-B896-6D37E2F909A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0177.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-003.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18312",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18332",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18334",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18335",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18373",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18375",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18414",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18423",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18425",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18642",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18644",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0163.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16143",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0047",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9992",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/236-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0163.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/236-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3627",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with (1) a large \"number of components\" value that is not checked by DCTStream::readBaselineSOF or DCTStream::readProgressiveSOF, (2) a large \"Huffman table index\" value that is not checked by DCTStream::readHuffmanTables, and (3) certain uses of the scanInfo.numComps value by DCTStream::readScanInfo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1CAEC5-3851-4749-AF27-E090E3C52E35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0177.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-003.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18312",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18332",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18334",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18335",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18373",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18375",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18414",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18423",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18425",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18642",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18644",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0163.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16143",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0047",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24024",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10200",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/236-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2005-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20051207-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0163.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/236-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3628",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1CAEC5-3851-4749-AF27-E090E3C52E35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10287",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427053/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3629",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "F9440B25-D206-4914-9557-B5F030890DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E9933557-3BCA-4D92-AD4F-27758A0D3347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "10A60552-15A5-4E95-B3CE-99A4B26260C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19162",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015732",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0015.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0016.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25374",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11198",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3630",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders \"allow\" directives before \"deny\" directives."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:1.0:*:directory_server:*:*:*:*:*",
            "matchCriteriaId" : "883A1946-9017-4FA7-9517-2D074E764B14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://directory.fedora.redhat.com/wiki/FDS10Announcement",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18939",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=121994",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174837",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://directory.fedora.redhat.com/wiki/FDS10Announcement",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=121994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52790F8-0D23-47F4-B7F7-6CB0F7B6EA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37161BE-6AF5-40E0-BD63-2C17431D8B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477EE032-D183-478F-A2BF-6165277A7414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB993B2-9A44-40E2-AA05-0CAD04BDC26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7461AE5-2067-4964-93B7-560CD02CEAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F206D15-FF0D-400E-9727-5DA6C07B57EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_process_automation_manager:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD04989D-D045-4693-87DA-16754D9BF644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA67A49C-688A-4B6E-8B90-BEC937FCEE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_san_manager:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFD847AD-8AD1-40C1-9582-CC234D900CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_storage_resource_manager:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D35A8A-BB31-4FC6-8031-D93FE7347A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_storage_resource_manager:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7384B78-1F35-4DB4-A128-EBE33FD70C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_storage_resource_manager:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F5A1F3-EEE3-4187-9F44-545EB21EF121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_storage_resource_manager:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152FDE32-0525-4F1E-9BD5-A3EB47644B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08594EFB-E04B-42E8-BE00-C3ACDB62BA4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_aries:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBF77AF-542C-49E8-8F5A-1C0DB73F2DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_irecorder:1.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "6829D317-1AB6-471B-9CE4-563C4FFB290D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_irecorder:1.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "571D4793-63EE-4A9D-991B-0F92842BDF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_irecorder:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F182A43-4999-441D-9B37-093E033BAADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_identity_minder:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF2F1AC-CF62-47CE-96B3-08CE412A7D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_integrated_threat_management:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "045F1ADA-E9D1-4C8B-9275-040939E73A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:itechnology_igateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.050615",
            "matchCriteriaId" : "AA60254A-F0BE-4E53-9D04-C3F4D80E662D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_asset_portfolio_management:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3358719-780A-41E1-A09A-7C27C921D6DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_autosys_jm:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5565-442B-441C-B727-586B23FE8540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_delivery:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A1E55-CDF0-49FF-9A63-5FB44BA9FC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_desk:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2247ED3-2CF1-49A5-9456-F51164A1D220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_desk_knowledge_tools:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3046725F-B0C5-4625-AE5D-8B6C7DC9A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_fulfillment:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7FADA4-429F-4658-A47C-DCB13D6ED903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_service_metric_analysis:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607CA384-B71B-460F-ACCF-ACCBC9C17FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup:11:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E236148-4A57-4FDC-A072-A77D3DD2DB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_enterprise_backup:10.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "15862D0F-90C0-46A3-8457-B1FD8877CC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_enterprise_backup:10.5:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "196FFF4A-1976-477B-927F-82A3CBECA530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_enterprise_backup:10.5:*:tru64:*:*:*:*:*",
            "matchCriteriaId" : "5DC10E01-4694-4699-9C8D-328627F515D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_enterprise_backup:10.5:*:windows_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "2C3C45FE-C057-4DF2-8D68-892C9DD47ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_audit_aries:1.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "473DC00E-B779-4CB4-A165-DE2954F225C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_audit_aries:1.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A0ED34-94B3-447E-8CF2-8439FAF05894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_directory:8.1_web_components:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F148F27B-50D6-4C29-BC9D-1E11B783808D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_secure_content_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB54A16-5E56-46FC-A49C-56C98C0B8F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_application_performance_monitor:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C5D628-2CBB-4ED1-B7C1-C2ABE6A8E2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_application_server_managment:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A75987-8E51-4D25-965D-343E8F07BC25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_ca_web_services_distributed_management:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48726411-E052-4F4A-9EAC-7616059E3599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_exchange_management_console:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1ADE61A-3096-4079-B586-00B977B5E523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:3.5:*:websphere_mq:*:*:*:*:*",
            "matchCriteriaId" : "0FE2A55B-A89D-470E-8E9E-4B1B0FB1C4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:11.0:*:weblogic:*:*:*:*:*",
            "matchCriteriaId" : "07E5BAC2-FF02-4ADC-9939-AE93B60E53E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_management:11.0:*:websphere:*:*:*:*:*",
            "matchCriteriaId" : "DBB1EA1F-57BA-4850-B5C2-6900A1DE80CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_service_catalog_fulfillment_accounting:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8045AE85-40C1-4122-B073-8579E84B88D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_service_fulfillment:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DB1604-AFCB-4D37-9665-9725119570F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_service_level_management:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF170A77-7B4D-4B0F-BA7C-05773E03DFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_web_server_management:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11364903-CA67-499C-9BE8-36B01FD7E7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_web_services_distributed_management:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83DFAC82-1835-49EE-AE88-BFFFD2D6C2B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113803349715927&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015526",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22688",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423288/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423403/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16354",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0311",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113803349715927&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423288/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423403/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1a:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F42604-BD02-4BA6-A5FF-FD21E89A208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1b:*:*:*:*:*:*",
            "matchCriteriaId" : "C65BAF2C-EE3A-4465-8C87-D3B8217C90C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1c:*:*:*:*:*:*",
            "matchCriteriaId" : "B218FDDC-AAC8-45DA-9329-05C88716C98D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1e:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEAA227-062E-4941-BAA2-7C5B985AE490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1f:*:*:*:*:*:*",
            "matchCriteriaId" : "CC64D59C-A6D2-49C7-AE14-AB5CF865133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1h:*:*:*:*:*:*",
            "matchCriteriaId" : "647DA8F0-AE78-4D36-8604-B195F824E250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1k:*:*:*:*:*:*",
            "matchCriteriaId" : "A02B2274-C1F8-4F85-AFE9-CBB1A22A6799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1m:*:*:*:*:*:*",
            "matchCriteriaId" : "FF47AD3F-EE69-4E10-98FC-4E065A1829B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1n:*:*:*:*:*:*",
            "matchCriteriaId" : "053A542C-B0D8-4797-AB63-01EC6AD3D920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1p:*:*:*:*:*:*",
            "matchCriteriaId" : "35E564CD-CFC5-47FF-B947-6AEBF881FEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.0:r1a:*:*:*:*:*:*",
            "matchCriteriaId" : "45781F7C-5808-42DB-BAFB-AA4728667E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.0:r1b:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE1F155-91F6-42D3-872A-6E90BBE05252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.0:r1c:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3FE553-7479-4201-BD5F-E59A18C9B2A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.1:r1a:*:*:*:*:*:*",
            "matchCriteriaId" : "9A987D90-6AA3-418A-A762-6C0F039BD362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.1:r1d:*:*:*:*:*:*",
            "matchCriteriaId" : "1402F05B-8B62-42B4-8CA9-459BCBD9423F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.1:r1e:*:*:*:*:*:*",
            "matchCriteriaId" : "44C2B2FE-0522-46EE-8236-2D4AD29454AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.2:r1a:*:*:*:*:*:*",
            "matchCriteriaId" : "E723F08F-6441-420D-B460-67AA394A009F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:6.0:r1a:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4BA708-93AF-4C9B-97C4-CBB37DDB484D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:6.0:r1c:*:*:*:*:*:*",
            "matchCriteriaId" : "484077A0-0690-4AD6-95EF-EE29144977D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18288",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015442",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=365",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.winproxy.com/products/relnotes.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.winproxy.com/products/relnotes.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:open_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2740DD2-7F0C-47DE-9174-FD8BF0106D22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=371",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_novellnrm.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_novellnrm.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guiseppe_tanzilli_and_matthias_eckermann:mod_auth_pgsql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3",
            "matchCriteriaId" : "EBDC1EB8-CFED-4B92-BBD6-EBFCE18DB343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guiseppe_tanzilli_and_matthias_eckermann:mod_auth_pgsql:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE78D77C-F0BD-4FF8-8DA1-CE24E5F7A3F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guiseppe_tanzilli_and_matthias_eckermann:mod_auth_pgsql:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E359EC4-D0C3-43DE-9C7A-33ADB10ACEAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18304",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18321",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18347",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18348",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18350",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18397",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18403",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015446",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.de/security/2006/dsa-935",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-05.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.giuseppetanzilli.it/mod_auth_pgsql2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=367",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0164.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16153",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/239-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.de/security/2006/dsa-935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.giuseppetanzilli.it/mod_auth_pgsql2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0164.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/239-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects mod_auth_pgsql for Apache2, most likely in all Linux and UNIX environments.  This vulnerability affects all versions of mod_auth_pgsql before 2.0.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause a denial of service (unresponsive application) via malformed RPC packets to (1) RPC program number 390109 (nsrd.exe) and (2) RPC program number 390113 (nsrexecd.exe)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B0FBAD-32E2-44D1-8612-855C7A0AF1B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93BF6BD6-FD86-46F8-908E-39CF2AB1929B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEEC9807-47E2-4915-91E7-96AA21FFFCD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2D787A-DCA0-45CE-A5C3-41850970B468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA00514-6EFF-4BE4-A49E-30C4FF42998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.2_build172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0DFF6E-6234-4C04-AD61-BDB52CFFF7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18495",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18615",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015500",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015545",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=373",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=374",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.legato.com/support/websupport/product_alerts/011606_NW.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16275",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0233",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0343",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.legato.com/support/websupport/product_alerts/011606_NW.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd service crash) via a malformed RPC request to RPC program number 390109, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2D787A-DCA0-45CE-A5C3-41850970B468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA00514-6EFF-4BE4-A49E-30C4FF42998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:legato_networker:7.2_build172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0DFF6E-6234-4C04-AD61-BDB52CFFF7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18495",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18615",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015500",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015545",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.legato.com/support/websupport/product_alerts/011606_NW.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16275",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0233",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0343",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.legato.com/support/websupport/product_alerts/011606_NW.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in LibSystem in Mac OS X 10.4 through 10.4.5 allows context-dependent attackers to execute arbitrary code by causing an application that uses LibSystem to request a large amount of memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.3",
            "matchCriteriaId" : "02607C2D-80F9-454B-A82C-0F892826AA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0445.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/115729",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-011A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0445.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/115729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-011A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.3",
            "matchCriteriaId" : "02607C2D-80F9-454B-A82C-0F892826AA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in Apple Quicktime before 7.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Color Map Entry Size in a TGA image file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.3",
            "matchCriteriaId" : "02607C2D-80F9-454B-A82C-0F892826AA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0447.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0447.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified image height and width (ImageWidth) tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.3",
            "matchCriteriaId" : "02607C2D-80F9-454B-A82C-0F892826AA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0440.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/150753",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421797/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-011A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0440.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/150753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421797/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-011A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified (1) \"strips\" (StripByteCounts) or (2) \"bands\" (StripOffsets) values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.3",
            "matchCriteriaId" : "02607C2D-80F9-454B-A82C-0F892826AA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0442.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421799/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0442.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421799/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in rsync in Mac OS X 10.4 through 10.4.5 allows remote authenticated users to execute arbitrary code via long extended attributes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application Extension Block that modifies the heap in the Picture Modifier block."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.3",
            "matchCriteriaId" : "02607C2D-80F9-454B-A82C-0F892826AA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0401.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0402.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060111d.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/913449",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421547/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421561/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-011A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0401.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0402.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060111d.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/913449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421547/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421561/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-011A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of service (unresponsive interface) via malformed packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:airport_express:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5715F022-4451-4328-9868-2489DAA77863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:airport_extreme:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E91C43B-4823-48C0-BB3F-4228DB645273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jan/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18319",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015443",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22244",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16146",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0064",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jan/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mac OS X 10.4.3 up to 10.4.6, when loginwindow uses the \"Name and password\" setting, and the \"Show the Restart, Sleep, and Shut Down buttons\" option is disabled, allows users with physical access to bypass login and reboot the system by entering \">restart\", \">power\", or \">shutdown\" sequences after the username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/20776",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1a:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F42604-BD02-4BA6-A5FF-FD21E89A208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1b:*:*:*:*:*:*",
            "matchCriteriaId" : "C65BAF2C-EE3A-4465-8C87-D3B8217C90C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1c:*:*:*:*:*:*",
            "matchCriteriaId" : "B218FDDC-AAC8-45DA-9329-05C88716C98D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1e:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEAA227-062E-4941-BAA2-7C5B985AE490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1f:*:*:*:*:*:*",
            "matchCriteriaId" : "CC64D59C-A6D2-49C7-AE14-AB5CF865133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1h:*:*:*:*:*:*",
            "matchCriteriaId" : "647DA8F0-AE78-4D36-8604-B195F824E250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1k:*:*:*:*:*:*",
            "matchCriteriaId" : "A02B2274-C1F8-4F85-AFE9-CBB1A22A6799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1m:*:*:*:*:*:*",
            "matchCriteriaId" : "FF47AD3F-EE69-4E10-98FC-4E065A1829B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1n:*:*:*:*:*:*",
            "matchCriteriaId" : "053A542C-B0D8-4797-AB63-01EC6AD3D920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:4.0:r1p:*:*:*:*:*:*",
            "matchCriteriaId" : "35E564CD-CFC5-47FF-B947-6AEBF881FEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.0:r1a:*:*:*:*:*:*",
            "matchCriteriaId" : "45781F7C-5808-42DB-BAFB-AA4728667E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.0:r1b:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE1F155-91F6-42D3-872A-6E90BBE05252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.0:r1c:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3FE553-7479-4201-BD5F-E59A18C9B2A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.1:r1a:*:*:*:*:*:*",
            "matchCriteriaId" : "9A987D90-6AA3-418A-A762-6C0F039BD362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.1:r1d:*:*:*:*:*:*",
            "matchCriteriaId" : "1402F05B-8B62-42B4-8CA9-459BCBD9423F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.1:r1e:*:*:*:*:*:*",
            "matchCriteriaId" : "44C2B2FE-0522-46EE-8236-2D4AD29454AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:5.2:r1a:*:*:*:*:*:*",
            "matchCriteriaId" : "E723F08F-6441-420D-B460-67AA394A009F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:6.0:r1a:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4BA708-93AF-4C9B-97C4-CBB37DDB484D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:webproxy:6.0:r1c:*:*:*:*:*:*",
            "matchCriteriaId" : "484077A0-0690-4AD6-95EF-EE29144977D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxyav:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E857E781-A082-454D-A1F6-1062A7A81783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18288",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18909",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015441",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16147",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the \"chroot barrier\" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:kernel-patch-vserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.5.5",
            "matchCriteriaId" : "8B1DDE94-A624-414B-93A9-F04FD0CCDE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:kernel-patch-vserver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.2",
            "matchCriteriaId" : "6687BE46-1397-482F-9BA9-F320738E2107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19339",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1011",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25406",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/19339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dragonfly:dragonfly:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "D49632E3-D2DD-4D9A-AE3B-D1A43103DA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:stable:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "C95AA435-BA20-4451-9283-2B62E64B6B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:current:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E775BA-6DC1-4006-83A4-D30EA57417FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.15",
            "matchCriteriaId" : "F7A893C0-1374-4B55-92C9-47CA407B7842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8",
            "matchCriteriaId" : "64487B62-3A07-4294-B8A4-445BFAA0FFAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/openbsd/2005-10/1523.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041177.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-015.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-15.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/openbsd/2005-10/1523.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-015.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka \"settimeofday() time wrap.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDC444D-E763-4685-97F8-A027DF6F804D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:current:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F30E9234-481B-41BC-BFC2-9E9773DEE65C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041178.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-16.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421426/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16170",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041178.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-16.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421426/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vserver:util-vserver:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2026692F-2A61-4EEE-AFE3-4D0CD202D8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vserver:util-vserver:0.30.209:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE9A404-1D1D-40E6-8BAC-18AD1394061D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19333",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 0.30.208 or later"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4536",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses predictable log filenames, which allows local users to overwrite arbitrary files via a symlink attack on the [PID]-audit.log temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libmail-audit-perl:2.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF17349-EE9F-4356-99D6-1E668505F3A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=344029",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18652",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18656",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-960",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16434",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0378",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24380",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=344029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2023-11-07T01:58:11.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was assigned in 2005 to an issue that would not be published until 2006, so new identifiers were assigned.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2023-11-07T01:58:11.577",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was assigned in 2005 to an issue that would not be published until 2006, so new identifiers were assigned.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via \"invalid input sequences\" that lead to heap corruption when bogofilter or bogolexer converts character sets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bogofilter:email_filter:0.93.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD332C15-94E6-4B71-88AC-9110EC23C41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bogofilter:email_filter:0.94.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99431EB-EDA8-45BF-8D7E-B3BA5F61835C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bogofilter:email_filter:0.94.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2678166F-E6F0-4844-96C4-17F72897A747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bogofilter:email_filter:0.95.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A52EC22-0943-42A3-890C-9E2D2BF78B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bogofilter:email_filter:0.96.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61747521-E2F4-4420-A49D-D4CFA772EB1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18352",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16171",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/240-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/240-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in bogofilter and bogolexer 0.96.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via words that are longer than the input buffer used by flex."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bogofilter:email_filter:0.93.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD332C15-94E6-4B71-88AC-9110EC23C41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bogofilter:email_filter:0.94.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99431EB-EDA8-45BF-8D7E-B3BA5F61835C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bogofilter:email_filter:0.94.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2678166F-E6F0-4844-96C4-17F72897A747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bogofilter:email_filter:0.95.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A52EC22-0943-42A3-890C-9E2D2BF78B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bogofilter:email_filter:0.96.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61747521-E2F4-4420-A49D-D4CFA772EB1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18352",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16171",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary code via a URL in the (1) FORUM[LIB] parameter in Documentation/tests/bug-559668.php and (2) the root_dir parameter in docbuilder/file_dialog.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joshua_eichorn:phpdocumentor:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E941C90C-0C8F-4063-923B-A733C408D90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joshua_eichorn:phpdocumentor:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88756E05-95C5-4FCB-A406-788B1EF0048B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joshua_eichorn:phpdocumentor:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E077646-3C85-44EA-BEAE-D529E94B1D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joshua_eichorn:phpdocumentor:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB512CE8-7BC6-464F-9569-C1789A9CFADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joshua_eichorn:phpdocumentor:1.3_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E815BF0-F05B-456A-B4A1-2FD7CA9B62D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joshua_eichorn:phpdocumentor:1.3_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC946337-33CA-4F9B-BC99-BF6E100B31EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rgod.altervista.org/phpdocumentor_130rc4_incl_expl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420441/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16080",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rgod.altervista.org/phpdocumentor_130rc4_incl_expl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420441/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in TUGZip 3.4.0.0 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tugzip:tugzip:3.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7571F6B8-1B9A-4B04-B745-DA8FD6A52706"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17086",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-63/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420538/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-63/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420538/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability (RPATH) in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a malicious library in the current working directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:nview:4.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDC3C1E-03A3-4ED4-B61D-94292502255B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:xnview:1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7651D31-9E60-4EFB-AD7A-EF1E7FB13D1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=117063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18235",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18240",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-18.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16087",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=117063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200512-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in read.php in AdesGuestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the totalRows_rsRead parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ades_design:adesguestbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B591BFF-FF74-4C82-B543-96DE2795A728"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/adesguestbook-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18244",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/adesguestbook-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 1.7 allows remote attackers to inject arbitrary web script or HTML via the email parameter, as used by the email field, when signing a guestbook."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epistream:ipei_guestbook:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57157158-7086-468F-81A3-584CE9DCD62C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18241",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in home.php in OoApp Guestbook 2.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ooapp:ooapp_guestbook:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E81E16A-5209-43D1-BFA3-BBBBFFA04303"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/ooapp-guestbook-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18242",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/ooapp-guestbook-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or HTML via the index parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moxiecode:tinymce_compressor_php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.05",
            "matchCriteriaId" : "0B205D5D-E8D3-4810-BACB-312F87603237"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18262",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2233",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_262005.111.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420543/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16083",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_262005.111.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420543/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte (%00) in the (1) theme, (2) language, (3) plugins, or (4) lang parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moxiecode:tinymce_compressor_php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.05",
            "matchCriteriaId" : "0B205D5D-E8D3-4810-BACB-312F87603237"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18262",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2233",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_262005.111.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420543/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16083",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/36736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_262005.111.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420543/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/36736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74068962-7689-4155-91D7-506CD30BAFB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345238",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0178.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18261",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/28800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.341682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452718/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-246-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0178.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.341682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452718/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-246-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc/function_upload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2F2E0F-94E6-4D63-903F-0090E9D90BCC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC63F97-643C-43B9-83E5-E43928CB1CFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43876FE9-F002-4524-B6C2-5DE4992E0A3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE10B8B4-167D-430D-9C7D-6CF934F17D68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4_security_patch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488811F6-7CC9-4F56-AD7C-81247B351851"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B59C3-0318-49F5-A409-E258E4D322C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F3D49D-C89A-44FB-B254-4F8BAA20BFF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCAC700-1448-4BD4-97F4-8CC06F518524"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE181AB-C597-48A3-A5DA-135E601968AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420573/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420573/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2F2E0F-94E6-4D63-903F-0090E9D90BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC63F97-643C-43B9-83E5-E43928CB1CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43876FE9-F002-4524-B6C2-5DE4992E0A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE10B8B4-167D-430D-9C7D-6CF934F17D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4_security_patch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488811F6-7CC9-4F56-AD7C-81247B351851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B59C3-0318-49F5-A409-E258E4D322C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F3D49D-C89A-44FB-B254-4F8BAA20BFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCAC700-1448-4BD4-97F4-8CC06F518524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE181AB-C597-48A3-A5DA-135E601968AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420569/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420569/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in MTink in the printer-filters-utils package allows local users to execute arbitrary code via a long HOME environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jean-jacques_sarton:mtink:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86BFAE0-8165-4357-849E-A0658B567061"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4605",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/gnupatch%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113535380422339&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18216",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18351",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8b90db0df7187a01fb7177f1f812123138f562cf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00014.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11747",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/gnupatch%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113535380422339&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8b90db0df7187a01fb7177f1f812123138f562cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in check_user.asp in multiple Web Wiz products including (1) Site News 3.06 and earlier, (2) Journal 1.0 and earlier, (3) Polls 3.06 and earlier, and (4) and Database Login 1.71 and earlier allows remote attackers to execute arbitrary SQL commands via the txtUserName parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwiz:database_login:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.71",
            "matchCriteriaId" : "2687352D-5F4F-414F-9A8C-2C62A561A4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwiz:journal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "17945C27-037E-472E-BAFE-C185AC7796B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwiz:site_news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.06",
            "matchCriteriaId" : "9539F738-251F-402F-8D8E-0014CC0E9E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwiz:site_news:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334F863B-1FE7-4712-A5EA-200D3409A65A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwiz:weekly_poll:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.06",
            "matchCriteriaId" : "A51B651C-3B13-483A-BC31-D838C04C8272"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18263",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420551/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16085",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420551/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) ids[0], (2) action, (3) report_id, (4) devWherePair[1][1], and (5) binds[0] parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.039:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCC857-C970-4EEC-A59B-8E08C936873B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7693EF3B-1579-4248-B7E4-79C19CA2F86D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CEDFA9-52BA-40CE-97AE-771F271C9886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.042:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA96DCB7-7531-4277-9668-98B79100D719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.043:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC03B7C2-5F62-4F04-9D2A-C05DA9BD978A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.044:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF6BD8D-8508-4F92-84A5-686826E8F0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846D51B8-FD10-46D1-8C6A-D9D3034211B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.046:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9B7622-4B80-4F99-A3AE-88EDAC0A4AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.047:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82605FDD-2E61-45D8-9104-DC2AE76569B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.048:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD385777-D471-48FD-8D41-001DF519A12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.049:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB8CED9-9162-497B-9335-9238940DB4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73C42E2-1D60-4A47-A9B6-B965E7D40755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.051:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC791432-2981-4412-A5CE-8740BDB44EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221A5EC8-67F5-410B-9C9F-22A3D7170A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40DCC21-D6C9-4EBF-A588-676089DABF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.054:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB3ABD1-1C32-482E-8A86-460A9E2D6504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.055:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3A6BC9-4E4C-4DB3-9FCE-69E1765BB46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D2BB72-8F72-42CE-9171-1C0DB52C0A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.057:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A4EB45-DDBF-40E1-8704-4AF01614B5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.058:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1E7A78-D797-47BD-A822-FF2042648A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.059:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B44FB83-1D15-467B-BCF4-14CCDAED2C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C62B8F4-A2E1-448D-92E7-4C118D2FD7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.061:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5B501E-FEFE-46FC-9967-A8ADD2A5E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "172F60D9-132D-4004-B14A-E0FF6551E3BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.063:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D5B404-B69F-4597-9F35-6EFCCFCE62BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.064:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDF5B86-7949-4912-ABA4-93AE674F5651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.065:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597616C5-5FFC-4150-A4C4-656D5D283549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.066:*:*:*:*:*:*:*",
            "matchCriteriaId" : "451748B6-1807-40B0-894E-D49C2EB01E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.067:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B0875F-F260-4D92-93C5-EA64B93B6122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.068:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D555E03-FEB0-47D2-9F12-74334E456CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFE8D3A-B043-447F-9A8E-584CA7B0B400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF042B4-E556-475F-9DCF-8AC5555AE385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.071:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5472ED86-8E16-49AB-BADF-101ADA632D45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.072:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD31F24-8087-4A20-B40B-38CC620552FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.073:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4533514-6935-4BD3-BDF3-79A43F89BEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.074:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE111521-208C-4264-8B07-0E37925F9003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.075:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF72CAC-921A-452E-BDCF-FEBE793279B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.076:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D431D6-CEAA-477D-8955-C249A65AD45B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.077:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5254375F-5325-4A11-9AE2-FCE35D851765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713E833C-27D1-4C48-8307-506C2663B9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.079:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D1EB97-D65A-4D19-87FC-A0A8EC394992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.080:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB8F5A-27CF-4170-9C76-91309EEEF071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.081:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD333174-00D3-4B59-B5B4-240AF30788E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.082:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92DECF60-6E89-407D-A009-EFFDCC18E48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.083:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE973B-5532-4DD0-A311-BC3E8159E591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.084:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA4F62D-1506-45A9-834F-E19203184162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.085:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71475CE5-7713-4277-84E2-1FA5C68E3C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.086:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B3E973-DF17-4027-B828-5325B291671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.087:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884C9FC7-7D20-401A-A2EF-93850ACB20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.088:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6C5902-E397-43BC-BF94-B228255D3E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.089:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0A0CCA-8008-4AE4-BE7F-CF408022CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.090:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82473F1D-D5B0-4F0B-8D7E-36B98EA2EC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.091:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2373F3F8-1BED-4E82-B340-082EF1A593CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.092:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE777C8-B746-450B-8CDB-2436F7F01F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.093:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FCC309-14C4-4277-A1CE-E73676EBF17F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.094:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871C202D-2CF6-4741-B69B-95608CBA2B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.095:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972A7466-F24A-4F0D-BEBF-7E60B0234D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2917EFF-D512-470C-ACE5-B5A1B25CF3F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.097:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248EC7DB-8887-4665-8D15-8B79A2C5E232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.098:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E63B4A6-7038-480B-B9C8-DA78FA6630F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.099:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCA6B90-4661-41D9-8E98-BC62BFE68E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F26A5E-2852-418B-9DF9-27D635478117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF35BA6-BF3D-4D04-AC13-DBB6075F3056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F5CE62-8193-44B0-8152-CBB6B41E6789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B8A20B-F8FE-4CD9-B00E-B51703C1363C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4022F0A1-AEAE-4CEB-819F-9B5E3F77C06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03880F82-500E-4FC5-819F-D70F8F202990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2059AF45-8BB1-41AF-B54F-43C193E96000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEEDA4-4281-4219-ACCE-D1159D57ED17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA5018E-7CE9-46EE-9B70-ED0DB5171252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5942F1-840C-4EA2-A7E1-9943FF55111C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0102F827-454B-4B95-A8D6-B38C55C03B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0FF83E-9F54-42CD-99AC-BD99AAD2855C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E6B002-7058-4237-BAFB-F927ABA09F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.113:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9047DD8E-4FF6-4D37-B58B-BC157BD11F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.114:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7289C297-A856-4E07-AFB7-4D8D04310F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225E69FE-E58D-4ECE-AF5E-105C41E72F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.116:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1EA933-2AD7-4D6E-B20F-6591F36B76D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.117:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8188BD72-70B6-4884-9368-806C1262FD19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.118:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20373B93-43B9-4EC5-AC47-D7894F77F0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.119:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DD103E-D4F4-4E32-BA7C-E5EEA88BC960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0825D4F-7BDC-4FF3-BB97-72FB74102B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.121:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C91596-2F4C-42B1-8498-BBC4EC083EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE8FEFE-1D01-4109-B0BF-BF9CA05F9EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.123:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842146E2-D00E-48F2-A247-3046A0D5DC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8D0A2D-F5FE-4DD6-8A05-44064510DA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B1A34D-092D-4CB2-A44F-ED7287C175C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.126:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D4C9E0-B73E-4328-87E3-57ED54BBAA56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.127:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E9D16-44DB-40FE-833C-20B9AC3D1639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.128:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76220107-EDF2-40EF-BE0C-F4171BA3515C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.129:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013D553A-6AA3-48B9-B420-8799521D296F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60740626-7B99-4B6C-9526-2EA7017FBCBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F434650-E2F0-4B4A-ABA1-2B11993A0A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB32F6B6-DB68-4F85-B25F-305DD1BB2C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.133:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC54AAE2-96A3-46A0-989D-1B1A61B761FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.134:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4108C-B7B4-4E4A-83CB-C2FAFBFC8AD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.135:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A8BF757-A6D4-4755-BB9C-731CEB2790DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.136:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501F2AA7-D40A-42FC-ABE9-9F354D0B598A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.137:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5041AFA-DB58-44AF-978F-C9444855BF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5C059A-CCE3-44B8-BC11-C08B1FF45968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.139:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71623F4-516D-49C4-8741-56C061544603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6289A416-41D5-4E70-874D-1F7EEE6BE4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.141:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E7D57B-4B20-4C2E-9A5B-85891B3B7756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.142:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA59D3FE-A16B-4D47-8C4A-60BB1C883D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.143:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EECB25E-991A-4F91-8DAC-D2C2CCA077CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.144:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A805A487-B550-479C-8ECD-94704C96C729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.145:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032115F1-064E-4799-87F5-85DD44F784A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1EE0F9-F300-43DD-9EF2-1064FCD313DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.147:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2F7CB6-CA61-42CA-A7E4-DF31DD8CB08C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18282",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the (1) devWherePair[0], (2) orderBy, and (3) where parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.039:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCC857-C970-4EEC-A59B-8E08C936873B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7693EF3B-1579-4248-B7E4-79C19CA2F86D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CEDFA9-52BA-40CE-97AE-771F271C9886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.042:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA96DCB7-7531-4277-9668-98B79100D719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.043:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC03B7C2-5F62-4F04-9D2A-C05DA9BD978A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.044:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF6BD8D-8508-4F92-84A5-686826E8F0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846D51B8-FD10-46D1-8C6A-D9D3034211B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.046:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9B7622-4B80-4F99-A3AE-88EDAC0A4AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.047:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82605FDD-2E61-45D8-9104-DC2AE76569B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.048:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD385777-D471-48FD-8D41-001DF519A12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.049:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB8CED9-9162-497B-9335-9238940DB4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73C42E2-1D60-4A47-A9B6-B965E7D40755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.051:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC791432-2981-4412-A5CE-8740BDB44EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221A5EC8-67F5-410B-9C9F-22A3D7170A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40DCC21-D6C9-4EBF-A588-676089DABF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.054:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB3ABD1-1C32-482E-8A86-460A9E2D6504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.055:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3A6BC9-4E4C-4DB3-9FCE-69E1765BB46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D2BB72-8F72-42CE-9171-1C0DB52C0A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.057:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A4EB45-DDBF-40E1-8704-4AF01614B5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.058:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1E7A78-D797-47BD-A822-FF2042648A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.059:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B44FB83-1D15-467B-BCF4-14CCDAED2C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C62B8F4-A2E1-448D-92E7-4C118D2FD7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.061:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5B501E-FEFE-46FC-9967-A8ADD2A5E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "172F60D9-132D-4004-B14A-E0FF6551E3BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.063:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D5B404-B69F-4597-9F35-6EFCCFCE62BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.064:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDF5B86-7949-4912-ABA4-93AE674F5651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.065:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597616C5-5FFC-4150-A4C4-656D5D283549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.066:*:*:*:*:*:*:*",
            "matchCriteriaId" : "451748B6-1807-40B0-894E-D49C2EB01E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.067:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B0875F-F260-4D92-93C5-EA64B93B6122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.068:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D555E03-FEB0-47D2-9F12-74334E456CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFE8D3A-B043-447F-9A8E-584CA7B0B400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF042B4-E556-475F-9DCF-8AC5555AE385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.071:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5472ED86-8E16-49AB-BADF-101ADA632D45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.072:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD31F24-8087-4A20-B40B-38CC620552FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.073:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4533514-6935-4BD3-BDF3-79A43F89BEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.074:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE111521-208C-4264-8B07-0E37925F9003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.075:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF72CAC-921A-452E-BDCF-FEBE793279B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.076:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D431D6-CEAA-477D-8955-C249A65AD45B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.077:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5254375F-5325-4A11-9AE2-FCE35D851765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713E833C-27D1-4C48-8307-506C2663B9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.079:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D1EB97-D65A-4D19-87FC-A0A8EC394992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.080:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB8F5A-27CF-4170-9C76-91309EEEF071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.081:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD333174-00D3-4B59-B5B4-240AF30788E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.082:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92DECF60-6E89-407D-A009-EFFDCC18E48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.083:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE973B-5532-4DD0-A311-BC3E8159E591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.084:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA4F62D-1506-45A9-834F-E19203184162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.085:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71475CE5-7713-4277-84E2-1FA5C68E3C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.086:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B3E973-DF17-4027-B828-5325B291671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.087:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884C9FC7-7D20-401A-A2EF-93850ACB20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.088:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6C5902-E397-43BC-BF94-B228255D3E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.089:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0A0CCA-8008-4AE4-BE7F-CF408022CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.090:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82473F1D-D5B0-4F0B-8D7E-36B98EA2EC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.091:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2373F3F8-1BED-4E82-B340-082EF1A593CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.092:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE777C8-B746-450B-8CDB-2436F7F01F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.093:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FCC309-14C4-4277-A1CE-E73676EBF17F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.094:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871C202D-2CF6-4741-B69B-95608CBA2B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.095:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972A7466-F24A-4F0D-BEBF-7E60B0234D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2917EFF-D512-470C-ACE5-B5A1B25CF3F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.097:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248EC7DB-8887-4665-8D15-8B79A2C5E232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.098:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E63B4A6-7038-480B-B9C8-DA78FA6630F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.099:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCA6B90-4661-41D9-8E98-BC62BFE68E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F26A5E-2852-418B-9DF9-27D635478117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF35BA6-BF3D-4D04-AC13-DBB6075F3056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F5CE62-8193-44B0-8152-CBB6B41E6789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B8A20B-F8FE-4CD9-B00E-B51703C1363C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4022F0A1-AEAE-4CEB-819F-9B5E3F77C06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03880F82-500E-4FC5-819F-D70F8F202990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2059AF45-8BB1-41AF-B54F-43C193E96000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEEDA4-4281-4219-ACCE-D1159D57ED17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA5018E-7CE9-46EE-9B70-ED0DB5171252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5942F1-840C-4EA2-A7E1-9943FF55111C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0102F827-454B-4B95-A8D6-B38C55C03B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0FF83E-9F54-42CD-99AC-BD99AAD2855C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E6B002-7058-4237-BAFB-F927ABA09F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.113:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9047DD8E-4FF6-4D37-B58B-BC157BD11F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.114:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7289C297-A856-4E07-AFB7-4D8D04310F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225E69FE-E58D-4ECE-AF5E-105C41E72F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.116:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1EA933-2AD7-4D6E-B20F-6591F36B76D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.117:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8188BD72-70B6-4884-9368-806C1262FD19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.118:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20373B93-43B9-4EC5-AC47-D7894F77F0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.119:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DD103E-D4F4-4E32-BA7C-E5EEA88BC960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0825D4F-7BDC-4FF3-BB97-72FB74102B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.121:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C91596-2F4C-42B1-8498-BBC4EC083EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE8FEFE-1D01-4109-B0BF-BF9CA05F9EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.123:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842146E2-D00E-48F2-A247-3046A0D5DC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8D0A2D-F5FE-4DD6-8A05-44064510DA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B1A34D-092D-4CB2-A44F-ED7287C175C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.126:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D4C9E0-B73E-4328-87E3-57ED54BBAA56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.127:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E9D16-44DB-40FE-833C-20B9AC3D1639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.128:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76220107-EDF2-40EF-BE0C-F4171BA3515C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.129:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013D553A-6AA3-48B9-B420-8799521D296F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60740626-7B99-4B6C-9526-2EA7017FBCBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F434650-E2F0-4B4A-ABA1-2B11993A0A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB32F6B6-DB68-4F85-B25F-305DD1BB2C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.133:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC54AAE2-96A3-46A0-989D-1B1A61B761FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.134:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4108C-B7B4-4E4A-83CB-C2FAFBFC8AD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.135:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A8BF757-A6D4-4755-BB9C-731CEB2790DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.136:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501F2AA7-D40A-42FC-ABE9-9F354D0B598A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.137:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5041AFA-DB58-44AF-978F-C9444855BF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5C059A-CCE3-44B8-BC11-C08B1FF45968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.139:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71623F4-516D-49C4-8741-56C061544603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6289A416-41D5-4E70-874D-1F7EEE6BE4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.141:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E7D57B-4B20-4C2E-9A5B-85891B3B7756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.142:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA59D3FE-A16B-4D47-8C4A-60BB1C883D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.143:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EECB25E-991A-4F91-8DAC-D2C2CCA077CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.144:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A805A487-B550-479C-8ECD-94704C96C729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.145:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032115F1-064E-4799-87F5-85DD44F784A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1EE0F9-F300-43DD-9EF2-1064FCD313DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.147:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2F7CB6-CA61-42CA-A7E4-DF31DD8CB08C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18282",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration via an invalid action parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.039:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCC857-C970-4EEC-A59B-8E08C936873B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7693EF3B-1579-4248-B7E4-79C19CA2F86D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CEDFA9-52BA-40CE-97AE-771F271C9886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.042:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA96DCB7-7531-4277-9668-98B79100D719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.043:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC03B7C2-5F62-4F04-9D2A-C05DA9BD978A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.044:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF6BD8D-8508-4F92-84A5-686826E8F0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846D51B8-FD10-46D1-8C6A-D9D3034211B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.046:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9B7622-4B80-4F99-A3AE-88EDAC0A4AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.047:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82605FDD-2E61-45D8-9104-DC2AE76569B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.048:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD385777-D471-48FD-8D41-001DF519A12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.049:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB8CED9-9162-497B-9335-9238940DB4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73C42E2-1D60-4A47-A9B6-B965E7D40755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.051:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC791432-2981-4412-A5CE-8740BDB44EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221A5EC8-67F5-410B-9C9F-22A3D7170A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40DCC21-D6C9-4EBF-A588-676089DABF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.054:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB3ABD1-1C32-482E-8A86-460A9E2D6504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.055:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3A6BC9-4E4C-4DB3-9FCE-69E1765BB46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D2BB72-8F72-42CE-9171-1C0DB52C0A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.057:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A4EB45-DDBF-40E1-8704-4AF01614B5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.058:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1E7A78-D797-47BD-A822-FF2042648A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.059:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B44FB83-1D15-467B-BCF4-14CCDAED2C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C62B8F4-A2E1-448D-92E7-4C118D2FD7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.061:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5B501E-FEFE-46FC-9967-A8ADD2A5E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "172F60D9-132D-4004-B14A-E0FF6551E3BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.063:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D5B404-B69F-4597-9F35-6EFCCFCE62BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.064:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDF5B86-7949-4912-ABA4-93AE674F5651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.065:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597616C5-5FFC-4150-A4C4-656D5D283549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.066:*:*:*:*:*:*:*",
            "matchCriteriaId" : "451748B6-1807-40B0-894E-D49C2EB01E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.067:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B0875F-F260-4D92-93C5-EA64B93B6122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.068:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D555E03-FEB0-47D2-9F12-74334E456CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFE8D3A-B043-447F-9A8E-584CA7B0B400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF042B4-E556-475F-9DCF-8AC5555AE385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.071:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5472ED86-8E16-49AB-BADF-101ADA632D45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.072:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD31F24-8087-4A20-B40B-38CC620552FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.073:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4533514-6935-4BD3-BDF3-79A43F89BEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.074:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE111521-208C-4264-8B07-0E37925F9003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.075:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF72CAC-921A-452E-BDCF-FEBE793279B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.076:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D431D6-CEAA-477D-8955-C249A65AD45B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.077:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5254375F-5325-4A11-9AE2-FCE35D851765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713E833C-27D1-4C48-8307-506C2663B9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.079:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D1EB97-D65A-4D19-87FC-A0A8EC394992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.080:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB8F5A-27CF-4170-9C76-91309EEEF071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.081:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD333174-00D3-4B59-B5B4-240AF30788E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.082:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92DECF60-6E89-407D-A009-EFFDCC18E48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.083:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE973B-5532-4DD0-A311-BC3E8159E591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.084:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA4F62D-1506-45A9-834F-E19203184162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.085:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71475CE5-7713-4277-84E2-1FA5C68E3C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.086:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B3E973-DF17-4027-B828-5325B291671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.087:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884C9FC7-7D20-401A-A2EF-93850ACB20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.088:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6C5902-E397-43BC-BF94-B228255D3E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.089:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0A0CCA-8008-4AE4-BE7F-CF408022CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.090:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82473F1D-D5B0-4F0B-8D7E-36B98EA2EC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.091:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2373F3F8-1BED-4E82-B340-082EF1A593CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.092:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE777C8-B746-450B-8CDB-2436F7F01F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.093:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FCC309-14C4-4277-A1CE-E73676EBF17F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.094:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871C202D-2CF6-4741-B69B-95608CBA2B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.095:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972A7466-F24A-4F0D-BEBF-7E60B0234D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2917EFF-D512-470C-ACE5-B5A1B25CF3F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.097:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248EC7DB-8887-4665-8D15-8B79A2C5E232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.098:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E63B4A6-7038-480B-B9C8-DA78FA6630F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.099:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCA6B90-4661-41D9-8E98-BC62BFE68E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F26A5E-2852-418B-9DF9-27D635478117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF35BA6-BF3D-4D04-AC13-DBB6075F3056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F5CE62-8193-44B0-8152-CBB6B41E6789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B8A20B-F8FE-4CD9-B00E-B51703C1363C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4022F0A1-AEAE-4CEB-819F-9B5E3F77C06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03880F82-500E-4FC5-819F-D70F8F202990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2059AF45-8BB1-41AF-B54F-43C193E96000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEEDA4-4281-4219-ACCE-D1159D57ED17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA5018E-7CE9-46EE-9B70-ED0DB5171252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5942F1-840C-4EA2-A7E1-9943FF55111C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0102F827-454B-4B95-A8D6-B38C55C03B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0FF83E-9F54-42CD-99AC-BD99AAD2855C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E6B002-7058-4237-BAFB-F927ABA09F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.113:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9047DD8E-4FF6-4D37-B58B-BC157BD11F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.114:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7289C297-A856-4E07-AFB7-4D8D04310F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225E69FE-E58D-4ECE-AF5E-105C41E72F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.116:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1EA933-2AD7-4D6E-B20F-6591F36B76D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.117:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8188BD72-70B6-4884-9368-806C1262FD19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.118:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20373B93-43B9-4EC5-AC47-D7894F77F0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.119:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DD103E-D4F4-4E32-BA7C-E5EEA88BC960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0825D4F-7BDC-4FF3-BB97-72FB74102B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.121:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C91596-2F4C-42B1-8498-BBC4EC083EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE8FEFE-1D01-4109-B0BF-BF9CA05F9EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.123:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842146E2-D00E-48F2-A247-3046A0D5DC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8D0A2D-F5FE-4DD6-8A05-44064510DA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B1A34D-092D-4CB2-A44F-ED7287C175C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.126:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D4C9E0-B73E-4328-87E3-57ED54BBAA56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.127:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E9D16-44DB-40FE-833C-20B9AC3D1639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.128:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76220107-EDF2-40EF-BE0C-F4171BA3515C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.129:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013D553A-6AA3-48B9-B420-8799521D296F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60740626-7B99-4B6C-9526-2EA7017FBCBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F434650-E2F0-4B4A-ABA1-2B11993A0A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB32F6B6-DB68-4F85-B25F-305DD1BB2C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.133:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC54AAE2-96A3-46A0-989D-1B1A61B761FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.134:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4108C-B7B4-4E4A-83CB-C2FAFBFC8AD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.135:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A8BF757-A6D4-4755-BB9C-731CEB2790DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.136:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501F2AA7-D40A-42FC-ABE9-9F354D0B598A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.137:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5041AFA-DB58-44AF-978F-C9444855BF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5C059A-CCE3-44B8-BC11-C08B1FF45968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.139:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71623F4-516D-49C4-8741-56C061544603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6289A416-41D5-4E70-874D-1F7EEE6BE4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.141:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E7D57B-4B20-4C2E-9A5B-85891B3B7756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.142:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA59D3FE-A16B-4D47-8C4A-60BB1C883D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.143:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EECB25E-991A-4F91-8DAC-D2C2CCA077CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.144:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A805A487-B550-479C-8ECD-94704C96C729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.145:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032115F1-064E-4799-87F5-85DD44F784A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1EE0F9-F300-43DD-9EF2-1064FCD313DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incogen:bugport:1.147:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2F7CB6-CA61-42CA-A7E4-DF31DD8CB08C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18282",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the server for Dopewars before 1.5.12, when running as an NT service, allows remote attackers to execute arbitrary code via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dopewars:dopewars:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD47E7C3-A213-4245-BA58-D051BC9544C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dopewars:dopewars:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5E823B-64EB-41BD-BC59-7068DE820F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dopewars:dopewars:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9D4FFD-2D3F-4E40-9B48-67D9544F64B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dopewars:dopewars:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1776214A-D611-4D49-AF13-5CAB4D5395B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dopewars:dopewars:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5E5008-86D1-4EFD-BEB1-F9EE84EA87E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dopewars:dopewars:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A1BDF4-2069-4C45-AFF5-677CECEEF0C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dopewars:dopewars:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D97598-5288-41D2-BC5C-02FC6FA48767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dopewars:dopewars:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC5E0156-126D-49A3-896D-D1BAFA9765AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dopewars:dopewars:1.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6892CC-6A50-490C-88E2-6859A1B23C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dopewars:dopewars:1.5_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82005AC8-1D5D-43AF-82C0-53B153B5A370"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18246",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=381793",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16104",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=381793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in Free ClickBank 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keywords parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpfreebies.com:free_clickbank:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "21E70A98-BA56-4D52-BEB5-90CAB6D5513C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/free-clickbank-search-engine-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21489",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/free-clickbank-search-engine-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commands via the (1) f parameter to viewforum.php, (2) t parameter to viewtopic.php, and (3) view parameter to usercp.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vubb:vubb:alpha_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5745239-6254-4FF5-91AB-8B3D37B51E8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21329",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21330",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21331",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified fields in the user edit profile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vubb:vubb:alpha_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5745239-6254-4FF5-91AB-8B3D37B51E8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain the full installation path via (1) the c parameter in cart.php and (2) unspecified search module parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sum_effect_software:digishop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.17",
            "matchCriteriaId" : "D917678B-271C-4FB0-8D09-E1D47DABBF1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/digishop-3x-sql-injection-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21302",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/digishop-3x-sql-injection-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php in DapperDesk 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:dapperdesk:dapperdesk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "2769B09E-0C6E-4877-8964-4787036A2547"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/dapperdesk-30x-page-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21315",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/dapperdesk-30x-page-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the include_file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idevspot:isupport:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D0FC32-BE89-4EDE-8DBA-463D7D10FA61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/isupport-1x-includefile-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21317",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/isupport-1x-includefile-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in tickets.php in cSupport 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forperfect:csupport:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "1548E278-C451-4DCD-94BD-E66AC88EEA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/csupport-pg-sql-inj.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/csupport-pg-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer.  NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18216",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16141",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2D033F-18B3-49C1-9EF3-347685F12E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70AE9137-3FC1-4B5A-B460-D46DF8E041B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "907D1B87-2347-4B70-A045-0DDF93662A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB559F1-D8A6-4265-963C-1265FC7997A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE0A89A-6DB5-482F-985C-C314DC4D5E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D1D438-86A5-4224-852F-EC1E5DB83DC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/zorum-forum-35-rollid-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21372",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16131",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/zorum-forum-35-rollid-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argument.  NOTE: because this program executes with the privileges of the invoking user, and because remote programs do not normally have the ability to specify a command-line argument for this program, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFE81D1-EE81-415D-ACE0-F97AF38BE007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BDA79B-B1CC-479C-A1DA-41DDDE098EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A1E0B7-020F-4110-9603-58CA8CEB7581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE627C32-9F4B-4D36-AC4B-5D01A47BFD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3366C2D1-F30A-413B-94A2-7DBDACC083EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8585089C-A6B5-4BFE-BEA3-133B94F24F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1011521-AEF2-40EB-B671-66B20FF01CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73F9019-EA47-4962-B080-C65ED42000F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9843D850-DC4C-49D5-AAEB-EF75FB54F08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9B3100-2223-4201-AE29-B4A4EAFF2595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B556-A1B4-4AEF-8223-5ED44819515D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89BC32A-6D3B-4B83-BD49-856233EEF51C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.rarlab.com/rarnew.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420679/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15123",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/0xletzdance.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.rarlab.com/rarnew.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420679/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/0xletzdance.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a URL in the remote avatar url field, in which the URL generates a parsing error, and possibly requiring a trailing extension such as .jpg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "70BC7FDF-AEAD-4BCA-AB0B-36F62D3D92A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC28EB5-343A-4B55-8ECE-8C46D304A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3499B6-7DC8-4DE5-80EB-1EEA3307ABA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53F61D2-5FD2-4625-A9FB-8E0258924BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306C6BDF-C687-4B63-998B-B520DF1D1B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF18ED7C-80BB-4A78-8809-9AAE817876A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D731A35-E0DB-4F40-A981-C38229A2EB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4053C8E5-5510-4814-A46E-89B81266C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6753AB-DFCF-4D40-8267-645810F7967E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B3772-A566-4A51-8B51-68E78C86CB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFBBAA9-BD46-44E3-9618-D87384E959A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E594B0-05D5-46C2-8F06-F58E3F8BBD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E0702A-9235-45BE-82A8-BFD57A0DCC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799F983E-908D-4B9F-9C99-6422863E7807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0914B4-24A9-438F-9B44-A6809D755168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE465DFE-6F77-4F8A-B556-A9955B4A0889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1A0EF6-1267-463E-B4F7-83D2ACB64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74013F50-0677-454E-8E6C-101CF210E989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC951B-860E-4AF1-8908-71C7099FB19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87198098-906E-4C39-B293-34BBB1779011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD10C2CD-DEDA-4CC7-B5E9-B9218E1A5851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43639D6-C4FE-486B-9822-9DDDD922CB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13831AA-4393-4BB3-BBE5-8E50E2F940FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E9C82-64CF-4487-8947-ED745C41945A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D099410F-AD78-4EF1-879E-BEED838B90E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B411D271-87B5-4A82-8E05-5277E8E205E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FD2B80-AEB5-444D-AEC3-F59E6727BCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA6003D-1E93-472E-B037-8D0922C4247C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B366723-3598-4B4A-AFB9-E4A9616D033B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFD7266-0E3B-44B3-AC8E-DE0BFC5E2939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A869E6C9-6CA7-4FB8-88E2-142C6294D028"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/vbulletin-351-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vbulletin.com/forum/showthread.php?t=166391",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/vbulletin-351-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vbulletin.com/forum/showthread.php?t=166391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in eFileGo 3.01 allows remote attackers to execute arbitrary code, read arbitrary files, and upload arbitrary files via a ... (triple dot) in (1) the URL on port 608 and (2) the argument to upload.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efilego:efilego:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C0F9B0-B70A-47D6-9A8C-09B263F7A646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18279",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015430",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/PaQFile_Share.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22151",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16124",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/PaQFile_Share.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "upload.exe in eFileGo 3.01 allows remote attackers to cause a denial of service (CPU consumption) via an argument with an invalid directory name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efilego:efilego:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2469311D-B0E5-4233-9041-B1FDBCFE9CC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18279",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015430",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/PaQFile_Share.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22152",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16124",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ipomonis.com/advisories/PaQFile_Share.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The m_join function in channel.c for PTnet ircd 1.5 and 1.6 allows remote attackers to cause a denial of service (memory exhaustion that triggers a daemon restart) via a large number of requests to join a \"charmed channel\" such as PTnet, #PTnoticias and #*.log, which causes ircd to open the channel even though it does not have any valid users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptnet:ptnet_ircd:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F8D7CA-ADF8-4D5B-A43F-01B64564A5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptnet:ptnet_ircd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C9393E-C668-4D98-BD87-FBE5415C4549"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1476.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015425",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1476.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drivers for certain display adapters, including (1) an unspecified ATI driver and (2) an unspecified Intel driver, might allow remote attackers to cause a denial of service (system crash) via a large JPEG image, as demonstrated in Internet Explorer using stoopid.jpg with a width and height of 9999999."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ati:catalyst_driver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E822DD-6123-4CD8-9FE4-BC8A91D94F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:display_adapter_driver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86BC7F66-B17A-46B3-A4C1-95971EB8DFC5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/420847/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420930/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420947/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420847/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420930/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420947/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of Recruitment Software installs admin/site.xml under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information (MySQL database credentials) via a direct request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recruitment_software:recruitment_software:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55FC9B99-8D98-4711-BC3C-304C37F466BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/420700/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420700/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in (1) GmailSite 1.0 through 1.0.4 and (2) GFHost 0.1.1 through 0.4.2 allows remote attackers to inject arbitrary web script or HTML via the lng parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfhost:gfhost:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B87DAFC-3245-49CC-99E0-07765DBEE850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfhost:gfhost:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F73233E-9E9E-4718-B1AB-BE0CE364315F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfhost:gfhost:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D19941F-1A35-4C3F-B286-D8F8646CD387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfhost:gfhost:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD310FC-A338-4C09-B518-21B1F6022E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfhost:gfhost:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965AB611-B682-41CA-B5A3-7BEE5B81F8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfhost:gfhost:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17066B83-AD11-46D2-940A-618F238E0D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gmailsite:gmailsite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74391689-2796-4F61-9E15-7B9D99DC72CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gmailsite:gmailsite:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C25D0C-4B1E-451D-8AF4-8A760884BFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gmailsite:gmailsite:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8881B0-3380-4BFC-B8E3-968A96AC2DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gmailsite:gmailsite:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDA2CA7-4D7B-4EAB-AA77-27EF791A9EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gmailsite:gmailsite:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF85D13-5D5E-40FB-A161-81D39B21CA8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://foros.ojobuscador.com/tema1936.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/12/gmailsite-variable-cross-site.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18155",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16081",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://foros.ojobuscador.com/tema1936.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/12/gmailsite-variable-cross-site.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in HelpDeskPoint 2.38 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:help_desk_point_software:helpdeskpoint:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.38",
            "matchCriteriaId" : "91166EAC-AFE3-4AF4-9935-628D9AC9F7DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/helpdeskpoint-free-help-desk-software.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/helpdeskpoint-free-help-desk-software.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in SMBCMS 2.1 allows remote attackers to execute arbitrary SQL commands via unspecified search parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smbcms:smbcms:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40FCBF5-8A98-4343-850B-9D3BE98D3C16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/smbcms-v21-sql-injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/smbcms-v21-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) billshowid, (2) billdetailid, (3) fuse, and (4) frmClientID parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clientexec:clientexec:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43E2F03-75C6-4FB9-9DD4-A1A43BCD2CB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/clientexec-2x-multiple-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17756",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ce-talk.com/showthread.php?t=653",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.clientexec.com/forum/showthread.php?t=8006",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21163",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/clientexec-2x-multiple-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ce-talk.com/showthread.php?t=653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.clientexec.com/forum/showthread.php?t=8006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/21163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to execute arbitrary SQL commands via the p parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFABCC3A-4383-4E4D-8C64-ED4326473A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB9319F-61C1-4071-AB48-9C907E9013A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789DB92D-8818-4779-9F76-DB85A1C7B914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A02E32F-E83F-4A4B-BDB4-B48130AA3678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82DAE53-C96C-4E1D-A3CF-40E5AFD4C75B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FD17C4-C53B-456A-8225-5EF8B2B190DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1330AFD-0512-411F-A683-EEA88A3FD4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E65A27-42E2-41D6-8EA6-DEC3DBC154E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88407583-F902-49E5-BE3D-FC4FF8F6C31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A13D0F-9145-486A-99CE-FE205D943BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB75AAFB-085C-4EC4-BFD9-703D6DF769A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A459A77-849F-40C2-AF53-EACA969F66A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900B143D-54B0-4EA3-88C5-579FFB691A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05B16-3D20-4E7F-8B50-533D02D8E357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B82803-87C1-4CC1-BCF7-19DEA7B27348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BEB3F7-A02D-4594-9192-77F650247D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175A3CCC-18A8-4F3D-82D4-1B9D40085389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5428BF9-796D-4BF4-9700-5CEDC620D26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25B31FB-A201-4558-B1CA-316A38542824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10576CCF-5D99-400E-BA78-652C467B6B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E641C56F-26EC-4841-A55D-34DABCC07AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B81C89-EC43-42B1-AA8A-1B0868F482FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827891DE-585E-4FCF-862F-93677E044A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E88504EE-77C9-44AA-8907-585001CC9CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.09.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0538A4BC-EEE7-48C4-BDB6-5294ACAAA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EABDEA-4D97-4AE1-B29D-FFEB320F42C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD262C3-6AEE-4598-95DF-EDF72AF205D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6585D3F3-62D5-4C57-A49C-844AE2551695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA19BFAD-3D70-49E5-ACAB-FB8A9984F65C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A190EFBC-5EFB-420B-86F0-9EDCEBA5CE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E88C1C-E7C3-4D61-88E3-A844C7488F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDE9D8B-4EEB-4D1F-BFD5-70558D8A2DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C659B570-B3F9-400A-856F-E898B837E4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D264A947-C81F-40E9-B751-DB94FBC03690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D42D54A-1F54-4B4B-A40E-D6187BF4A18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77B4E40-6BBE-4BCA-A94D-582E2507EDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E143707-EE46-4F82-A4FF-7289D8BC7977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F1E9C6-BE42-4295-A61C-827E4E31D06F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9D7096-0CC2-4B8E-8A03-82E2FA7A3C08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED295543-B3EA-40CB-BE62-684D7256C325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A105113B-7050-4057-B000-9DE45BDCC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F66260-3E42-4515-9331-3006A3BD307A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230662D0-C5DB-41A8-AF66-3D84AD46F4BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229E7A0A-43D0-4583-82EB-CC59623C9148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924B0B80-DC91-4A3F-A45B-3520FD771B5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989468FA-693B-4C75-B073-710E65FE0567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209B88B1-0149-4F9F-A814-DC5C9F0D0826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08BE5290-6977-48DC-81DD-77474F188735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4890B631-B27A-4B8A-B06B-816E5756978B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86992321-0623-4037-A41C-30F3AD2C7654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59DC796-C051-4EC0-AFA6-691BFE9EB442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.10.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88533439-23D3-449E-BE49-250BEE2189FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8577FB1C-7545-42F4-A38B-D1804F360379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A183FD61-7446-4AEB-A42A-1C6F32BFAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AAC5CD-34AA-4E87-B270-8BC937639C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EBA604-F908-4EB7-8341-27BB38028201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645CFC80-86D3-4026-8729-DB891389D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D50693-4E2F-4543-AA3E-46140CCACC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D15F055-CF5E-42AE-9AC5-4E4FD3F51859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDA4D7-A315-4FBE-91D3-F51AC1A50816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931EF6F8-8D5C-4AB3-A005-26B09B046BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16008B56-BFA3-462E-8CD9-6F16ED6B5DCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3314302E-4862-41C3-9A80-70C92A20DA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C3CE434-29D6-4DCD-800B-2604EE7F458E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361943B4-0E6A-434E-8F1F-6B87DA5ED038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FFEDBD-A005-4F17-93D1-D313EB80B46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDAD0ED-620C-44E8-A6FA-9AFD180EC7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0AC56E-C5A7-4145-A55F-7E7C6A079146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CEDB1A4-3EF1-4D00-971B-C3C175AA1F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0EB61-C44F-47B7-BA45-B1AD4D058731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D055FA32-F331-4050-AE78-7056398F7BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6317355-0CF2-4059-968B-10DD17B11DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0541F0-8358-4775-93CC-7A8480123328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "409A8C8C-92B9-4894-B709-18090CC3DF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.12.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA995BD-8DC0-4E96-9CE1-507B6ED8E111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.12.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0963BEF-2B67-41FD-BEBC-897727627566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.12.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836FFA9E-9A82-4B09-98B7-7E75619F4B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.12.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF721443-C965-48C8-AE90-063E5EF87180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.12.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77252893-A4A9-405A-A0D9-106E36B8EEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.12.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C3F869-A715-474E-83A8-C6DD54F904FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan_lath:zina:0.12.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DFB5C5-C691-42D8-A169-1C876DE2C2E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/zina-sql-injection-vulnerability.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/zina-sql-injection-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in poll_frame.php in Vote! Pro 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the poll_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vote_pro:vote_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "DCB08CA1-1AFD-4ADE-A7BC-E81E7E662BC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/vote-pro-4x-pollid-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21309",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/vote-pro-4x-pollid-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2023-11-07T01:58:12.293",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4619.  Reason: This candidate is a duplicate of CVE-2005-4619.  Notes: All CVE users should reference CVE-2005-4619 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote attackers to execute arbitrary SQL commands via the page parameter.  NOTE: the provenance of this information is unknown because the source URL is not available; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:supporttrio:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431F9EDF-FC7D-4739-828D-5285E62D1E86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/activecampaign-supporttrio-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21319",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/activecampaign-supporttrio-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nl_fib_input function in fib_frontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service (invalid memory reference) via malformed fib_lookup netlink messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18C6032-012A-4B09-8D16-680CA3080D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E4A2912-12AC-4DF1-8023-A0B7DBE9A866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146F7A77-A950-4CAD-BDA9-C239696F569D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4B2ABB-0283-4532-9E29-B37BFF5FDFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DADA29-DCD3-44C4-9BDB-B881D6FCE3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD794C6-11F5-4A2B-9A3C-E03069A1526B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A3E250-5BC6-4AD3-A3DE-7F876FD90BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B10DC6E8-1A85-4F3B-88C9-0425782010A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC74D465-3256-4D87-8F47-C4D7CEA6E2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "1760ADC9-78A1-4133-9720-5319A4CF1DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "28ECE0D4-624D-4804-8013-DBA9BAF659ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "3C115333-E386-4B4D-91C6-69ECE55666F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D62621-2C12-40F0-8726-E48926E4DA44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "614F1C35-94B2-4A86-AEB4-55C774445E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "ECDD69D6-F79F-4F0E-BA3D-E721A1885A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCD388A-1E43-492E-8EEC-4E14EDD7AB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550DFE6E-DCE6-4649-8746-522996021DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF51F68C-60A5-451F-9150-6DABBAE1D41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3BF9D6-BE14-4590-91B8-501DC92261BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F04081-D672-488E-A91D-5088DD04AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18216",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea86575eaf99a9262a969309d934318028dbfacb",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16139",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea86575eaf99a9262a969309d934318028dbfacb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier for attackers to trick the user into bypassing intended security settings."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E887F99-5A89-432D-986C-3E49E5DFACBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D2906A-69FE-4A13-B474-A84725E60220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EA7C32-30D8-4367-B2F6-6394408E63B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A063FBBE-4D34-45D0-9AC8-66CFC64D22EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0436BF-D4B6-4437-A509-FEBB779E4B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24B3240-5110-4810-A37A-C9A0B4A1F856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14968CA-8FA9-4E71-9C0C-3ABFBE7920C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B4ED38-FE08-40F3-B164-482146BF7BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E667DBA8-23C6-4521-9BAF-17D667886242"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://qa.openoffice.org/issues/show_bug.cgi?id=53491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015419",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://qa.openoffice.org/issues/show_bug.cgi?id=53491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of OpenOffice.org as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) nav parameter in the downloads module, (2) Full Name and (3) Email fields in the core module, (4) Full Name, (5) Email, and (6) Subject fields in the tickets module, or (7) Registered Email field in the lostpassword feature in the core module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.00.26",
            "matchCriteriaId" : "F48A71F9-1E32-4572-8130-6569E8C816D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16094",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters in the news module, (3) downloaditemid parameter in the downloads module, and (4) kbarticleid parameter in the knowledgebase module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.00.26",
            "matchCriteriaId" : "F48A71F9-1E32-4572-8130-6569E8C816D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the CA-driver (dst_ca.c) for TwinHan DST Frontend/Card in Linux kernel 2.6.12 and other versions before 2.6.15 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by \"reading more than 8 bytes into an 8 byte long array\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18216",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) pollid or (2) previouspoll parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:class-1:poll_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "7A6821BB-5C6B-4AD4-B99B-6275A6016131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/class-1-poll-software-multiple-sql.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/class-1-poll-software-multiple-sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in home.php in eazyCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the page_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eazycms:eazycms:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B801392-45EE-44BA-8C5A-FE5F090DA373"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/eazycms-pageid-sql-injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/eazycms-pageid-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to (1) search.php, (2) members.php, (3) stats.php, (4) viewforum.php, (5) register.php, (6) usercp.php, (7) groups.php, (8) pms.php, and (9) calendar.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hydrobb:hydrobb:1.0.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031B74C4-DEDE-487A-8A7A-300B0AD54E62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/xss-in-hydrobb.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21293",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21294",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21295",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21296",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21297",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21298",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21299",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21300",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21301",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/xss-in-hydrobb.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Antharia OnContent // CMS allows remote attackers to execute arbitrary SQL commands via the pid parameter.  NOTE: it is not clear, but this might be an application service provider, in which case it might be excluded from CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antharia:oncontent_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B1ED50-E7EE-4A4F-87CC-845FFE3835B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/20/20888-oncontent-sql.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17596",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/20/20888-oncontent-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF72084-56B5-4E1B-B701-887984789068"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.edgewall.com/trac/ticket/2473",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.edgewall.org/ticket/2473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16198",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.edgewall.com/trac/ticket/2473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.edgewall.org/ticket/2473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in 3CFR allows remote attackers to execute arbitrary SQL commands via the LangueID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3cfr:3cfr:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00B20B8-CF90-4BB2-B4FF-2C92D98AEABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hackers.by.lv/showthread.php?p=408",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/ref/20/20832-3CFR-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20832",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://hackers.by.lv/showthread.php?p=408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/ref/20/20832-3CFR-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to include arbitrary files via the mode parameter, possibly due to a directory traversal vulnerability.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pearlinger:pearl_forums:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C43750-4E98-48B8-9B7C-7445814E0347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pearlinger:pearl_forums:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE904D7-F2C2-43BE-AA42-D0A742D61BED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17533",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to execute arbitrary SQL commands via the (1) forumsId and (2) topicId parameters in index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pearlinger:pearl_forums:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C43750-4E98-48B8-9B7C-7445814E0347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pearlinger:pearl_forums:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE904D7-F2C2-43BE-AA42-D0A742D61BED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17533",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe, allows user-assisted attackers to cause a denial of service or execute arbitrary code via a .m3u playlist with a long entry, possibly involving large field names, as demonstrated by SecuBox.Labs.m3u.  NOTE: this issue might be the same as the .m3u vulnerability in CVE-2004-1569, but if so, then CD:SF-LOC suggests creating a different identifier since the .m3u issue would affect different versions than the .pls issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:illustrate:dbpoweramp_music_converter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5",
            "matchCriteriaId" : "8B6E1EF3-91EE-4417-9288-29C32B050A65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secubox.shadock.net/dBpowerAMP_Music_Converter_v11.5_Local_Buffer_Overflow_Issue.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015415",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secubox.shadock.net/dBpowerAMP_Music_Converter_v11.5_Local_Buffer_Overflow_Issue.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) the entry parameter in index.php and (2) the gb_id parameter in comment.php.  NOTE: The index.php/entry vector might be resultant from CVE-2005-1548."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_guestbook:advanced_guestbook:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30BA24F-6517-457E-870E-E71CC8D99D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_guestbook:advanced_guestbook:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ACF1A1-BAAA-47EF-AAE2-AEB9C124E345"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1230.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.morx.org/guestbook.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22188",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1230.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.morx.org/guestbook.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Joomla! 1.03 does not restrict the number of \"Search\" Mambots, which allows remote attackers to cause a denial of service (resource consumption) via a large number of Search Mambots."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6A159A-7C68-41A3-A41E-5008D5F293EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17675",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/499/66/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Product" ]
      }, {
        "url" : "http://www.osvdb.org/21041",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/499/66/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Product" ]
      }, {
        "url" : "http://www.osvdb.org/21041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:epay:2.0:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "08F2B394-3623-4ADB-A51A-99702B31DA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/epay-pro-pmodule-sql-injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/epay-pro-pmodule-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phlymail:phlymail:3.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2248B9C-86BC-4796-9026-5E20096034E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phlymail.de/forum/viewtopic.php?t=842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20976",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phlymail.de/forum/viewtopic.php?t=842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting view_caricatier.php, and then requesting any file in the admin directory with a cookie_username=admin argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:al-caricatier:al-caricatier:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC36A24-5EDB-44E8-A015-F534BCB3D4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:al-caricatier:al-caricatier:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1D56C4-DFE3-4129-B92B-F2483E14476B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0483.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17292",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0483.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle for OpenView (OfO) 8.1.7, 9.1.01, and 9.2, and OfO for Linux, allow remote attackers to have an unknown impact via unknown attack vectors.  NOTE: because of the lack of details in the vendor advisory, it is unclear which set of existing CVEs this advisory might refer to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oracle_for_openview:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27E0491-0D88-4632-973C-2B45BF8E1978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oracle_for_openview:9.1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D7A2B2-9145-4A75-B51E-4B4AAF4F47B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oracle_for_openview:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D3832C-0DB7-460F-A427-31E70DBEE5A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the news_body parameter, as demonstrated by elements such as \"<me<meta>ta\" and \"<sc<script>ript>\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B24DACA-1F61-4AD6-9074-F330EFB28B92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0272.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17312",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0272.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in TClanPortal 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands, and retrieve all usernames and passwords, via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:triggertg:tclanportal:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C08556C-F3CA-4055-BD2E-3399CF4AC6F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/TClanPortal_sql_inj.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17324",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15173",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/TClanPortal_sql_inj.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocean12_technologies:calendar_manager_pro:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A876D7-2FFD-4F6B-9862-A5B584F202C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15329",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iisworks:aspknowledgebase:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59D7663A-0FA8-4E6C-905E-D70A032F01C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0122.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17517",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20713",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2375",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Nov/0122.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by \"nobody\", then executing ipcoprscfg to restore from this backup."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED06B358-E0EF-4E4F-848A-E720ABA78633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B204E3C9-131D-40E6-A441-1CBA4E953953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84B184-A911-46F0-BB7E-D63F401A41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5966C1-DC13-4C80-AEC8-C64C8B2597DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D86E163-5BE5-443D-AEA0-A245A746ED7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165FE5EE-4B87-47E1-8198-8097E29FC2A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B378FA93-43FC-4B83-990B-EB71CDE011C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17513/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=369759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1344032&group_id=40604&atid=428516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15377",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17513/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=369759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1344032&group_id=40604&atid=428516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by \"nobody\" but not yet encrypted, then executing ipcoprscfg to restore from this backup."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED06B358-E0EF-4E4F-848A-E720ABA78633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B204E3C9-131D-40E6-A441-1CBA4E953953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84B184-A911-46F0-BB7E-D63F401A41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5966C1-DC13-4C80-AEC8-C64C8B2597DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D86E163-5BE5-443D-AEA0-A245A746ED7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165FE5EE-4B87-47E1-8198-8097E29FC2A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcop:ipcop:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B378FA93-43FC-4B83-990B-EB71CDE011C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17513/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1344047&group_id=40604&atid=428516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17513/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1344047&group_id=40604&atid=428516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campware.org:campsite:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0822747B-52C8-40D3-8F91-F001F1124912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=367403&group_id=66936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20698",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=367403&group_id=66936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerability than CVE-2005-4664."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEB771C-E55A-4EBB-85BA-46748CB2D4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5F7071-8B78-42C6-B456-927E1ADC87A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6BFBF5C-6BE4-4666-AEAE-3EF75A24F5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7A9527-2D2B-47D5-8013-37520D1D6785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72057FBC-762C-4457-A3D2-A56D1E6D878F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2057549-94D6-4BC1-ACC3-493B9EE12FCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17470",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=45554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=369163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20751",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=45554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=369163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEB771C-E55A-4EBB-85BA-46748CB2D4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5F7071-8B78-42C6-B456-927E1ADC87A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6BFBF5C-6BE4-4666-AEAE-3EF75A24F5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7A9527-2D2B-47D5-8013-37520D1D6785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72057FBC-762C-4457-A3D2-A56D1E6D878F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2057549-94D6-4BC1-ACC3-493B9EE12FCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17470",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=45554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=369163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=45554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=369163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocomon:ocomon:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2057549-94D6-4BC1-ACC3-493B9EE12FCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17470",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=45554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=45554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B349F-F76D-49D2-95DA-C8670E32530A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB336F6C-E81A-43C2-A252-36A192D9CADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00082231-3168-4FCC-807B-8AD3DBBFCE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FF770-BEB4-4320-AA45-399A5CC6540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97DA335-4815-4608-84D5-67F4E539D8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE58D68-FC34-4F70-849A-2E6CC919230D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713E747-5529-4A64-95B4-D9678D8E88B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://punbb.org/changelogs/1.2.6_to_1.2.7.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.6_to_1.2.7.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422088/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14808",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://punbb.org/changelogs/1.2.6_to_1.2.7.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.6_to_1.2.7.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422088/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to inject arbitrary Javascript via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phlymail:phlymail:3.02.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A6B36C-FCF0-4E54-BCDE-61A7AA46C2B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phlymail:phlymail:3.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2248B9C-86BC-4796-9026-5E20096034E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phlymail.de/forum/viewtopic.php?t=842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18536",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phlymail.de/forum/viewtopic.php?t=842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument.  NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long arguments when it is invoked from other programs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:info-zip:unzip:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390337E4-2A52-4CB4-9730-BC5FEB7691E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:info-zip:unzip:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39AAC8DA-C1CB-4D05-9CE4-37EE0452F1B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:info-zip:unzip:5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B550991-5E21-4537-B43B-9507B7B4BA7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:info-zip:unzip:5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CED6B5-1B14-4076-BA6E-3779D2D143B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:info-zip:unzip:5.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCCB6FA-6723-4096-A426-0C6975F258C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:info-zip:unzip:5.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D30AB65-C5A7-4F2E-AD6E-B9C7CE21D13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:info-zip:unzip:5.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C2C1C-F1DD-4DB7-BCF7-4DE7D35CF4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:info-zip:unzip:5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E623D2F-C9DA-4937-BE64-236323A7C99E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0930.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1012",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.info-zip.org/FAQ.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0203.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430300/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15968",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0006",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/248-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/248-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0930.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.info-zip.org/FAQ.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0203.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430300/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/248-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/248-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178960\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.\n\nThe risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 2.1 which is in maintenance mode.",
        "lastModified" : "2007-09-05T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.2_08, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through JDBC, a similar vulnerability to CVE-2003-0845."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parosproxy:parosproxy:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A978C47-8B38-4FA3-A2E1-82ABB1037555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parosproxy:parosproxy:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006FEC73-88A8-42FB-89CA-115B59BE93D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parosproxy:parosproxy:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E5C3A1-F89C-4C96-9921-1D2ACABFDA6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parosproxy:parosproxy:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA13D4AE-2657-435C-BF7B-117CDF8337D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parosproxy:parosproxy:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8618FB-0552-480C-A15F-9B7B008B82EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parosproxy:parosproxy:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20B615F2-43E2-4998-A5DA-B96B359549A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parosproxy:parosproxy:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623558DE-5BE5-43EB-8B25-28A7C948FA3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0042.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/sf/pentest/2005-11/0048.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=367666&group_id=84378",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20722",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-11/0042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/sf/pentest/2005-11/0048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=367666&group_id=84378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in RT Internet Solutions (RTIS) WebAdmin allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rt_internet_solutions:rt_internet_solutions_webadmin:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D22E82-8C5A-4D90-A736-1BB468470AC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0170.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0170.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citypost:php_lnkx:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87DB1C7-CAC4-46DB-A976-9AF3AB043A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15009",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013752",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13255",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/15676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citypost:simple_php_upload:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF265F6-4062-4A40-A8CF-DF1632924CDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1013749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13261",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1013749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remote attackers to inject arbitrary web script or HTML via the (1) m1, (2) m2, (3) m3, (4) imgsrc, and (5) m4 parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citypost:simple_image_editor:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE4C055-FA13-4AF1-B804-84C48848A286"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15010",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ioFTPD 0.5.84 u responds with different messages depending on whether or not a username exists, which allows remote attackers to enumerate valid usernames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inicom_networks:ioftpd:5.8.4u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0897BE70-A33E-4DF5-97D7-D4BE191D24C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.critical.lt/?vulnerabilities/119",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/Kdocument79.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.critical.lt/?vulnerabilities/119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/Kdocument79.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the (1) c or (2) s parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:complete_php_counter:complete_php_counter:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2987A2-19AE-467C-B4E4-BF95C6AA4155"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015054",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20084",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20085",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrary web script or HTML via the c parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:complete_php_counter:complete_php_counter:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2987A2-19AE-467C-B4E4-BF95C6AA4155"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015054",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15112",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service (application crash) via images with crafted IPTC metadata."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_huggel:exiv2:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5492976D-EBFF-4EDC-9611-091B6D3A7F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_huggel:exiv2:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70C8FF77-F6AD-4C69-8292-B0739BAF5B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_huggel:exiv2:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96609D0C-73BD-4D5F-8A93-995A50CACA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_huggel:exiv2:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E6F95E-8AD8-4474-A63E-6231E9685174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_huggel:exiv2:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089E024F-5B9B-4B0C-801D-C9CB3BE01B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_huggel:exiv2:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A9B864-8153-4492-908C-284D3C20AE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_huggel:exiv2:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A2B2A7-CA56-4884-8D22-0C1E2EBD4A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_huggel:exiv2:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE61F68E-FFC0-4DEB-BB32-0009740DB3AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.robotbattle.com/mantis/bug_view_advanced_page.php?bug_id=447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://home.arcor.de/ahuggel/exiv2/changelog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18619",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16400",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.robotbattle.com/mantis/bug_view_advanced_page.php?bug_id=447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://home.arcor.de/ahuggel/exiv2/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in additional_images.php (aka the Additional Images module) before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the products_id parameter to product_info.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72557206-68C9-4EA4-B17A-873B8533DCE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11B241D-C8A6-4315-B67E-5436CF232CED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345C3AC6-EBAC-4680-9223-4BC8D0BFA7E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6B05B3-854E-4B64-B9AC-6A6660DFBB4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0124.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oscommerce.com/community/contributions%2C1032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0124.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oscommerce.com/community/contributions%2C1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17618",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81C4C1ED-AC7D-4970-8B34-62D304A83FE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17565",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.02",
            "matchCriteriaId" : "6F62A885-A67A-4304-AE5C-01C497525896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.9",
            "matchCriteriaId" : "700F5652-EF5E-4051-ADF5-665D28DA7D1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.9",
            "matchCriteriaId" : "85CB177B-3D00-4671-8F17-3306E377FE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.1.4",
            "matchCriteriaId" : "1121B995-551C-41F9-815A-B7B4DEB5615E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:4.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C58081BD-443D-41A7-B21D-A0B6BD3BD3DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sophos.com/support/knowledgebase/article/3803.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0347",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24345",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.sophos.com/support/knowledgebase/article/3803.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that is entered after reaching the DCC Get Folder Dialog.  NOTE: this issue has been disputed by the vendor, saying \"as far as I can tell, this is neither an exploit nor a vulnerability. The above report describes a local bug in mIRC.\"  It could be that this is only exploitable by the user of the application, and thus would not cross privilege boundaries unless under an otherwise restrictive environment such as a kiosk"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:khaled_mardam-bey:mirc:5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A6B7CAF-1931-42BA-AB9B-99B23054CE4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:khaled_mardam-bey:mirc:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D821E7E3-A7CC-4C5D-8894-CECD478D742E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:khaled_mardam-bey:mirc:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEDA8F-BB1D-4678-A35B-E7F46CD03380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:khaled_mardam-bey:mirc:6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EC0D6-667F-4232-A6C4-EDE53968B935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2005/Dec/0263.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trout.snt.utwente.nl/ubbthreads/showflat.php?Cat=0&Number=146129&an=0&page=0#146129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.packetstormsecurity.org/0512-exploits/mIRCexploitXPSP2eng.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shellsec.net/leer_advisory.php?id=9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2005/Dec/0263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trout.snt.utwente.nl/ubbthreads/showflat.php?Cat=0&Number=146129&an=0&page=0#146129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.packetstormsecurity.org/0512-exploits/mIRCexploitXPSP2eng.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shellsec.net/leer_advisory.php?id=9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in error.asp in AudienceView allows remote attackers to inject arbitrary web script or HTML via the TSerrorMessage parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audienceview:audienceview:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814DB3C5-BA14-40B0-A94E-504DE8407C78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17582",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20880",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by (1) migrate_all_online.sh, (2) migrate_all_offline.sh, (3) migrate_all_netinfo_online.sh, (4) migrate_all_netinfo_offline.sh, (5) migrate_all_nis_online.sh, (6) migrate_all_nis_offline.sh, (7) migrate_all_nisplus_online.sh, and (8) migrate_all_nisplus_offline.sh."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:padl_software:migrationtools:46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA6B84BB-2730-41CA-A864-77B979080A19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17530",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for an expanded hostname, as demonstrated by an attacker who operates an ap1.com Internet web site to steal cookies associated with an ap1.com.example.com intranet web site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:0.1:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "32FEF1A8-032B-4AFF-883C-1C253F9B240A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417F34FB-A6B0-4090-BDC9-6D4C1BF0D3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61416A22-7309-4890-80B8-6E7C09C7BE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F918814C-F129-4534-921A-38AF678A7016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D435E39F-4F70-481B-9225-B072B79BEB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD68BAB-8945-4A22-938E-12C01D0111D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3220BF-B0AF-4C90-89BD-B425EE58021D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "619EB7F6-8694-4344-A4C9-A35DA58391AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FED2DFC-592C-4FD3-B0B7-C670C78F56DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC65385-B190-44BE-9AF8-B14F48303046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7BAE27-7AB1-4DBD-98AD-6109F0D9A458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8A54F6-96A9-44B8-97C8-50DA7276708D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1001754B-8EDB-41A2-9D5D-6E2A2B556DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D57D87-3E6A-4A73-85BA-EE679E9DA8D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BE888B-FE26-4378-B853-29995A55920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E4FC9B-F47C-4BD5-B2C7-23CBAD2D5488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0172B167-5780-4F80-ACC9-2FB8B60D6717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24B7C8D-FD99-429B-86C2-D508A0D6FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C0DB31D-D075-409C-9ED9-A9E1D96332CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9FBD50-02B9-459D-8600-57897E195A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED38ED0A-3213-4F0C-A76D-DC88B8E5CFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0102A8-7149-425C-9956-FB3640BFFA85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0123.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0123.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for an expanded hostname, as demonstrated by an attacker who operates an ap1.com Internet web site to steal cookies associated with an ap1.com.example.com intranet web site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA58BA23-4CFE-40F8-A2F4-104007E12E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F00276-9071-4B96-B49C-2E0898476874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB84CC9B-346B-4AF4-929E-D56D85960103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1444C77E-FF98-40E5-9CA9-B4C71B3C9304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B40771F-30CB-45D0-9EDE-1F13852085B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47315EC4-1EED-4070-A087-8E37C8FE6703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1EB38F-CEB2-40BC-AA5D-CC539F597137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE6B0681-B96F-405C-8042-1BF2DDB41648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDAEAE6-BA9F-4D40-B264-4A72930239E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9296197-0EE0-4CC0-A11F-E44E3443E990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A76ACC55-754D-4501-8312-5A4E10D053B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8987151-0901-4547-B750-5DC470BB9CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E60BCC-6D1C-489E-9F3B-9BE42B46704F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A87ED8-9E1F-4C2C-B806-A41765081C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C795D86F-9B08-41FE-B82B-5BBB3DE6357D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "2637D552-4A3D-4867-B52A-ACCED8681AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC237C8-CFE0-4128-B549-93CD16894E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "367A5D46-0FF3-4140-9478-251363822E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DE4889-424F-4A44-8C14-9F18821CE961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "1003D688-3EEA-45F9-BB2C-5BAB395D7678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098458D4-635B-4A4D-9472-39370094E1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78647043-8EBD-48AA-98F4-8E6D332C35E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B628660A-00D7-4B56-8C86-4E33FB98B202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "655FA37C-DA33-4195-AEAF-5A5D40C5C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD5B652-8474-4C00-9CDD-62B499045932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BD8D89-4936-402C-973D-5F4B071806D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.8:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "366CC212-B8B1-4702-8C10-205184F49DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.8:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "10349BA5-70D3-4D11-94F6-A77D8570CB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.8:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "A68DFC43-518D-4629-8954-C5764D4BD070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.8:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "03C940C2-F7C5-4791-92C4-A7DF6B965381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:m15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85C3F06-8FFF-4A6F-BB86-B66A6031647E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:m16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE87E2A0-4F55-4265-8E3C-0E5D60538BDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0123.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0123.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregister_globals function, which allows attackers to obtain unspecified sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE58D68-FC34-4F70-849A-2E6CC919230D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713E747-5529-4A64-95B4-D9678D8E88B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFD4225-32F9-4D62-87C5-9632A1C03326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A75787B-6156-4710-9B24-48C5763E7771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17425",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17433",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E0C4D4-B9D8-44E5-9B1B-201F1CC1AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A4AEA2-568E-487A-98B8-3E32AFB4390C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1520580-1E27-4C7B-A471-988A7DBF9785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A73771-8575-4A44-9585-D0AF250C66FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041D72F2-7F9D-466D-93D0-43B6BF22F74A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996994FB-9315-49AA-9184-CE954AABA99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "861C3A86-19E5-485D-919E-54C653E770E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C70DC59-D71A-4D22-82E6-7E74EC114C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:4.0.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D090DAD8-B185-430C-8295-79D7288DD145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:4.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F83F394-DB46-4DD2-89CD-8A086CFBDA6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:4.0.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7FF835-6B29-4F00-9B9B-672B7CFCE39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:4.0.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E2944B6-1988-43C9-BEBE-7443DEC5C550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE58D68-FC34-4F70-849A-2E6CC919230D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713E747-5529-4A64-95B4-D9678D8E88B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFD4225-32F9-4D62-87C5-9632A1C03326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A75787B-6156-4710-9B24-48C5763E7771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17425",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17433",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15326",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A75787B-6156-4710-9B24-48C5763E7771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1542C3-E6CD-4CF6-9F1D-E8E58F2A11E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.sixapart.com/movabletype/docs/3.2/h_changelog/3_2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.sixapart.com/movabletype/docs/3.2/h_changelog/3_2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (such as HTML and image files) by selecting an arbitrary directory as a blog's top-level directory.  NOTE: this issue can be used in conjunction with CVE-2005-3102 to create or overwrite arbitrary files of all types."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1542C3-E6CD-4CF6-9F1D-E8E58F2A11E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files via a symlink attack on the temporary file for the file.0 target, which is used for a pre-formatted manual page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDC444D-E763-4685-97F8-A027DF6F804D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-009.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail-index.netbsd.org/netbsd-announce/2005/10/31/0000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2005/09/12/0043.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015132",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20731",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15263",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-009.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail-index.netbsd.org/netbsd-announce/2005/10/31/0000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2005/09/12/0043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack vectors and impact, related to cookies."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mroovca:mroovca_stats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.5",
            "matchCriteriaId" : "8C5FBB0F-C638-4712-B0ED-F533B827DE0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=113650&release_id=381543",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=113650&release_id=381543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, possibly involving the GE_received_key function in keys.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gaim-encryption:gaim-encryption:2.38_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C68F41F-435E-420C-A726-9988A5351825"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17739",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E92144A-C66C-4959-B06A-39283EE43915"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607C1B59-8C27-48D1-B4F2-8C7CCA293E32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B536B2-0C3E-4A9B-B6C7-F3DAA8F4119D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796E640B-D3EF-4BB9-8521-62BDA198E013"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F10FF6A-509A-4729-A104-35CE16D16E50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB3B80DB-6431-439B-B5FF-6DD8E3C04248"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADCABBD-1745-4D0F-8347-C2EA8EC41DC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C1892F-716B-46D2-B74D-ACE9BB87E709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD6D9E39-EE7C-4D2F-BC92-6A23F3C65629"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6C4F60-45AF-4888-BC79-229943953D9D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC90D92C-9028-430C-BCA5-E16EA69524F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEEF194-0EA2-4560-8CD9-02606183A663"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30D285D-F51C-4B1D-8AEE-00984C23C6D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23DB394-9885-4505-89DB-03C92302958C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB72220-4AA2-4C30-B934-BBC0F72869C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8972F3-4AEA-4572-9177-9E3D9A34BB18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6933824-00C3-4F0F-A705-83A8DFB7667D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58471E98-F111-4119-8C94-F978823ADFD1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD6A204-D86F-4021-AD9F-EB49CC597200"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58CEFD97-46E8-4E27-854C-21FE07816595"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0295B68E-4F07-44BD-B3FF-9E73870B1AE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17158",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19933",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.plainblack.com/getwebgui/advisories/security-exploit-patch-for-6.3-and-above",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15083",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.plainblack.com/getwebgui/advisories/security-exploit-patch-for-6.3-and-above",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Brightmail AntiSpam 6.0 build 1 and 2 allows remote attackers to cause a denial of service (bmserver component termination) via malformed MIME messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "849782E0-9F26-411F-82B9-88B5FC4F4C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD87DB3-45C2-4091-A83B-25E427563C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0910781-9EF9-4188-AA33-1C54F01A0832"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17170",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015051",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15087",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.10.12d.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2005.10.12d.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key in plaintext in memory of the explorer process, which allows attackers with access to process memory to steal the keys and access the network."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17064",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/46",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15008",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.soonerorlater.hu/index.khtml?article_id=62",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/26323/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.soonerorlater.hu/index.khtml?article_id=62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/26323/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key via certain calls to the WZCQueryInterface API function in wzcsapi.dll."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17064",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/46",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.soonerorlater.hu/index.khtml?article_id=62",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.soonerorlater.hu/index.khtml?article_id=62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 91) q_IP (IP) or (2) q_Host (HOST) parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tellme:tellme:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2D8809-B639-4C01-B213-63484C628F8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diff",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19870",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15012",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via \"--\" style options in the q_Host parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kimihia:tellme:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "553F4E23-5E3D-44FC-A22D-38EF14CE0AE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diff",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/17078",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19871",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22522",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/17078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attackers to obtain sensitive information via an invalid q_Host parameter, which reveals the full pathname of the application in an fsockopen error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tellme:tellme:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2D8809-B639-4C01-B213-63484C628F8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19872",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to obtain sensitive information such as process working directories via unknown attack vectors, possibly pwdx."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015053",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101949-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19976",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101949-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition, the demonstration code as used by third parties suggests that this might be a different type of vulnerability related to shell metacharacters.  Finally, this could be a rediscovery of CVE-2004-1430."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipbproarcade:ipbproarcade:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C9D0EF-1456-4607-B94B-497C94DB1AE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15205",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFE5AD8-DB14-4632-9D2A-F2013579CA7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/20/20033-tomcat-dos-path_disclosure.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20033",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/28484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/20/20033-tomcat-dos-path_disclosure.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/28484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used in certain unspecified circumstances, which causes user credentials to be sent across the network in cleartext and allows remote attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/140",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20094",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client application creates an SSL connection to the server after it has already created an insecure connection, will use the insecure connection, which allows remote attackers to sniff the connection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/141",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20095",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/20095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the \"privilege management\" feature of Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors that trigger a null dereference in the secpolicy_fs_common function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101895-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101895-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E6FE1D-B1E9-4A4F-8E89-52C554B711D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27DD0175-5F1C-4C53-9758-D34B2F5116D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B6AB071-4E21-4716-8087-42C02E03368C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14CCEA6-AD05-4F61-8B52-B35F664C241B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55C1F94-50C4-4A9C-B867-C43D5C67EA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8896849-9ADA-40A3-BAC3-731FB9B66DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550334A9-AE96-41C4-ABA4-751D3E013C88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17560",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eyce.be/php_gen/NEWS",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eyce.be/php_gen/NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:captivate:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F9591A-A127-4302-97CE-722E492A8602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:contribute:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDB544B-76EC-49C0-94B1-E0035207A68D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:contribute:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52C901F-914B-47A1-A160-CADF9DC899A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:director:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6AC4F1-DE3D-4873-90BE-2AE1E3E60F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dreamweaver:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C183915-BF83-4446-90DF-3A2CE49BCE0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:elicensing:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9602D186-D707-484E-B31D-8C15D85EDC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:fireworks:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D06FAD9-2CC0-4AAC-A2B5-6D118D00D7A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F901FB44-DC26-4284-B160-EE4A4F8F9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "C01FF7CE-BAD6-4539-A457-DABE0F21895A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:freehand:mx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BD6F32-57BE-4EB4-A2B8-043A8B28369C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:studio:mx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3832577A-42EB-4C8F-878C-BFAF8479BAB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/953860",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423587/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/953860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/mpsb05-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/17248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423587/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The popSubjectContext method in the SecurityAssociation class in JBoss Enterprise Java Beans (EJB) 3.0 RC3 maintains the threadPrincipal and threadCredential values from a previous client's authentication after termination of a client session, which allows remote attackers to gain the roles of an arbitrary previous client who had the same JBoss server thread."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:jboss:enterprise_java_beans:3.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C877015-0523-48FD-8FE9-280D680B0C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jira.jboss.com/jira/browse/EJBTHREE-384",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jira.jboss.com/jira/browse/EJBTHREE-384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 and earlier allows remote attackers to \"gain inappropriate access to another local user's computer,\" aka ID DL5549329."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:3ds_max:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F34A76-B1BD-45C7-9EFE-221F5E35985F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:architectural_desktop:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791C4C7D-4D59-47DF-830E-314AF749489C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:architectural_desktop:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03924CB2-0553-499F-A073-9C969BCEE92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A1AE6F6-B9C4-412A-B917-9C5EC1DD0E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED452EF-ED18-4F7B-AE45-BE031AED42B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_civil_3d:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19748367-BE4B-49F4-A505-A9C4E7CBC339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_civil_3d:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE81A33-FB05-4CE3-B871-2C108522872B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_electrical:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F064E5F4-079C-4345-A16E-F5F7996EC5A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_electrical:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D002ED36-1612-43C5-9014-BF6360DB9D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_lt:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF060231-C0C6-4B2F-B387-05E8AB1BF0CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_lt:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1312CE76-F9C6-4FED-ABC9-8C97FE69B071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mechanical:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3F280-B5FA-4BA6-ADFA-195C9D0D4155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mechanical:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A81BA6-CDEE-4BF4-B78B-C3FAA68D31EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:building_systems:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B00278F-BB19-465F-A150-F14CBD665F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:building_systems:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD11268-AE49-4202-836E-322A35AF7B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:civil_design:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A78C5B-EA4F-41B6-99AE-50F1D0A95619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:inventor:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F754AD7-CEB4-404B-9FEC-2E719DFC3042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:inventor:10:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "BC2BA958-9373-434E-BBBD-9954065AA790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:land_desktop:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C40078F9-9DD0-40C0-A4DF-359AC401616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:land_desktop:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4C9960-DFA8-4599-A362-684AC3BE08D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:map_3d:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7B41DE-6DD2-4A58-9575-E12774D772E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:map_3d:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C245344A-E89B-42A6-9105-3784DC043F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:raster_design:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7781D592-DB95-439C-B559-945CF300A645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:raster_design:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA56C0D-0317-4402-9275-06E27016E232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:revit:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF9AF1F-22F9-4920-BC9A-B6EAF43F54C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:revit:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFE74F6-6BE6-4EE9-A713-495F4A193EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:revit_structure:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A5DA3B-7BB8-4D5B-8FA2-09ACE64142D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:revit_structure:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA395F4-BC6A-4AF1-A3A2-D6CC8C3B732F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:survey:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A028F3F2-2FD8-4456-B5F7-A58C35C9EDEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:survey:2006:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBBD36A-2188-447A-ADB8-3E7F0C1575CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:utility_design:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE1D0C9-AD53-41FF-835A-0353859F1FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:viz:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E24F53D-56AC-425A-B2B7-019206E211B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18682",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=5549329&linkID=4183232",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=5549329&linkID=4183232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Referer header.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:801:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A05DCF-C183-434B-BF4C-8F2228060EF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16878",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter.  NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_handicapper:php_handicapper:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974BBD4D-4995-471D-A1D8-63BE4450D739"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.zone-h.org/advisories/read/id=8360",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=8360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors, probably involving the pam_mysql_sql_log function when being used in vsftpd, which does not include the IP address argument to an sprintf call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam_mysql:pam_mysql:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F34F78-005A-4385-B950-7E64CB764E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam_mysql:pam_mysql:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8197EC1-9941-4A9E-AAC9-EDC562AE0A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam_mysql:pam_mysql:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5E13E9-39A1-4667-BE2C-3BD30CBA35A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam_mysql:pam_mysql:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E26729E-81B9-4F32-A853-149F7B771C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam_mysql:pam_mysql:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287BCB46-79D4-4F42-8CB0-2D28B47EAC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam_mysql:pam_mysql:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E4EF82-4B13-4885-9848-1B0477388F8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam_mysql:pam_mysql:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C457A5-3E07-4919-BBBF-6A726A09FD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam_mysql:pam_mysql:0.7_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF4FE5-7751-4E4F-84A9-9C161E6ED130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam_mysql:pam_mysql:0.7_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83809024-AEA7-4DBC-800F-45ABF23E63DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18598",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=499394",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1256243&group_id=5741&atid=305741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-18.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16564",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=499394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1256243&group_id=5741&atid=305741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the vmps_log function in OpenVMPS (VLAN Management Policy Server) 1.3 allows remote attackers to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvmps:openvmps:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84332059-5887-48EE-860D-3661DA40BF99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/unixfocus/6I00F00EAI.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15072",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/unixfocus/6I00F00EAI.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) sid, and (3) pid parameters in a POST request, which bypasses security checks that are performed for GET requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9A4F5F-31CB-4097-85E9-B08B2530E9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-09/0119.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-09/0167.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-09/0176.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-09/0226.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpnuke.org/modules.php?name=News&file=article&sid=7434",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16801",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukefixes.com/ftopict-1779-.html#7641",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-09/0119.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-09/0167.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-09/0176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-09/0226.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://phpnuke.org/modules.php?name=News&file=article&sid=7434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukefixes.com/ftopict-1779-.html#7641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenTP1 system outage) via invalid data to a port used by a system-server process, and (2) cause a denial of service (process failure) via invalid data to a port used by any of certain other processes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:hitachi:tpi_net_library:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4FE7AC-B3F6-4764-86F2-14347751404E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:hitachi:tpi_server_base:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B6C8FF-E26B-4956-A27B-1E70C3235210"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17185",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015058",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-020_e/index-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-020_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*",
            "matchCriteriaId" : "14F55877-A759-4C8A-84D5-70508E449799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0673.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0127.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15268",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0673.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0127.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a \"content: url(0);\" style attribute, a \"bodyA\" tag, a long string, and a \"u\" tag with a long attribute, as demonstrated by opera.html; and (2) a BGSOUND element with a \"margin:-99;\" STYLE attribute."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.02",
            "matchCriteriaId" : "F23E47CD-F20D-4070-9AA0-9B08DF02E3EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015067",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5054",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5055",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Sysbotz Systems Panel 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the cid parameter in knowledgebase/index.php, (2) the aid parameter in knowledgebase/view.php, (3) the cid parameter in contact/update.php, (4) the letter parameter in links/index.php, (5) the mid parameter in messageboard/view.php, and (6) the tid parameter in tickets/view.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sysbotz:systems_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "FC052448-35A0-4D4A-8C0A-76A32AF463DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/systems-panel-v10x-multiple-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21320",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21321",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21322",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21323",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21324",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21325",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/systems-panel-v10x-multiple-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/21325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a large value of the WIDTH attribute, which triggers a problem related to representation of floating-point numbers, leading to an infinite loop of widget resizes and a corresponding large number of function calls on the stack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17071",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security-protocols.com/modules.php?name=News&file=article&sid=2978",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015011",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-protocols.com/advisory/sp-x19-advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15015",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=303433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security-protocols.com/modules.php?name=News&file=article&sid=2978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-protocols.com/advisory/sp-x19-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=303433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.cfm in tmsPUBLISHER 3.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_media_shoppe_berhad:tmspublisher:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3AA822-CDD9-4844-A208-E58948A2273E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.tmsasia.com/page.cfm?name=security",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://metawire.org/~adli/advisories/250405_tmspublisher_vulnerablility.signed.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23014",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.tmsasia.com/page.cfm?name=security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://metawire.org/~adli/advisories/250405_tmspublisher_vulnerablility.signed.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "_Request_Message.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information via an invalid id argument to pagename.cfm, which reveals the installation path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_media_shoppe_berhad:tmspublisher:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7173609-5686-4C28-A15C-AF5532E9C92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_media_shoppe_berhad:tmspublisher:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3AA822-CDD9-4844-A208-E58948A2273E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.tmsasia.com/page.cfm?name=security",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://metawire.org/~adli/advisories/250405_tmspublisher_vulnerablility.signed.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23298",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.tmsasia.com/page.cfm?name=security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://metawire.org/~adli/advisories/250405_tmspublisher_vulnerablility.signed.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service (device reboot) via a series of crafted fragmented UDP packets, possibly involving a missing fragment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:di-524:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484B4D20-064A-4E23-92F7-3A86DFF0F2FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:di-784:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154B777-7263-4AF6-AD24-589D7DD5B1CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dlink:di-524:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AA4CB4-DE99-412C-B02E-57A5EC0802E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dlink:di-624:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADE3827-C247-47A7-B7CF-DE7EC8F0CD3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0188.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18833",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.thunkers.net/~deft/advisories/dlink_udp_dos.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0188.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.thunkers.net/~deft/advisories/dlink_udp_dos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field in an HTTP header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phptagcool:phptagcool:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09062B91-0E0C-49BF-BA14-CB914F8F45D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014878.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/19437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2005/Sep/1014878.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/19437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A8A7C5-5035-44CF-B688-438AF024CD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A6B63-4AE5-4A4C-A801-E664F155ABB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E112CB5B-FBE1-4EF6-927E-96AEEB11C55F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEF50C1-FB1B-451B-9363-4C1589F075A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C4EF8C-515F-4967-BB39-5DD49E6CD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B324FA71-EEAA-4E52-BF2C-20F3A2240A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00D6C8B-2533-4BC4-93AD-87FFCBDF521A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794C8A9D-36BC-4C33-8873-9476804F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E811EA8-D4B4-4631-9EA8-E4EB9E845DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41502EF5-BB54-428C-B88B-796C8310B0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C9BD76-B8F4-4774-926D-4FA1CEF9DA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BDF54AF-C09D-4DF7-9D86-6C611A3153A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C869DAF3-7662-4EEF-98DA-11A622DEF8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2E36B5-3932-4E71-9FB5-D4BBC3F97820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A9A0E7-7383-4B2C-AAD8-2FED5B86A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6B8B4-88A2-45A3-BD2E-6C0D103CB25E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.3.11sr3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.geeklog.net/forum/viewtopic.php?showtopic=61457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.3.11sr3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.geeklog.net/forum/viewtopic.php?showtopic=61457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain sensitive information (privacy leak and search result data) by controlling a drop chain neighbor that is near the end of a message chain."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mute:mute:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08C49AE-5C17-4028-96C7-8F89BCD5AB3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_id=11184523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_id=11200225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_id=11184523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_id=11200225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:martin_bauer:gbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B5E61B-7364-4A2E-959C-05FF1695D701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:martin_bauer:gbook:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7C2BF9-F4AD-4BC5-A4EF-EC1ECF0A220D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gbook.sourceforge.net/sec/14725",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16668",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=353531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19144",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425492/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14725",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gbook.sourceforge.net/sec/14725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/16668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=353531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425492/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability (RPATH) in amaya 9.2.1 on Debian GNU/Linux allows local users to gain privileges via a malicious Mesa library in the /home/anand directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:amaya:9.2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05615BE-0436-443F-AE60-D44A88C745FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=341424",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16945",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=341424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in show.php in VBZooM Forum allows remote attackers to execute arbitrary SQL commands via the SubjectID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEC56F3-CA23-4875-99E7-8317617DA419"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16220",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014585",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18296",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/18296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors, related to \"problematic seeding\" of the random number generator, possibly predictable seeds."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:text_password:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE971493-01BF-4DBE-B7BC-2C729E7CFD76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pear.php.net/package/Text_Password/download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pear.php.net/package/Text_Password/download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Next action in PEAR HTML_QuickForm_Controller 1.0.4 includes the SID in the URL even when session.use_only_cookies is configured, which allows remote attackers to obtain the SID via an HTTP Referer field and possibly other vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_php_group:pear_html_quickform_controller:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D21776C-E91D-4ADA-942A-E939E7DCB3DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pear.php.net/bugs/bug.php?id=3443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pear.php.net/package/HTML_QuickForm_Controller/download",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pear.php.net/bugs/bug.php?id=3443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pear.php.net/package/HTML_QuickForm_Controller/download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 1.0.5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) description parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tux_racer:tuxbank:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A24FB4-F012-4135-B936-D6CB9A0F8004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tux_racer:tuxbank:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170CE09A-28B2-4C98-BAA3-E820A4A3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tux_racer:tuxbank:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F350BA9D-6296-474B-AB6C-A549B0EB8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tux_racer:tuxbank:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E353B2B5-CA94-43CB-AEED-A55598CDF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tux_racer:tuxbank:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93EBE93-6B38-4C6B-9BC4-D16208D2673F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tux_racer:tuxbank:0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A24678D6-A482-439A-BF5C-1AC0E9C2511A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tux_racer:tuxbank:0.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F7E140-55EC-4D1C-BA69-DDD768EFEDF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/20/20696-tux.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tuxbank.sourceforge.net/CHANGES.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20696",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/ref/20/20696-tux.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tuxbank.sourceforge.net/CHANGES.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial of service (infinite loop and system hang) by calling the F_CLOSEM fcntl with a parameter value of 0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-003.txt.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2005/01/12/0059.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20755",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-003.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2005/01/12/0059.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:authentication_agent_for_web:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BA31AA-7ACF-46E2-B12B-9DF2ECA38FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:authentication_agent_for_web:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC747172-834D-4D3C-B238-9683E443813F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17281",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.metasploit.com/projects/Framework/exploits.html#rsa_iiswebagent_redirect",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20151",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/26424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://knowledge.rsasecurity.com/dlcpages/rsa_securid/securid_dlc_aaweb.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.metasploit.com/projects/Framework/exploits.html#rsa_iiswebagent_redirect",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/20151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/26424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://knowledge.rsasecurity.com/dlcpages/rsa_securid/securid_dlc_aaweb.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, aka IY70808; and (2) a query with more than 32000 elements in the IN-list, aka LI70817."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFE3DF2-216B-4E71-99BA-7955E44D853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CFC92D-19AC-4515-A4F0-3744C335D975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BDA3DD-24B4-4D91-969E-2E779A7EB1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E8AF18-6E6D-4923-9303-A082D4D47B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D309A217-6A82-4B5C-9C5B-ABD6E27457EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79242DD-F95B-4038-B6D9-4ABBE3F51836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302D906F-312A-4042-976D-6998178102E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280064D8-0605-488F-AC2D-C2D238F3A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA1AE7F-2417-43FD-9CFC-B17D6D4C6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8F7EC6-B67C-470F-8EC3-BC3C72A7989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY70808",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LI70817",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY70808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LI70817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 Universal Database (UDB) 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service (disk consumption) via a hash join (hsjn) that triggers an infinite loop in sqlri_hsjnFlushBlocks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFE3DF2-216B-4E71-99BA-7955E44D853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CFC92D-19AC-4515-A4F0-3744C335D975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BDA3DD-24B4-4D91-969E-2E779A7EB1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E8AF18-6E6D-4923-9303-A082D4D47B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D309A217-6A82-4B5C-9C5B-ABD6E27457EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79242DD-F95B-4038-B6D9-4ABBE3F51836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302D906F-312A-4042-976D-6998178102E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280064D8-0605-488F-AC2D-C2D238F3A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA1AE7F-2417-43FD-9CFC-B17D6D4C6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8F7EC6-B67C-470F-8EC3-BC3C72A7989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY70561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY70561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service (CPU consumption) by \"abnormally\" terminating a connection, which prevents db2agents from being properly cleared."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFE3DF2-216B-4E71-99BA-7955E44D853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CFC92D-19AC-4515-A4F0-3744C335D975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BDA3DD-24B4-4D91-969E-2E779A7EB1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E8AF18-6E6D-4923-9303-A082D4D47B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D309A217-6A82-4B5C-9C5B-ABD6E27457EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79242DD-F95B-4038-B6D9-4ABBE3F51836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302D906F-312A-4042-976D-6998178102E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280064D8-0605-488F-AC2D-C2D238F3A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA1AE7F-2417-43FD-9CFC-B17D6D4C6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8F7EC6-B67C-470F-8EC3-BC3C72A7989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY71587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY71587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "The vulnerabilities have been fixed in Version 8 FixPak 10 (Version 8.2 FixPak 3)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFE3DF2-216B-4E71-99BA-7955E44D853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CFC92D-19AC-4515-A4F0-3744C335D975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BDA3DD-24B4-4D91-969E-2E779A7EB1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E8AF18-6E6D-4923-9303-A082D4D47B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D309A217-6A82-4B5C-9C5B-ABD6E27457EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79242DD-F95B-4038-B6D9-4ABBE3F51836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302D906F-312A-4042-976D-6998178102E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280064D8-0605-488F-AC2D-C2D238F3A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA1AE7F-2417-43FD-9CFC-B17D6D4C6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8F7EC6-B67C-470F-8EC3-BC3C72A7989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY71865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY71865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 Universal Database (UDB) 820 before version 8 FixPak 10 (s050811) allows remote authenticated users to cause a denial of service (application crash) by using a table function for an instance of snapshot_tbreorg, which triggers a trap in sqlnr_EStoE_action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFE3DF2-216B-4E71-99BA-7955E44D853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CFC92D-19AC-4515-A4F0-3744C335D975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BDA3DD-24B4-4D91-969E-2E779A7EB1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E8AF18-6E6D-4923-9303-A082D4D47B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D309A217-6A82-4B5C-9C5B-ABD6E27457EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79242DD-F95B-4038-B6D9-4ABBE3F51836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302D906F-312A-4042-976D-6998178102E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280064D8-0605-488F-AC2D-C2D238F3A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA1AE7F-2417-43FD-9CFC-B17D6D4C6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8F7EC6-B67C-470F-8EC3-BC3C72A7989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY72588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY72588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service (db2jd service crash) by \"connecting from a downlevel client.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFE3DF2-216B-4E71-99BA-7955E44D853C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CFC92D-19AC-4515-A4F0-3744C335D975"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BDA3DD-24B4-4D91-969E-2E779A7EB1A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E8AF18-6E6D-4923-9303-A082D4D47B2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D309A217-6A82-4B5C-9C5B-ABD6E27457EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79242DD-F95B-4038-B6D9-4ABBE3F51836"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302D906F-312A-4042-976D-6998178102E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280064D8-0605-488F-AC2D-C2D238F3A69E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA1AE7F-2417-43FD-9CFC-B17D6D4C6212"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8F7EC6-B67C-470F-8EC3-BC3C72A7989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR21329",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR21329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that performs an exec without a reset of real credentials."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-013.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0157.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2005/10/31/0001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://prdelka.blackart.org.uk/exploitz/prdelka-vs-BSD-ptrace.tar.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20759",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-013.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0157.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2005/10/31/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://prdelka.blackart.org.uk/exploitz/prdelka-vs-BSD-ptrace.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Echelog 0.6.2 allows attackers to \"exploit function stacks on some architectures,\" with unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pavel_kankovsky:echelog:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA392AAB-CB7A-4258-857F-3C48C440D358"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=365508",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=365508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in NeLogic Nephp Publisher 4.5.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) nnet_catid parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nelogic_technologies:nephp_publisher:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.2",
            "matchCriteriaId" : "F67C31FB-6F0A-4D76-979B-7DC0797346CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/11/nephp-publisher-v45x-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17772",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/11/nephp-publisher-v45x-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4744",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail.  NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS.  Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues.  Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F03F8FE-80BA-41A3-85CE-FFB6A18E6DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C48FE12-68CB-462D-B75E-204894325F5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0271.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/16712",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19497",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19518",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20461",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1089",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.freeradius.org/security/20050909-response-to-suse.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.freeradius.org/security/20050909-vendor-sec.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/14775",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=167676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22211",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10449",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.freeradius.org/security/20050909-response-to-suse.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.freeradius.org/security/20050909-vendor-sec.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=167676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "The vendor has released version 1.0.5 of FreeRADIUS to address these issues."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4745",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the rlm_sqlcounter module in FreeRADIUS 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F03F8FE-80BA-41A3-85CE-FFB6A18E6DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C48FE12-68CB-462D-B75E-204894325F5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2006/dsa-1145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.freeradius.org/security.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19323",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17294",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.freeradius.org/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor released version 1.1.1 to address this issue.",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue did not affect the FreeRADIUS packages as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4746",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote attackers to cause denial of service (crash) via (1) the rlm_sqlcounter module or (2) unknown vectors \"while expanding %t\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F03F8FE-80BA-41A3-85CE-FFB6A18E6DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C48FE12-68CB-462D-B75E-204894325F5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2006/dsa-1145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.freeradius.org/security.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19324",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/19325",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17293",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.freeradius.org/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue did not affect the FreeRADIUS packages as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebHost Automation Ltd Helm before 3.2.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors involving the default page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78964E3E-B741-4F4F-B4D3-6317D6534847"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB254948-1C76-452E-8050-73914816104A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C899DE-B98E-40DD-9819-5CB4DA6D4140"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724C2445-EF30-4761-A463-425D9A36B414"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69408D85-F388-4C90-A9DF-165C53775926"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2144CBD1-F130-4ED3-9449-A5EAA901E07B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000653.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000654.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.webhostautomation.com/webhost-301",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000653.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000654.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.webhostautomation.com/webhost-301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors.  NOTE: this issue has been referred to as XSS, but it is clear from the vendor description that it is a file inclusion problem."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E9FFC7-E606-489B-A135-98F6B6BEF5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC93C7E2-C78B-4F62-95C7-6029A32EF22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331164B3-F2B7-4D74-8F72-6D183A4CE5FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/17315",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vwar.de/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vwar.de/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allows remote attackers to inject arbitrary HTTP headers via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "FED6AE20-974B-44A7-98C4-F69E6E33D9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/159",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/177",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17163",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier allow remote attackers to cause a denial of service (server thread hang) via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "FED6AE20-974B-44A7-98C4-F69E6E33D9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:win32:*:*:*:*:*",
            "matchCriteriaId" : "38DB9544-534D-4B95-B81A-7F80B6E6F4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp8:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2BD55C-15DE-4D7B-9B5A-21016B7E2A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp8:express:*:*:*:*:*",
            "matchCriteriaId" : "C54D9244-D6EA-4AA6-94B4-15D232F1D6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp8:win32:*:*:*:*:*",
            "matchCriteriaId" : "8932DF57-EE6D-4291-9EA8-F6FC0C991F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "3BA3BF4B-7616-49BA-916B-17068B6C85E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D61A68-E83A-4374-832A-C9A2FEA0AD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "596178D8-B7BB-4793-81C1-119ED353CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp7:win32:*:*:*:*:*",
            "matchCriteriaId" : "5AB11D55-95CD-4CB1-B907-CBCFA2A1696A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "24E0BA12-971C-4DC4-8ED2-9B7DCD6390E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "41FA5A13-C6AF-463F-B002-376E7C1EF850"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor has released multiple advisories, as well as fixes to address these issues."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and WebLogic Express 9.0, 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allow remote attackers to inject arbitrary web script or HTML and gain administrative privileges via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "FED6AE20-974B-44A7-98C4-F69E6E33D9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA97F1A-49F7-4511-8959-D62155491DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "0EDB38AA-CAC4-4C89-8484-7C2A75F8038F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/139",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might allow local users to gain privileges by using the run-as deployment descriptor element to change the privileges of a web application or EJB from the Deployer security role to the Admin security role."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, in certain \"heavy usage\" scenarios, report incorrect severity levels for an audit event, which might allow attackers to perform unauthorized actions and avoid detection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/143",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier allow remote attackers to obtain sensitive information (intranet IP addresses) via unknown attack vectors involving \"network address translation.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/144",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier (1) stores the private key passphrase (CustomTrustKeyStorePassPhrase) in cleartext in nodemanager.config; or, during domain creation with the Configuration Wizard, renders an SSL private key passphrase in cleartext (2) on a terminal or (3) in a log file, which might allow local users to obtain cryptographic keys."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/150",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not properly validate derived Principals with multiple PrincipalValidators, which might allow attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/146",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, do not properly \"constrain\" a \"/\" (slash) servlet root URL pattern, which might allow remote attackers to bypass intended servlet protections."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/147",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Administration server in BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier allows remote authenticated Admin users to read arbitrary files via unknown attack vectors related to an \"internal servlet\" accessed through HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/148",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/149",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, when fullyDelegatedAuthorization is enabled for a servlet, does not cause servlet deployment to fail when failures occur in authorization or role providers, which might prevent the servlet from being \"fully protected.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/151",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (passwords or keyphrases) in the server log file when the -D option is used."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "FED6AE20-974B-44A7-98C4-F69E6E33D9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:win32:*:*:*:*:*",
            "matchCriteriaId" : "38DB9544-534D-4B95-B81A-7F80B6E6F4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/152",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "An attacker must have read access to the server log to see the sensitive values."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local users to gain administrative privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:win32:*:*:*:*:*",
            "matchCriteriaId" : "38DB9544-534D-4B95-B81A-7F80B6E6F4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "3BA3BF4B-7616-49BA-916B-17068B6C85E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/153",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an exception message that is sent to a client or stored in a log file, which might allow remote attackers to perform unauthorized actions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:win32:*:*:*:*:*",
            "matchCriteriaId" : "38DB9544-534D-4B95-B81A-7F80B6E6F4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp8:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2BD55C-15DE-4D7B-9B5A-21016B7E2A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp8:win32:*:*:*:*:*",
            "matchCriteriaId" : "8932DF57-EE6D-4291-9EA8-F6FC0C991F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "3BA3BF4B-7616-49BA-916B-17068B6C85E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D61A68-E83A-4374-832A-C9A2FEA0AD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp7:win32:*:*:*:*:*",
            "matchCriteriaId" : "5AB11D55-95CD-4CB1-B907-CBCFA2A1696A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "41FA5A13-C6AF-463F-B002-376E7C1EF850"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin logins)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:win32:*:*:*:*:*",
            "matchCriteriaId" : "38DB9544-534D-4B95-B81A-7F80B6E6F4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp8:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2BD55C-15DE-4D7B-9B5A-21016B7E2A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp8:express:*:*:*:*:*",
            "matchCriteriaId" : "C54D9244-D6EA-4AA6-94B4-15D232F1D6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp8:win32:*:*:*:*:*",
            "matchCriteriaId" : "8932DF57-EE6D-4291-9EA8-F6FC0C991F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "3BA3BF4B-7616-49BA-916B-17068B6C85E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D61A68-E83A-4374-832A-C9A2FEA0AD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "596178D8-B7BB-4793-81C1-119ED353CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp7:win32:*:*:*:*:*",
            "matchCriteriaId" : "5AB11D55-95CD-4CB1-B907-CBCFA2A1696A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "24E0BA12-971C-4DC4-8ED2-9B7DCD6390E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "41FA5A13-C6AF-463F-B002-376E7C1EF850"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/155",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an Administration port is enabled on the Administration server, which might allow remote attackers to sniff the connection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "3BA3BF4B-7616-49BA-916B-17068B6C85E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/156",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "Condition: when using the weblogic.Deployer command with the t3 protocol."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to read sensitive cluster synchronization messages by sniffing the multicast traffic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:N/A:N",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/157",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP5 and earlier, and 7.0 SP6 and earlier, when using username/password authentication, does not lock out a username after the maximum number of invalid login attempts, which makes it easier for remote attackers to guess the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "A5C59B80-279B-45B3-9CC1-5A263681025B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "3BA3BF4B-7616-49BA-916B-17068B6C85E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "24E0BA12-971C-4DC4-8ED2-9B7DCD6390E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "41FA5A13-C6AF-463F-B002-376E7C1EF850"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/161",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/178",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17168",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tux_racer:tuxbank:0.7x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A88950-8A22-4765-9F86-2E520EBD3C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tux_racer:tuxbank:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A24FB4-F012-4135-B936-D6CB9A0F8004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24052-tuxbank.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24052-tuxbank.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitrary SQL commands via the addr_id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:belchior_foundry:vcard_pro:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C29064-BF93-47BD-8390-CE3AC81328E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15254",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product, possibly Accelerated E Solutions, allows remote attackers to execute arbitrary SQL commands via the password parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accelerated_enterprise_solutions:accelerated_e_solutions:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B725A3B5-FF59-47A5-BB10-A81CC0AC242B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/26548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15077",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld (PDA) device despite a policy setting that sync is unauthorized."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:trust_digital:trusted_mobility_suite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318140C5-BEDE-488D-BF1E-6F4754E4D415"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:trust_digital:trusted_mobility_suite:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DD62A9-723A-4A01-80A4-F30493504661"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/413417",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/413417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:suse_linux_openexchange_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042AF078-032E-4058-9BB1-362A0AADDD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:suse_linux_school_server:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8AAAE19-5591-4587-A207-1FCF19AE94E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:suse_linux_standard_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B5A54A-07E9-4F28-8D2E-76B41C8F7965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:suse_sled_beagle:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C827506E-89D8-438B-AB60-980D994E770B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*",
            "matchCriteriaId" : "C7EAAD04-D7C4-43DE-B488-1AAD014B503E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D2E2EF3C-1379-4CBE-8FF5-DACD47834651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.0:*:retail_solution:*:*:*:*:*",
            "matchCriteriaId" : "9E4D356D-E894-4957-AD61-DA1145CC51FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "D4940BE0-08CA-4B6C-ACA2-EE6EECE3E4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:8.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4DA74FD7-3A1F-4D16-8396-2F12A34D1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "F239BA8A-6B41-4B08-8C7C-25D235812C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "89BA858B-9466-4640-84AE-DC5BDC65D6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "56EF103F-5668-4754-A83B-D3662D0CE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3EA56868-ACA1-4C65-9FFB-A68129D2428A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "1BA2E629-58C6-4BA0-A447-F8F570B35E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3BEE15E9-9194-4E37-AB3B-66ECD5AC9E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C89BA3B6-370B-4911-A363-935A9C9EACF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "4F1B4D15-0562-44D6-B80B-35A8F432BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D84ABF78-0D85-4E15-907E-B5ACE86EB8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9C7018E7-F90C-435D-A07A-05A294EA2827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:*",
            "matchCriteriaId" : "16915004-1006-41D6-9E42-D1A5041E442D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "994ABCE2-3B9E-4E4E-83F7-CE2A79C70F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15026",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service (shutdown) via the (1) halt, (2) poweroff, and (3) reboot scripts executed at the service console."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.2",
            "matchCriteriaId" : "03A17551-F592-4709-8CAC-7885AF7AE609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:1.5.2:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0976E0-DB09-4969-8243-C6619A20D15D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:1.5.2:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "0B176414-27C2-41A3-B620-B6F34D45B45D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:1.5.2:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "BBDF5326-2B15-467C-84FE-34E9F94B1215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A348CABB-CD52-4C55-9653-154C75605CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA74505A-3550-4646-B2D6-6E6D0924023D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC77D81A-12AA-4948-9970-9461289DC648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A10ABE-E778-4133-B1AA-05FE6829A34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CB97F9-9DF6-4493-A245-F4901F4DD22E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/21584",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/support/kb/enduser/std_adp.php?p_sid=dsxk%2ABWh&p_lva=&p_faqid=1817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/support/kb/enduser/std_adp.php?p_sid=dsxk%2ABWh&p_lva=&p_faqid=1817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Xerver 4.17 allows remote attackers to inject arbitrary web script or HTML after a /%00/ sequence at the end of the URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xerver:xerver:4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE60F51-5E08-4403-BABC-C5A921AABE4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015079",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20077",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15135",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nXerver, Xerver, 4.20"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Michael Scholz and Sebastian Stein Contineo 2.0, when the admin account lacks an e-mail address attribute, displays the password hash in a warning upon page reload, which might allow remote attackers to view the hash."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michael_scholz:contineo:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CACA39E8-78CF-4CBD-B33F-6779FDF44883"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1350700&group_id=88385&atid=586478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20704",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1350700&group_id=88385&atid=586478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMichael Scholz, Contineo, 2.1 Beta 1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; and NetBSD-1.6 before 20050914; allows local users to cause a denial of service (heap corruption or system crash) and possibly gain root privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDC444D-E763-4685-97F8-A027DF6F804D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-008.txt.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2005/09/13/0024.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-008.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2005/09/13/0024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "this vulnerbaility is addressed in the following product versions:\r\nNetBSD, NetBSD, 2.0.3, and higher"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tashcom ASPEdit 2.9 stores the administration password (aka the FTP password) in cleartext in the registry, which might allow local users to view the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tashcom:aspedit:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A38D931-BBE8-48ED-B83C-EA38D737A07F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=94",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/37",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The powersave daemon in SUSE Linux 10.0 before 20051007 has an unspecified \"configuration problem,\" which allows local users to suspend the computer and possibly perform certain other unauthorized actions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:suse:suse_sled_beagle:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C827506E-89D8-438B-AB60-980D994E770B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:*",
            "matchCriteriaId" : "16915004-1006-41D6-9E42-D1A5041E442D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "994ABCE2-3B9E-4E4E-83F7-CE2A79C70F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2005-Oct/0002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15042",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2005-Oct/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "This vulnerablility is addressed in the following product release:\r\nSUSE, Linux, 10.0 2005-10-07"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "verifiedexecioctl in verified_exec.c in NetBSD 2.0.2 calls NDINIT with UIO_USERSPACE rather than UID_SYSSPACE, which removes the functionality of the verified exec kernel subsystem and might allow local users to execute Trojan horse programs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/verified_exec.c.diff?r1=1.4&r2=1.4.2.1&f=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail-index.netbsd.org/netbsd-announce/2005/10/31/0000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://releng.netbsd.org/cgi-bin/req-2-0.cgi?show=1988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20725",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/verified_exec.c.diff?r1=1.4&r2=1.4.2.1&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail-index.netbsd.org/netbsd-announce/2005/10/31/0000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://releng.netbsd.org/cgi-bin/req-2-0.cgi?show=1988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a query_string to the home page. NOTE: The vendor disputes this issue, saying \"Lighthouse does not in any way make use of the PHP technology.  [It] is an application server ... A technology like this cannot be susceptible to client-side cross-site-scripting-attacks on its own, but only applications created based on such a technology. This does not only apply to Lighthouse, but also to Perl, PHP or web applications based on Java Servlet technology.\"  Since the original researcher is known to test demo pages and is sometimes inaccurate, it is likely that this issue will be REJECTED"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:fidra_software:lighthouse_cms:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC2A671-D6B6-43E9-9AEC-4CA365782AB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005/12/lighthouse-cms-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lighthouse-cms.de/en/news/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/21852",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15952",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005/12/lighthouse-cms-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lighthouse-cms.de/en/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/21852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in SergiDs Top Music module 3.0 PR3 and earlier for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the (1) idartist, (2) idsong, and (3) idalbum parameters to modules.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sergids:top_music_module:3.0_pr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF3E91-707F-4766-9BC6-49BF7D9C9F78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2005_11_27_pridels_archive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21397",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15581",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.sergids.com/topmusic-changelog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2005_11_27_pridels_archive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.sergids.com/topmusic-changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetBSD 2.0 before 2.0.4, 2.1 before 2.1.1, and 3, when the kernel is compiled with \"options DIAGNOSTIC,\" allows local users to cause a denial of service (kernel assertion panic) via a negative linger time in the SO_LINGER socket option."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/kern/uipc_socket.c.diff?r1=1.111&r2=1.112",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mail-index.netbsd.org/netbsd-announce/2005/11/08/0010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2005/10/21/0038.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/kern/uipc_socket.c.diff?r1=1.111&r2=1.112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mail-index.netbsd.org/netbsd-announce/2005/11/08/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2005/10/21/0038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kernfs_xread in kernfs_vnops.c in NetBSD before 20050831 does not check for a negative offset when reading the message buffer, which allows local users to read arbitrary kernel memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/miscfs/kernfs/kernfs_vnops.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/miscfs/kernfs/kernfs_vnops.c.diff?r1=1.110&r2=1.111&f=h",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mail-index.netbsd.org/netbsd-announce/2005/10/31/0000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://releng.netbsd.org/cgi-bin/req-3.cgi?show=727",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015132",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20729",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0601-advisories/NetBSD-SA2006-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/miscfs/kernfs/kernfs_vnops.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/miscfs/kernfs/kernfs_vnops.c.diff?r1=1.110&r2=1.111&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mail-index.netbsd.org/netbsd-announce/2005/10/31/0000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://releng.netbsd.org/cgi-bin/req-3.cgi?show=727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/20729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0601-advisories/NetBSD-SA2006-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the POSIX readdir_r function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via (1) a symlink attack that exploits a race condition between opendir and pathcon calls and changes the filesystem to one with a larger maximum directory-entry name length, or (2) possibly via programmer-introduced errors on operating systems with a small struct dirent, such as Solaris or BeOS, as demonstrated in packages including (a) gcj, (b) KDE, (c) libwww, (d) the Rudiments library, (e) teTeX, (f) xmail, (g) bfbtester, (h) ncftp, (i) netwib, (j) OpenOffice.org, (k) Pike, (l) reprepro, (m) Tcl, and (n) xgsmlib."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:N/A:C",
            "baseScore" : 5.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:austin_group:posix:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98571754-47FA-4878-B43D-B584935AFBF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://womble.decadentplace.org.uk/readdir_r-advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415790/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415995/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415998/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415999/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416002/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416048/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://womble.decadentplace.org.uk/readdir_r-advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415790/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415995/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415998/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/415999/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416002/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/416048/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the Linux glibc.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) author (\"your name\") and (2) \"comment\" section."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jl_webworks:quickblogger:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06539CE7-9E8E-4195-8FF0-3F7FC30FD82C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0090.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-011-quickblogger.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15942",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-011-quickblogger.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the archive decompression library (vrAZMain.dll 5.8.22.137), as used in HAURI anti-virus products including (1) ViRobot Expert 4.0, (2) ViRobot Advanced Server, and (3) HAURI LiveCall, allows user-assisted attackers to execute arbitrary code via an ALZ archive containing a file with a long filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:hauri_livecall:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FC488B-3C4B-4843-85D2-C09E9B9AFC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:virobot:advanced_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E5B27B-640B-41C0-879E-3CF6D2BD1079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:virobot:expert_4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE9328E0-81C0-4CBD-A574-D6171EF70182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:virobot:linux_server_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A8E8C8-5B4F-41C1-8386-B518A9D9BCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:vrazmain.dll:5.8.22.137:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD3726E-D978-49EE-8A45-7C4C021F804C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0150.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16852",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-47/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015018",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015019",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19878",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15045",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0150.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-47/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to (1) index.php, (2) admin/index.php, and (3) admin/adminindex.php, which executes the PHP phpinfo function.  NOTE: The vendor has disputed this issue, saying that \"Having this in the code makes it easier for us to troubleshoot when issues arise on individual carts. For someone to have a script to do this type of search would require that they know where your shop is actually located. I dont think it really can be construde [sic] as a security issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turnkey_solutions:sunshop_shopping_cart:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B43DF31-5B83-44B9-9A05-90E48766AB84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17832",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.turnkeywebtools.com/forum/showpost.php?p=9874&postcount=6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.turnkeywebtools.com/forum/showthread.php?t=2384",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.turnkeywebtools.com/forum/showpost.php?p=9874&postcount=6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.turnkeywebtools.com/forum/showthread.php?t=2384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, allows local users to bypass access control rules for USB devices via \"alternate syntax for specifying USB devices.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15037",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, does not properly enforce class-specific exclude rules in some situations, which allows local users to bypass intended access restrictions for USB devices that set their class ID at the interface level."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15037",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam.  NOTE: in August 2007, the tomboy vector was reported for other distributions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB0F1B-80B4-47F9-A54C-51DB7E77CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=188806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=189249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=199841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/39577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/39578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26480",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27799",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28339",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28672",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200711-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200801-14.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/25341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=485224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=362941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/36054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/560-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00206.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00913.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=188806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=189249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=199841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/39577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/39578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200711-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200801-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/25341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=485224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=362941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/36054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/560-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00913.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or (2) banshee."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB0F1B-80B4-47F9-A54C-51DB7E77CA08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/39580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=555823&group_id=87005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/39580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=555823&group_id=87005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2005_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.1",
            "matchCriteriaId" : "D318F55B-F032-4CF0-906D-D92708D24D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B0B838-401F-447D-A270-6B3C7416A2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DF86C4-176B-4E4E-AF89-15F090E9C0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3EAD02-CF8D-4154-9A67-9774BA4029AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BC3223-5F53-42FA-B872-DCB30E46032E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9176513-170C-4B51-8495-9ED2FB7D929F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D431DA-8808-4DF2-BBD7-7BC6F5036DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72337C8-2B5C-4824-A3C0-D41A857DC9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454BEBD6-3EC7-4FFB-A51A-0199B5CCF097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A381433-9331-4424-B349-52D7F4BFEABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC225BD-FA8E-482B-9537-77797B7A88BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682290A8-AEB7-4652-A44C-A969AB937BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5162C7-5B84-4B5E-85B7-31F9B4BBAF37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/15088",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the web utility function in Hitachi Cm2/Network Node Manager and JP1/Cm2/Network Node Manager before 20050930 allow attackers to execute arbitrary commands, disable services, and \"exploit vulnerabilities.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cm2-network_node_manager:05_00:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "85C7FB22-C9C3-476A-B820-6F54B79ED15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cm2-network_node_manager:250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E90D362-6B82-4D41-BFB9-80533B8FA347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cm2-network_node_manager:unlimited:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC02CCA-9A01-4174-A8A5-68C19D3F020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1-cm2-network_node_manager_250:05_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D104967C-D81D-4C43-93B3-AC9A0CCC0191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1-cm2-network_node_manager_250:05_20_e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34138FC6-37C5-4BB9-828D-0535A061173B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1-cm2-network_node_manager_250:06_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B340E4D-21CC-4241-867D-A3407758EFA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1014997",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-018_e/index-e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1014997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-018_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cause a denial of service (crash or instability) via a compressed DNS packet with a label length byte with an incorrect offset."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E383F2A-DFCF-47F8-94EE-3563D41EA597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ata:186:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA52BDC-36B9-4C2F-BED4-D6809563C3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ata:188:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6F84BF-48ED-41F1-B237-FF58F4491925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:subscriber_edge_services_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86726D1-256E-4F9D-8D3A-DD1F1BD2E165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7902:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0143975A-5D7B-46F9-8529-D5E3485CF2FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7905:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460D3CD8-DCBB-41A5-98C4-EE66700DDCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7912:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31D194B-75A0-4F4F-8738-D4DC06047F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_express:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7583D706-3702-4571-BD2C-527E5337F6E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15472",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sn-20050524-dns.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/13729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sn-20050524-dns.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/13729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Cisco has released advisory cisco-sn-20050524-dns to address this issue. Please see the referenced advisory for further information on obtaining fixes."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the multi-language environment library (libmle) in Solaris 7 and 8, as shipped with the Japanese locale, allows local users to gain privileges via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08003947-A4F1-44AC-84C6-9F8D097EB759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16219",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014579",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101807-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101807-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files via unknown vectors related to the handling of the clipboard selection while an XView application exits."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "200D8CB2-0D52-40A8-9CD9-6E4513605201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F66BAF35-A8B9-4E95-B270-444206FDD35B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34EBF074-78C8-41AF-88F1-DA6726E56F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369207B4-96FA-4324-9445-98FAE8ECF5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B72953B-E873-4E44-A3CF-12D770A0D416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F847DB-65A9-47DA-BCFA-A179E5E2301A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08003947-A4F1-44AC-84C6-9F8D097EB759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-100881-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-27525-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-264.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18809",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13016",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-100881-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-27525-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-264.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary files via \"..\" sequences in an \"Unlink data file\" command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3F305CBD-4329-44DE-A85C-DE9FF371425E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08003947-A4F1-44AC-84C6-9F8D097EB759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/solaris_lpd_unlink.pm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16367",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014635",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101842-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-280.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14510",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/solaris_lpd_unlink.pm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101842-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-280.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/18650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service (crash) via a long symlink, which is not properly handled in (1) nfs2xdr.c or (2) nfs3xdr.c and causes a crash in the NFS client."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "01278984-9712-48D0-B8B8-F9ACEB0FBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "53B252BE-92F1-42E2-BF2F-EA6B6AFFEE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=87e03738fc15dc3ea4acde3a5dcb5f84b6b6152b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commitdiff%3Bh=87e03738fc15dc3ea4acde3a5dcb5f84b6b6152b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ussg.iu.edu/hypermail/linux/kernel/0509.1/1333.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=87e03738fc15dc3ea4acde3a5dcb5f84b6b6152b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commitdiff%3Bh=87e03738fc15dc3ea4acde3a5dcb5f84b6b6152b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ussg.iu.edu/hypermail/linux/kernel/0509.1/1333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Homepage field (aka the Website field) in an \"image-related comment\" and (2) the img_size field in view.php.  NOTE: due to lack of details from the researcher, it is not clear whether the comment vector overlaps CVE-2005-1886."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.95b",
            "matchCriteriaId" : "03037FEE-5B4E-45C0-86FE-124318816500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1395410C-F729-4095-BC00-C15D61509A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.93u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FA4A81-65AD-4888-9F06-15C8E21D4907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.94u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2286772D-80C5-496F-8052-596AF41E7E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035E0872-E690-4827-9B7D-9BB1E0C5B49C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17041",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/19959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0510-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15092",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/19959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0510-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a mod_info action to modify_gallery.php, which inserts the code into guid_info.php.  NOTE: this issue is easier to exploit due to a separate CSRF vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.95b",
            "matchCriteriaId" : "03037FEE-5B4E-45C0-86FE-124318816500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1395410C-F729-4095-BC00-C15D61509A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.93u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FA4A81-65AD-4888-9F06-15C8E21D4907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.94u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2286772D-80C5-496F-8052-596AF41E7E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035E0872-E690-4827-9B7D-9BB1E0C5B49C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17041",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0510-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0510-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as demonstrated by tricking the administrator to access a web page that performs a mod_info action in modify_gallery.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.95b",
            "matchCriteriaId" : "03037FEE-5B4E-45C0-86FE-124318816500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1395410C-F729-4095-BC00-C15D61509A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.93u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FA4A81-65AD-4888-9F06-15C8E21D4907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.94u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2286772D-80C5-496F-8052-596AF41E7E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035E0872-E690-4827-9B7D-9BB1E0C5B49C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17041",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/79",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0510-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0510-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flexbackup 1.2.1 and earlier allows local users to overwrite files and execute code via a symlink attack on temporary files.  NOTE: the raw source referenced an incorrect candidate number; this is the correct number to use."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexbackup:flexbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "D5A88F88-D55C-40FC-8242-EF35AA02CD83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334350",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112958392512513&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17209",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015068",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.net/adviso/flexbackup-09192005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112958392512513&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.net/adviso/flexbackup-09192005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files.  NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues.  This is the correct identifier."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "59F31FC5-56EB-4B29-8A48-526AEE8169B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04867C7C-03F4-486E-A904-76B92DD2D231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881EFB0C-B1F9-4BEC-A691-B7E92D55CAA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C33A3AE6-C333-4C18-9B1F-D8B9089FF148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F50133-DBAC-4EFE-856B-13D4236B220B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64C3EB33-7B25-455C-BD94-9B86C5D76448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1B8359-D739-4B32-BBDA-26CC8AFD4D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBFA9B1-3312-499E-A45E-A992802996F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75D86FD-E9AF-4932-B3D4-2C4BCC559FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552B1521-AC06-4C20-8A49-752483E20121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C963327-0114-4016-8BF7-44FBFA97CD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.5_0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B063B6C-AA10-41A3-B982-0B022DB0E596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.5_0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08EF00E-F5CD-49E8-A4E0-603CEE02F8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.5_0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A9748D-37DA-4D37-A743-96621FC65437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E822EF19-28B2-4A84-8C2F-B8065D363A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.7.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A2DF81-E5ED-46A3-AEBD-08927B877712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E70A3F-B326-483D-B0E4-67178A5AB9DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA51A2D7-8268-4D45-8458-82AD91322569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BAF218-187D-4E4E-B941-451F38C773AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.10_2003-09-15_0415_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A7F6BA-B506-42C0-B86E-7A9C19D603CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.10_2003-09-15_0415_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F93B4CE-92E4-40D0-A44A-01592361EA32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350A7BA0-E720-4B95-A9DB-7F06642ABEA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B12FFD9-A002-4B2D-A7DA-56C6A80F92D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CCA1E6-8581-4DE1-9F61-0CAD41070673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779025D9-B0A4-4289-AE30-D1D5BEDE5AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphviz:graphviz:1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E590CD96-193C-42EE-84FB-E03FFA0101B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17121",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17125",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17207",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-857",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:188",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15050",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/208-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/15050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/208-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nGraphviz, Graphviz, 2.2.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to deployed web applications."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "D9F68042-8C22-447E-8C6B-F44DEE5BF389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:*:platform:*:*:*:*:*",
            "matchCriteriaId" : "7659FD2B-6F83-44F1-B4A1-94D106B4C686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:ur1:platform:*:*:*:*:*",
            "matchCriteriaId" : "E2A9B4B2-B844-411F-B4C7-9AC60C37A5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16802",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101905-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-305.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14823",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101905-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/p-305.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:6.0:*:platform:*:*:*:*:*",
            "matchCriteriaId" : "A75F7843-0C80-4235-8F71-7073494A75C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB26B3D-4DF0-45C2-9ECA-202C829392D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "EE5A4BC2-ED34-4968-881E-ED6AD300AC42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*",
            "matchCriteriaId" : "D00790CE-CD77-4C39-80AC-5FBD298DD63A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "BC5F2280-EC46-4D2F-8402-FE91ECEE6A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur1:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F076EB9-CE31-456E-B7E9-B9F4C26CB0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur2:platform:*:*:*:*:*",
            "matchCriteriaId" : "FAF567AF-95D6-4634-90BB-E34801F44459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur2:standard:*:*:*:*:*",
            "matchCriteriaId" : "951B75FF-9190-4AF7-BE9D-23C2114F71DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:*",
            "matchCriteriaId" : "60EBC552-FAC2-4833-B1A6-696DC06301A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur5:platform:*:*:*:*:*",
            "matchCriteriaId" : "A6F3E897-8253-4D9B-9FA7-83727F508789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur5:standard:*:*:*:*:*",
            "matchCriteriaId" : "18ECFDD3-6D45-44F1-BA98-426D86084BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur6:platform:*:*:*:*:*",
            "matchCriteriaId" : "4C28CDD2-F08A-438D-B4E2-093994BE50C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur6:standard:*:*:*:*:*",
            "matchCriteriaId" : "3A84AFF0-8598-48C7-90BE-DB2700F55430"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17164",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015047",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101910-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15084",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/17164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101910-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service (unresponsive service) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_proxy_server:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D36EE342-0A55-4F2E-9037-14C0975CEA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DD35DA64-83B8-4EF4-94E8-D692E6FDD0AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5D85FB-D4A6-4518-BBD9-8D021446E433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A1102A86-8FB6-418E-808E-A6B94016E0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A1EC8B-311D-4D34-A669-FF52B29BB5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "66EA6738-9134-402C-AA74-68298F45B60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB54F05-CBE0-4A3B-9941-A5509BF40EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA027B0-8996-4CBF-881D-D393C3508944"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014875",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101913-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101913-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.17",
            "matchCriteriaId" : "133521B0-6212-48E3-B114-216F626E1D23"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=99464",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21508",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21530",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27960",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19555",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-336-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3307",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=99464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-336-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "gas (and gcc) make no promise that they are fault tolerant to bad input.  We do not plan on producing security updates for Red Hat Enterprise Linux to correct these bugs.",
        "lastModified" : "2006-08-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.17",
            "matchCriteriaId" : "133521B0-6212-48E3-B114-216F626E1D23"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sources.redhat.com/bugzilla/show_bug.cgi?id=1069",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-366-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44661",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sources.redhat.com/bugzilla/show_bug.cgi?id=1069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-366-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following patch:\nGNU, Binutils, patch 20050714",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "gas (and gcc) make no promise that they are fault tolerant to bad input.  We do not plan on producing security updates for Red Hat Enterprise Linux to correct these bugs.",
        "lastModified" : "2006-08-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78647043-8EBD-48AA-98F4-8E6D332C35E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=111073068631287&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14568",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/14885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12798",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=111073068631287&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/14885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/0260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a \"text/html\" HTML Content-type header sent in response to an XMLHttpRequest (AJAX)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "86584E3F-3B0D-4018-A186-E59F3B01CA5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-07/0434.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-07/0434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hugepage code (hugetlb.c) in Linux kernel 2.6, possibly 2.6.12 and 2.6.13, in certain configurations, allows local users to cause a denial of service (crash) by triggering an mmap error before a prefault, which causes an error in the unmap_hugepage_area function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=112323336017157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=165345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=112323336017157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=165345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SISCO OSI stack for Windows, as used by MMS-EASE 7.10 and earlier, AX-S4 MMS 5.01 and earlier, AX-S4 ICCP 3.0103 and earlier, and the ICCP Toolkit for MMS-EASE 4.10 and earlier, allows remote attackers to cause a denial of service (process crash) via certain network traffic, as demonstrated using a Nessus scan."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sisco:ax-s4_iccp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0103",
            "matchCriteriaId" : "CB54DC0E-F2E2-4283-AFA1-4A6BE721F92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sisco:ax-s4_mms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.01",
            "matchCriteriaId" : "41A68A53-9DEE-4C33-88EB-2CEBA4C2A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sisco:iccp_toolkit_for_mms-ease:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10",
            "matchCriteriaId" : "E738906E-A93A-485B-B6DF-0233AAEA7B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sisco:mms-ease:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10",
            "matchCriteriaId" : "C6D4BEFA-E545-4C32-8F79-EB924406436A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22047",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/468798",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sisconet.com/downloads/NESSUS_Vulnerability_Announcement.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/468798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sisconet.com/downloads/NESSUS_Vulnerability_Announcement.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, Crystal Reports Server XI, and BusinessObjects Enterprise XI, allows remote attackers to cause a denial of service (application hang) via certain network traffic, possibly involving multiple simultaneous TCP connections."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:businessobjects:crystal_enterprise_xi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2706B6-BAB0-4427-BD96-F6E0CA185909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:businessobjects:crystal_reports_server_xi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D2569B-55D7-4A4F-85D0-FF976C22D266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:businessobjects:crystal_reports_xi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2592FBCA-76BC-4E22-BE91-FAB58901B5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:businessobjects:report_application_server:11.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722F947C-F84A-46A3-A6E4-7710545E1E1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16282",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1014605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.businessobjects.com/downloads/critical_updates/security_bulletin_june05.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.businessobjects.com/library/kbase/articles/c2017748.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14433",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1014604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1014605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.businessobjects.com/downloads/critical_updates/security_bulletin_june05.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.businessobjects.com/library/kbase/articles/c2017748.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/18473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:middlebury_college:segue_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.5",
            "matchCriteriaId" : "027DF186-9CE2-4C0F-9AE7-321BFF782C2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=456920&group_id=82171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=456920&group_id=82171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and 31 before 31I patch 735 do not properly restrict process execution by lnaxdm/sapsys, which allows remote attackers to execute arbitrary code via a certain UDP packet that ends with the name of a local executable file, aka the \"FX SAP R/3 gwrd vuln.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_r_3:4.6_before_patch_1767:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C79FDB-885C-4E21-8D34-01F7E0F3E670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_r_3:6.2_before_patch_1364:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15558671-9CB0-440B-94C5-6B878B6364D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_r_3:6.4_before_patch_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC4F25AE-8381-4FC4-B8E5-1E459DEAD74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_r_3:31_before_31i_patch_735:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E767CA-E2B6-4194-A87F-8CAC56EE1F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_r_3:40_before_patch_1008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15CD7C9-BECC-4DF2-8455-7AE7154A765C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_r_3:45_before_patch_913:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281C68CB-F59A-4540-A16C-48791607C193"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.darklab.org/pipermail/darklab/2006-January/000209.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.virus.org/darklab-0509/msg00011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.virus.org/darklab-0509/msg00017.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.virus.org/darklab-0509/msg00018.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451378/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.darklab.org/pipermail/darklab/2006-January/000209.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.virus.org/darklab-0509/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.virus.org/darklab-0509/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.virus.org/darklab-0509/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451378/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2243B4-8E0C-46BC-A003-EF52C30A030E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3704E3B8-C1CE-442F-B69D-0ED9EDAD5D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE12C338-EE8E-4E28-8E18-9C4FCC9D063D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E7C8D7-5F57-4B49-B404-DB4DAE273926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BBF8B2-02E6-4A53-A5FC-DA8D39171753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9280692-0AB9-4C1F-804C-CB088E5E4483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F108D73C-1107-41DE-9DDB-505ABAF6E34D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.2_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D3C65A-3EE0-4BF1-AB0E-E5D4B01DED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8488C93D-2826-47BE-AE6D-A523199BA7D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD18DE8B-E0E2-43DA-A365-FCCAED59A623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3591365-5973-450F-A3F5-2EA0247A9571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85FFCBDF-B1A2-4B93-A2ED-83EA4FE52E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F8C767-468C-448B-8CA8-9DCD43A4BD8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D12FAE-5839-4123-876E-0A32DA2B1A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.7_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8C629A-5D13-4DE2-A866-DC99C8D0A761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.7_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A879A73-C624-4D47-A748-9EAC73EC8DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.7_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CC91C6-C680-469E-A103-691FAA1CF344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11D565E-0A90-4093-AA87-34A6DAE68E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.8_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B4A0D9-071F-4F0E-9826-054D5651773C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.8_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918684E1-D1B5-48C6-B413-2FE86379EFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C1A60B-D79B-4EE3-9E48-83AF875AD062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C5CBBA-43CE-4D77-9DA4-D4C4E010978B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.9_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89CD92BA-407E-4089-A98F-6D1309D8C294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.9_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3EA91F4-AC66-4A9E-B3B0-AB9B52257DCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB59FBA-AD15-453A-A3CA-7673D005920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1015CB-9A33-48D5-861A-A1FC0D8D0FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C825FE-91EC-43A2-9EEA-65A31DF46570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2_pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C563389-39DB-45BA-9C84-DD6837900440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2_pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2ABE74B-3D17-45D9-A87A-CE562DDB4454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2_pre5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9166C42C-340D-4E7E-915C-BC2E4A373ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2_pre6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C586B4-670E-448B-8DFD-EE08F530BC3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2_pre7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9AED91C-8428-40F0-9E47-FF3FE7CAB067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2_pre8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114C3C5D-B227-4DE7-8485-1AE4B5E5E232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2_pre9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0825C72A-DF19-44E4-9DCF-7F7047C1C582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2_pre10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D658A-726D-4CB2-A07B-287A8EB3CB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.2_pre11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ED09E8-2852-464B-9721-340F8F8C3B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.3.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAED483-3825-493E-978D-9047A1F7087B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/dailydave/2006-q1/0122.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.proftpd.org/show_bug.cgi?id=2658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16535",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/dailydave/2006-q1/0122.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.proftpd.org/show_bug.cgi?id=2658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in ui.c in Textbased MSN Client (TMSNC) before 0.2.5 allows attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors that cause format strings to be injected into the wprintw function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3AE0D-9F88-4366-B381-9C9551DBCAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F208958-461D-4CD9-BA77-09DFA5CD71C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B7BA72-8687-4013-A54B-7E33B64B98B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463B0C7C-58E6-45F9-8A1E-B9C6F789C3D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163E0FC4-4634-4032-A0CA-595C130651A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846B9A88-1937-412C-9560-D74879545D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC30D173-1B32-409D-B659-CA113CDF3094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F74FDA2F-51CC-4EFB-92FA-B195B436CAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFEB674-23B4-471A-AA5F-18D83036BEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.2.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5241C1-B092-4023-8D9E-326E49DC32CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22CB3030-EAE6-4FD9-88B1-C59240BBC3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C1A0169-962A-4BB4-8F1A-E4F7D6E7A604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E22A7C-3CA2-4835-BB9F-088EBD60C99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmsnc:tmsnc:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D8E61E-B570-404D-A325-924CB9F980F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16752",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=355808",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=19311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14810",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=355808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=19311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Copernicus Europa allow remote attackers to execute arbitrary SQL commands via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:copernicus:europa:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F236BF-D088-4899-A67F-6DCA2AFEC721"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/14895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EE627-6072-4359-981B-0168F7D44B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F342FD1-7A60-4E7D-B56A-E1C3D560C728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFBB2FBE-9A0A-49C9-A281-4D053513016B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B84127-574D-4C12-8823-787B1BBBAEA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7708DE5-A3C2-4024-B5AE-FC9DE963935F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21201845",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21217285",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=19614",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14901",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014946.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21201845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21217285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=19614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/alerts/2005/Sep/1014946.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SMC Wireless Router model SMC7904WBRA allows remote attackers to cause a denial of service (reboot) by flooding the router with traffic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:smc_networks:smc7904wbra:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98DD2ED6-63D4-4857-AC6C-B07C9AB52F83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/14809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2) the f parameter in events.php, or (3) the e parameter in plug.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B013ADC-809F-4DFE-913B-FE3B8974404C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:801:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A05DCF-C183-434B-BF4C-8F2228060EF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0381.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.g-0.org/code/ldu-adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/19504",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/19505",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14820",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0381.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.g-0.org/code/ldu-adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/19504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/19505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source (IOS) version 2.7.2 allows remote attackers to execute arbitrary SQL commands via the project_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:digger_solutions:intranet_open_source:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66072E9A-E572-47A3-A90B-CA0CC36FEAF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/19/DiggerIOS_Ver_2.7.2_SQL_Injection_Vulnerability.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16870",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/19/DiggerIOS_Ver_2.7.2_SQL_Injection_Vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/19574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/1804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:http_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB0038A-0625-40B4-B861-7E714B86BCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:http_server:5.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D27DF0-6BB4-4741-A488-766105119A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:http_server:5.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94684672-83E5-48D4-889B-A80B0CF6E2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:http_server:5.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8532FDE7-7F93-459C-BBF4-8D630D693AA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-02/0235.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-02/0235.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/14311",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/13843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-02/0235.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-02/0235.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/14311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1013182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/13843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the LOCAL_PATH parameter, a different vulnerability than CVE-2005-1965."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.1",
            "matchCriteriaId" : "D765E43C-3BA0-42AD-9170-7F31A28C7661"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://list.broadpool.com/pipermail/siteframe/2005-October/001416.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://list.broadpool.com/pipermail/siteframe/2005-October/001416.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CD71A6-724B-42C1-BBBD-456F74393909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7EDB2AB-B6EA-4327-A969-88BB822B3896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6828C91-18F9-4E36-B496-56E559180480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2251B20D-F0AA-4FCA-8B62-B3EED16726E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D400E92-D0E4-43C2-8ECF-84352B5B2608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59115E7-A5AB-4468-BE51-AB6E8D188B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE9D413-8078-4618-B4A6-4D774D30930F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21959",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419645/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/21959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/419645/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-4776."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB440BC6-9FC8-4EFD-B05E-3F5A5A68F8EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/33013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.s21sec.com/en/avisos/s21sec-034-en.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/458240/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/458554/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/22268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/33013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.s21sec.com/en/avisos/s21sec-034-en.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/458240/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/458554/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/22268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces.  NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:microsoft_windows_server_2003_sp1:*:*:*:*:*",
            "matchCriteriaId" : "12D23F59-5C49-4DE0-85E8-15287140660D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "CD115D64-87D8-4868-B247-16B83591B7FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:windows_server_2003:*:*:*:*:*",
            "matchCriteriaId" : "11A09F26-5FE3-4879-9FCB-769F8FB3D067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:windows_xp_professional_64bit:*:*:*:*:*",
            "matchCriteriaId" : "8EF317BB-E63A-4A60-A2E1-6797A402D88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "B1D7486F-1B6C-4705-B73C-F763F36F5150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_98_se:*:*:*:*:*",
            "matchCriteriaId" : "6DBFDCF4-ACC7-4196-BA4D-2A35FAA5E1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_millennium:*:*:*:*:*",
            "matchCriteriaId" : "5E49636B-A425-4595-9663-A22A9F7C7D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_xpsp1:*:*:*:*:*",
            "matchCriteriaId" : "FCFF1342-8AD8-4003-81AA-09DB4A12EEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_2000_sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEABB0B-61EF-44E1-8673-F4B5A99A4164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium:*:*:*:*:*:*",
            "matchCriteriaId" : "181D0FA2-79E1-4422-9810-D7A557805872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium_systems:*:*:*:*:*:*",
            "matchCriteriaId" : "3665D68D-8E1E-4FA9-97B9-9E099DDE84F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81C4C1ED-AC7D-4970-8B34-62D304A83FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:*:windows_server:*:*:*:*:*",
            "matchCriteriaId" : "8D4BD1B0-8A91-4ED2-9C0D-BF87D18A01C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:*:windows_server_2003:*:*:*:*:*",
            "matchCriteriaId" : "9B0F6E35-652C-4948-9FF4-DBF199B4FA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:*:windowsxp:*:*:*:*:*",
            "matchCriteriaId" : "DACE76B0-02BC-4624-A21E-405A893D7437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "09A21D9F-6F51-4761-B7DB-E79CE60A0E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:windows_xp:*:*:*:*:*",
            "matchCriteriaId" : "BA04D0A1-23AE-4C0F-8FE3-FD88D75CDA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:windows_xp:*:*:*:*:*",
            "matchCriteriaId" : "B0BFE49F-932B-469C-9B3C-5011D093E1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53E9D33-ECCD-428B-A117-3EB04B9554C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68656E52-AD8A-474E-9160-CD5F8857254B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F47C82-E767-47A8-88DE-417B004ED7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86E7189-CE21-4007-A3FA-39A6B51A5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBF9B51-5AF4-4317-9768-21D866AC7990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:canon:network_camera_server_vb101:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1EBD1BF-DEE2-4047-A8B4-3A816FC80003"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2007/Feb/0081.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/411585",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/459172/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/459172/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2007/Feb/0081.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/411585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/459172/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/459172/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a \".\" in the wrong place, which causes kolabfilter to add another \".\", which might break clear-text signatures and attachments.  NOTE: it is not clear whether this issue crosses privilege boundaries, so this might not be a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kolab:kolab_groupware_server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E997D814-7443-45EF-A0BA-688623E0A087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kolab:kolab_groupware_server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC2E6D3B-628A-43FD-8432-0489093241B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kolab.org/security/kolab-vendor-notice-07.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-07.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuemart:virtuemart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "EA4E63A5-38AB-44CB-941E-ABDE79878E51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/trunk/virtuemart/CHANGELOG.php?revision=692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/trunk/virtuemart/CHANGELOG.php?revision=692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewcvs:viewcvs:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD8A138-B02C-461D-82DB-0F1670E98484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/461382/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12112",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/461382/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which can be leveraged for cross-site scripting (XSS) and other attacks, as demonstrated using (1) \"text/html\", or (2) \"image/jpeg\" with an image that is rendered as HTML by Internet Explorer, a different vulnerability than CVE-2004-1062.  NOTE: it was later reported that 0.9.4 is also affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewcvs:viewcvs:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD8A138-B02C-461D-82DB-0F1670E98484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/461382/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12112",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1017704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/461382/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1017704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the (1) SYS.DBMS_CDC_SUBSCRIBE and (2) SYS.DBMS_CDC_ISUBSCRIBE packages, a different vector than CVE-2005-1197."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC89D14C-4E08-475C-953C-D85A9EDFFEC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF667575-AD5F-43D6-B7BF-F255C1A14A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E604B-6C0D-474F-A3A9-B07EF0A7D2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8667E51F-86A9-4181-8FCC-BECC6F50913B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA52C2C2-64C3-40BA-86A1-C4A14BEB8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53BEE7A-7AB6-4B18-80C3-3B4DE8358E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_9.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A9B45B4-47D3-4803-9BDF-783E7CD3A522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEA97EC-FC86-4F53-A134-B98F25892BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84E349-48A8-4800-A300-AACEC8659656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323353FE-7ECD-4668-BDB1-3E5CA8F3F9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4237F0-BE51-4FCD-9CF1-83E54723390A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33627F4-3E7D-4181-8171-2B65F8C60E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E41C0DB6-CD92-4FDC-A705-83CFB92C062A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22848A7-D0FD-46FD-897E-2658FA809DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D1E996-3AD3-4B17-B959-6790BC735F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_9.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4FB153-9C3F-4E22-BB42-D99793D4920F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC43855-2664-42CC-87DD-3C90DB1430C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8975840-9843-4034-BBED-B31A9BA16DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A39665-BB49-4135-9850-8CF9E69546FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2764001-8B54-47AD-A265-0C0B0F691A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B5ED54-BAF4-41B3-8B09-F9795AB7A18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EA2727-2F53-470F-AF58-1B33B7A5B7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAD20B6-258F-4093-BEE0-99F11D61A61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A4D091-1D89-484E-A3F7-0F98F8814686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B900301-8AC5-43BD-BD2B-639419885820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF7518D-DA17-4C63-B35F-6CAAA9F96EFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.appsecinc.com/resources/alerts/oracle/2005-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEExploit.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEWorkaround.sql",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396133",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404970",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/oracle/2005-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEExploit.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEWorkaround.sql",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/396133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/404970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/13236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows remote attackers to obtain the JSP source code and other sensitive information via \"a specific JSP URL,\" related to lack of normalization of the URL format."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/34177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24478",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21243541",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008815",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/34177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21243541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1444794B-F893-44B2-824F-24211B872C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B019F0-A728-4803-B036-14E10A5B0389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E4A501-A198-4462-8813-3D355B5BC212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC0955F-486F-41FF-ACA6-0DF4D966E800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8451E82-F170-4182-A312-70DA75F96983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A7DAA3-2FFC-4AA3-AEB9-9ADF4A10AC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6453897-CA51-4143-B58D-689E0B69CE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DB3E62-C18C-440D-B2C8-E14122D2EEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B95B55-7A5E-4504-B5B5-B7B03403E3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31419896-89F7-43A2-8B7C-3B92744BBC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559355CF-7FA8-4D90-8393-90C912F571C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355967D9-475A-49AF-A3FF-E0AC3668B289"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/24478",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21243541",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008814",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24013840",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21243541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24013840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial of service (failed KASSERT and system crash) by moving a connected system to a location with low signal strength, and possibly other vectors related to a race condition between interface enabling and packet transmission."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:madwifi:madwifi:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ADB6BFE-CEB2-4DFD-AB76-7A47708997AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:madwifi:madwifi:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2309CA-C570-4994-A25C-452762651E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:madwifi:madwifi:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6E66DE-5EF4-4772-ADCB-98DA4C8D4521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:madwifi:madwifi:0.9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180B84A9-47AC-404A-A7D7-91EEA8BAB6D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://madwifi.org/ticket/162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://madwifi.org/ticket/279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://madwifi.org/ticket/287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://madwifi.org/wiki/Releases/0.9.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/24841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_14_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://madwifi.org/ticket/162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://madwifi.org/ticket/279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://madwifi.org/ticket/287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://madwifi.org/wiki/Releases/0.9.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/24841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_14_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. The MadWiFi wireless driver is not shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.",
        "lastModified" : "2007-04-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4836",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DDD82E-5D83-4581-B2F3-F12655BBF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0F0C91-171E-421D-BE86-11567DEFC7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22D2621-D305-43CE-B00D-9A7563B061F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4245BA-B05C-49DE-B2E0-1E588209ED3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8633532B-9785-4259-8840-B08529E20DCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA52901-2D16-4F7E-BF5E-780B42A55D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.28:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "65C47E50-048C-4C2E-9896-5B70AC63CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF6952D-6308-4029-8B63-0BD9C648C60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.29:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "02F88EFB-520A-40E7-AE4D-B167B2AC2EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94941F86-0BBF-4F30-8F13-FB895A11ED69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17522878-4266-432A-859D-C02096C8AC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951FFCD7-EAC2-41E6-A53B-F90C540327E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1F2738-C7D6-4206-9227-43F464887FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EEB6F2-A721-45CF-A856-0E01B043C317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FDE602-A56A-477E-B704-41AF92EEBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A28B11A-3BC7-41BC-8970-EE075B029F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F3B31D-8974-4016-ACAF-E7A917C99F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49C8D7-1789-4518-9DC8-D8A8FEAF4233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/28483",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/28483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different vulnerability than CVE-2005-2177."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        }, {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B4FDFF-9E09-4AB9-9196-6A01903473B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E8FC05-D498-4D5D-B5A3-3F16749B7491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD964F4-9196-4641-A854-09DA86BCC890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A07BEF-C759-459E-A144-D37C1A55A9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.4_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D95BAC-CCF3-4E8B-BF31-E277B03C0FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97B7D0D-68CC-463D-A14B-3651D8DD4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCF39FC-D220-4F4A-8CBF-B993C65671FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5512FA-8B74-4585-ADEF-F710C0DF83A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AAC2EA-8AA7-4303-BD64-74CFC7938D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C872A9B0-0B3C-47B2-82F5-344BEBA221CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE816EA-2CDF-440A-9B7A-D772F38A3A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourceforge:net-snmp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.9",
            "matchCriteriaId" : "0B00F0CF-F686-472A-8B50-7C5C105BD07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourceforge:net-snmp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.2",
            "matchCriteriaId" : "8CD179E6-E4F4-42CF-AA46-8B7CD8A64886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourceforge:net-snmp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.1.2",
            "matchCriteriaId" : "18A1BBCA-47F9-4106-98CC-6734F82D18D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/25114",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25115",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25411",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1207023&group_id=12694&atid=112694",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102929-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/23762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-456-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1944",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1207023&group_id=12694&atid=112694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102929-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/23762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-456-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4838",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp.  NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.6",
            "matchCriteriaId" : "AF73578B-8EF3-476D-B918-C0C2025F72CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065598.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=tomcat-dev&m=110476790331536&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=tomcat-dev&m=110477195116951&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2008-0630.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/13737",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31493",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1012793",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.oliverkarow.de/research/jakarta556_xss.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/12721",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/34878",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/34879",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/36467",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065598.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=tomcat-dev&m=110476790331536&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=tomcat-dev&m=110477195116951&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2008-0630.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/13737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1012793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oliverkarow.de/research/jakarta556_xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/12721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/34878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/34879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/36467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4839",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information leak of values from earlier certificates."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claymore_systems_inc:puretls:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9b4",
            "matchCriteriaId" : "F3FA34C1-0B5F-45CA-BBEF-6E7663A0FAB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.rtfm.com/puretls/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www1.ietf.org/mail-archive/web/tls/current/msg00229.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.rtfm.com/puretls/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.ietf.org/mail-archive/web/tls/current/msg00229.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL dereference and browser crash) by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express_book_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD9FD42-C89F-4AE4-9A63-C8F405CE4F1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-3-outlookexpressaddressbook_02.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/470694/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-3-outlookexpressaddressbook_02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/470694/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Outlook Progress Ctl control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC71FD8-D385-4507-BD14-B75FDD4C79E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The System Monitor Source Properties control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC71FD8-D385-4507-BD14-B75FDD4C79E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC71FD8-D385-4507-BD14-B75FDD4C79E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "D041E6B1-B462-49BC-B357-D4B1027342BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_plug-in:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D20638-01E4-4638-B698-C16B2ADE4272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_plug-in:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E44081-C515-4D30-837F-B56667D1E18B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/391803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a syslog call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spey:spey:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094D7595-3821-421F-B3CF-7812014729CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=514029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?r1=1.5&r2=1.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=514029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?r1=1.5&r2=1.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Spey 0.3.3 has unknown impact and attack vectors related to \"A number of security holes which could lead to compromise,\" a different issue than CVE-2005-4846."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spey:spey:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094D7595-3821-421F-B3CF-7812014729CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=514029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/38887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=514029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/38887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier before 20050607 might allow remote attackers to execute arbitrary code via certain data packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0_sp1",
            "matchCriteriaId" : "0ED991EC-403D-4C33-A1C8-C494684C2997"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog2.lemondeinformatique.fr/management_du_si/2006/05/notre_ami_imad_.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackberry.com/btsc/articles/669/KB04075_f.SAL_Public.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.lemonde.fr/web/article/0%2C1-0%402-3208%2C36-777732%2C0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/35241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog2.lemondeinformatique.fr/management_du_si/2006/05/notre_ami_imad_.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackberry.com/btsc/articles/669/KB04075_f.SAL_Public.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.lemonde.fr/web/article/0%2C1-0%402-3208%2C36-777732%2C0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/35241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:derby:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1.0",
            "matchCriteriaId" : "CC38C5D7-D8E5-4C7E-A047-65AF50FB3110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://db.apache.org/derby/releases/release-10.1.2.1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://issues.apache.org/jira/browse/DERBY-530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://issues.apache.org/jira/browse/DERBY-559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://db.apache.org/derby/releases/release-10.1.2.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://issues.apache.org/jira/browse/DERBY-530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.apache.org/jira/browse/DERBY-559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "C985E370-B86B-4BF6-8F55-C48900C3037E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://issues.ez.no/6680",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://issues.ez.no/6680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authenticated users to bypass the original permissions on embedded objects in XML fields and read these objects."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.4",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "6113B7A4-15F3-4901-8B51-2C1BEBA23006"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://issues.ez.no/6841",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://issues.ez.no/6841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric characters in a URI to '_' (underscore), which allows remote attackers to bypass access restrictions by inserting certain characters in a URI, as demonstrated by a request for /admin:de, which matches a rule allowing only /admin_de to access /admin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.8",
            "matchCriteriaId" : "4A13E1FC-8A4E-421C-A07D-999971BC476A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://issues.ez.no/7025",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://issues.ez.no/7025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 9.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFCB98A-B28B-4BC0-AF70-A75FD5845C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489A43E7-1190-4F14-8499-7597013C8260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1FB755-41D8-4C8F-91EB-419C362F8FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C966B6E-75DC-4470-B1F5-22424AF8EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4CD0FB-13BD-4DDB-B82C-7204206F764F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://issues.ez.no/7052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.ez.no/7052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Vendor has fixed this vulnerability in an upgrade starting at 3.5.5:  http://ez.no/download/ez_publish"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFCB98A-B28B-4BC0-AF70-A75FD5845C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489A43E7-1190-4F14-8499-7597013C8260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1FB755-41D8-4C8F-91EB-419C362F8FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C966B6E-75DC-4470-B1F5-22424AF8EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4CD0FB-13BD-4DDB-B82C-7204206F764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE243CE3-75E4-4C29-BF80-30FEB6321BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504FCE83-4801-4ACC-81DF-402841B2B121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C62DE22-8ABC-4A27-86FD-D045887C1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EACF1838-EC9B-45EA-A5D0-0252E4E54F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7047B492-D3B2-4685-A64A-3ABE3BD1E471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCCCA12-E984-492F-9AF2-D87053F0F09A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AF4B41-4ADB-440E-9ADD-B70151000C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14B2E33-CB8C-4F40-B7D1-3FE67E9D6D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E163DA2F-053F-4D9F-B793-9A2B70ADE342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA5BE97-28F9-4DEE-BAB3-093D6F35F730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6035B56A-94C9-4131-9C49-3EE37DCE23A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F8F2AC-AB82-4925-91D2-A6DE65E4A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A84C0A8-C576-4233-BC05-30CA56A41FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B179C9-6B87-4776-A4E5-7EF646931E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76C5874-8115-4866-9C30-787786C80BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798E2A15-C9F0-46EF-A7BC-ECFEE308A3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E135AB2D-DB4B-4424-B628-70764128522D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C021175-DECB-4905-8712-E4E7D92F6002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60FCD699-9D7C-4DF3-AEE4-F5A3CB42B72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6B9929-87CB-4E6A-9468-23444D984E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF55F25-B30D-4FC9-ADA7-7F185CD5338F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC77C98-2C37-49CE-AFB4-49D84BEC78FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568B3930-DDA1-4582-B1E8-BA4B4E83E49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24159950-04AD-43EA-BEC5-C306A438CEDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF33FE5-094B-42E3-AFB4-EE344A0161D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00844C2C-259B-4685-9B26-F9AD6B8C2019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E923D5-B60D-4822-B1A7-AB3B32D3BA0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "076912DC-A491-4572-A5F8-8E16783990BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34BB6ECF-28F3-429B-96C4-EC4A49CFEE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C48844-569E-4274-B039-285D20A257E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0853588-C50C-4BE0-9594-D015153E78FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618D0C6-1679-44A2-B809-451E6EBDA57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F050C746-AC77-4C50-BA1E-7308415C56E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://issues.ez.no/6355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.ez.no/6355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922 does not restrict Image datatype uploads to image content types, which allows remote authenticated users to upload certain types of files, as demonstrated by .js files, which may enable cross-site scripting (XSS) attacks or other attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.5",
            "matchCriteriaId" : "1D74B745-1ADF-42D7-8EF5-42CAE621AA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "0D82DD56-F9C1-42E3-ACBE-1E728C2526F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "365205E7-B022-45C6-999D-BD080EF8C123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB054C0B-3D03-4452-97EA-E89C9E524C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://issues.ez.no/5984",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://issues.ez.no/5984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with (1) \"anything after the url\" or (2) a \"wrong url\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-19"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.0",
            "matchCriteriaId" : "2CDE6E82-F846-4CB2-914B-2C823676D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFCB98A-B28B-4BC0-AF70-A75FD5845C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489A43E7-1190-4F14-8499-7597013C8260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1FB755-41D8-4C8F-91EB-419C362F8FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C966B6E-75DC-4470-B1F5-22424AF8EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4CD0FB-13BD-4DDB-B82C-7204206F764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE243CE3-75E4-4C29-BF80-30FEB6321BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504FCE83-4801-4ACC-81DF-402841B2B121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14B2E33-CB8C-4F40-B7D1-3FE67E9D6D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E163DA2F-053F-4D9F-B793-9A2B70ADE342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA5BE97-28F9-4DEE-BAB3-093D6F35F730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6035B56A-94C9-4131-9C49-3EE37DCE23A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F8F2AC-AB82-4925-91D2-A6DE65E4A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF55F25-B30D-4FC9-ADA7-7F185CD5338F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC77C98-2C37-49CE-AFB4-49D84BEC78FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568B3930-DDA1-4582-B1E8-BA4B4E83E49B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://issues.ez.no/6703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.ez.no/6703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service (Apache httpd segmentation fault) via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a \"memory addressing error\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.0",
            "matchCriteriaId" : "2CDE6E82-F846-4CB2-914B-2C823676D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFCB98A-B28B-4BC0-AF70-A75FD5845C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489A43E7-1190-4F14-8499-7597013C8260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1FB755-41D8-4C8F-91EB-419C362F8FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C966B6E-75DC-4470-B1F5-22424AF8EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4CD0FB-13BD-4DDB-B82C-7204206F764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE243CE3-75E4-4C29-BF80-30FEB6321BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504FCE83-4801-4ACC-81DF-402841B2B121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14B2E33-CB8C-4F40-B7D1-3FE67E9D6D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E163DA2F-053F-4D9F-B793-9A2B70ADE342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA5BE97-28F9-4DEE-BAB3-093D6F35F730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6035B56A-94C9-4131-9C49-3EE37DCE23A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F8F2AC-AB82-4925-91D2-A6DE65E4A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF55F25-B30D-4FC9-ADA7-7F185CD5338F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC77C98-2C37-49CE-AFB4-49D84BEC78FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568B3930-DDA1-4582-B1E8-BA4B4E83E49B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://issues.ez.no/7459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.ez.no/7459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in mimicboard2 (Mimic2) 086 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters associated with the (1) name, (2) title, and (3) comment sections, as demonstrated by referencing a remote document through the SRC attribute of an IFRAME element."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chitta:mimicboard_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "086",
            "matchCriteriaId" : "DF9BD805-E87F-47BC-A335-F430E9C0AF2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/14778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/14778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "In addition to the sites referenced.  http://secunia.com/product/5681/ gives an advisory for the vulnerability as well as additional descripton."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mimicboard2 (Mimic2) 086 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mimic2.dat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chitta:mimicboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mimiboard2_086",
            "matchCriteriaId" : "ECD0B00D-9A8A-49F1-9142-24B171E8EDF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/14779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spectrumcu:cash_receipting_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.504",
            "matchCriteriaId" : "C0CA4382-A7D1-4F20-B731-AF88C3D13AE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=111229613907550&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/13985",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.portcullis.co.uk/uplds/advisories/Portcullis%20Security%20Advisory%2005-002%20Spectrum%20Cash%20Receipting%20System%20Weak%20Password%20Protection%20Vulnerability.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=111229613907550&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/13985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.portcullis.co.uk/uplds/advisories/Portcullis%20Security%20Advisory%2005-002%20Spectrum%20Cash%20Receipting%20System%20Weak%20Password%20Protection%20Vulnerability.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account_manage.php with a trailing \"/login.php\" PHP_SELF value, which is not properly handled by the CHECK_AUTH function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasio.net:ragnarok_online_control_panel:4.3.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813C0C8A-C5B0-49B7-825F-2F0690B99046"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-07/0522.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16287",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.jasio.net/index.php?categoryid=3&p13_sectionid=2&p13_fileid=6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/18389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-07/0522.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.jasio.net/index.php?categoryid=3&p13_sectionid=2&p13_fileid=6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/18389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:0.9.793:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A63CABB-AFD4-4272-B918-5C52E222ADD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jira.xwiki.org/jira/browse/XWIKI-70",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jira.xwiki.org/jira/browse/XWIKI-70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "889CAF38-6DFA-4185-BB20-62D7AC8E607E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "74DC6B16-4519-41FC-84A7-DF5D74909018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6EA810DB-104E-412A-8B6E-DBB5BEE743A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "515EB611-B1FA-467C-91EF-C5A15BE54C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "AAB0D5A7-4649-4427-A298-AB8BE83BA898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "D1065FBC-D8F9-4E61-AA00-E26D10477152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "56D0096E-8145-4A36-BC18-A9C5C780D1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "3582B88E-655E-4258-A60D-99D9F01EE698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "F2CD0B87-4557-4EC9-9082-B7F23113D911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "E77E8381-FC86-406E-8AC5-CA62415665D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "80DE2026-D9F0-4AAA-97E6-F4FB0EBDB265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E6F25EED-2F22-4066-8EBF-82B78E4518F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "0D220944-974E-4620-86DB-3687CF219294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "BEB7068D-B900-418A-88A4-6F35122D8302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D75154B0-4B86-41C7-BD04-9AE21647F27F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110494995113579&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12733",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21181228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY62039&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005A.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/11397",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110494995113579&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21181228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY62039&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005A.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/11397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "889CAF38-6DFA-4185-BB20-62D7AC8E607E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "74DC6B16-4519-41FC-84A7-DF5D74909018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6EA810DB-104E-412A-8B6E-DBB5BEE743A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "515EB611-B1FA-467C-91EF-C5A15BE54C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "AAB0D5A7-4649-4427-A298-AB8BE83BA898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "D1065FBC-D8F9-4E61-AA00-E26D10477152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "56D0096E-8145-4A36-BC18-A9C5C780D1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "3582B88E-655E-4258-A60D-99D9F01EE698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "F2CD0B87-4557-4EC9-9082-B7F23113D911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "E77E8381-FC86-406E-8AC5-CA62415665D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "80DE2026-D9F0-4AAA-97E6-F4FB0EBDB265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E6F25EED-2F22-4066-8EBF-82B78E4518F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "95E13DED-D8B2-4895-8540-B0C59CB6E672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "71C09529-B8EA-4E39-9606-84EFE693A459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0656D0A4-E09E-4C5E-9270-931433598B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "0D220944-974E-4620-86DB-3687CF219294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "BEB7068D-B900-418A-88A4-6F35122D8302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D75154B0-4B86-41C7-BD04-9AE21647F27F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110495092105541&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY62042",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/db205012005B.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/11390",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110495092105541&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY62042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/db205012005B.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/11390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "889CAF38-6DFA-4185-BB20-62D7AC8E607E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "74DC6B16-4519-41FC-84A7-DF5D74909018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6EA810DB-104E-412A-8B6E-DBB5BEE743A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "515EB611-B1FA-467C-91EF-C5A15BE54C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "AAB0D5A7-4649-4427-A298-AB8BE83BA898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "D1065FBC-D8F9-4E61-AA00-E26D10477152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "56D0096E-8145-4A36-BC18-A9C5C780D1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "3582B88E-655E-4258-A60D-99D9F01EE698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BE7D9100-F344-49B7-A542-2A7035FBFF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "F2CD0B87-4557-4EC9-9082-B7F23113D911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "E77E8381-FC86-406E-8AC5-CA62415665D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "80DE2026-D9F0-4AAA-97E6-F4FB0EBDB265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E6F25EED-2F22-4066-8EBF-82B78E4518F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6EBDEDDF-DBBA-4CD9-8CDE-5182246936D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "95E13DED-D8B2-4895-8540-B0C59CB6E672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "71C09529-B8EA-4E39-9606-84EFE693A459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0656D0A4-E09E-4C5E-9270-931433598B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "39F9063B-982D-46C0-BE50-57DAE0F83174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "0D220944-974E-4620-86DB-3687CF219294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "BEB7068D-B900-418A-88A4-6F35122D8302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D75154B0-4B86-41C7-BD04-9AE21647F27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "620663C7-8AA1-430F-AF00-32F5EF7C65B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110495173031208&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY62041",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21181228",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005C.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/11399",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110495173031208&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY62041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21181228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005C.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/11399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "889CAF38-6DFA-4185-BB20-62D7AC8E607E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "74DC6B16-4519-41FC-84A7-DF5D74909018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6EA810DB-104E-412A-8B6E-DBB5BEE743A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "515EB611-B1FA-467C-91EF-C5A15BE54C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "AAB0D5A7-4649-4427-A298-AB8BE83BA898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "D1065FBC-D8F9-4E61-AA00-E26D10477152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "56D0096E-8145-4A36-BC18-A9C5C780D1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "3582B88E-655E-4258-A60D-99D9F01EE698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BE7D9100-F344-49B7-A542-2A7035FBFF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "F2CD0B87-4557-4EC9-9082-B7F23113D911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "E77E8381-FC86-406E-8AC5-CA62415665D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "80DE2026-D9F0-4AAA-97E6-F4FB0EBDB265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E6F25EED-2F22-4066-8EBF-82B78E4518F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6EBDEDDF-DBBA-4CD9-8CDE-5182246936D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "95E13DED-D8B2-4895-8540-B0C59CB6E672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "71C09529-B8EA-4E39-9606-84EFE693A459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0656D0A4-E09E-4C5E-9270-931433598B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "39F9063B-982D-46C0-BE50-57DAE0F83174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "0D220944-974E-4620-86DB-3687CF219294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "BEB7068D-B900-418A-88A4-6F35122D8302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D75154B0-4B86-41C7-BD04-9AE21647F27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "620663C7-8AA1-430F-AF00-32F5EF7C65B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110495251101381&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY61492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/11401",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110495251101381&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY61492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/11401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enabled, allows remote attackers to execute arbitrary code via a long parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "889CAF38-6DFA-4185-BB20-62D7AC8E607E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "74DC6B16-4519-41FC-84A7-DF5D74909018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6EA810DB-104E-412A-8B6E-DBB5BEE743A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "515EB611-B1FA-467C-91EF-C5A15BE54C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "AAB0D5A7-4649-4427-A298-AB8BE83BA898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "D1065FBC-D8F9-4E61-AA00-E26D10477152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "56D0096E-8145-4A36-BC18-A9C5C780D1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "3582B88E-655E-4258-A60D-99D9F01EE698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BE7D9100-F344-49B7-A542-2A7035FBFF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "F2CD0B87-4557-4EC9-9082-B7F23113D911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "E77E8381-FC86-406E-8AC5-CA62415665D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "80DE2026-D9F0-4AAA-97E6-F4FB0EBDB265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E6F25EED-2F22-4066-8EBF-82B78E4518F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6EBDEDDF-DBBA-4CD9-8CDE-5182246936D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "95E13DED-D8B2-4895-8540-B0C59CB6E672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "71C09529-B8EA-4E39-9606-84EFE693A459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0656D0A4-E09E-4C5E-9270-931433598B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "39F9063B-982D-46C0-BE50-57DAE0F83174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "0D220944-974E-4620-86DB-3687CF219294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "BEB7068D-B900-418A-88A4-6F35122D8302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D75154B0-4B86-41C7-BD04-9AE21647F27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "620663C7-8AA1-430F-AF00-32F5EF7C65B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110495332301120&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21181228",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY62040&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/db205012005E.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/11396",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110495332301120&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21181228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY62040&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/db205012005E.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/11396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE601D37-E6DD-429D-B17F-25E9B6090CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE58350C-327B-4D34-9980-299537134CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06038A2B-9391-48D8-92DF-073B27017C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC2B937D-F6F7-49E5-A58C-CE455A986F9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110495402231836&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21181228",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005F.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11402",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17605",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110495402231836&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21181228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005F.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application crash) via an empty string in the second parameter, which causes a null pointer dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8190EC6B-BA0D-498D-8ECB-2E37D8742A29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110495483501494&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY61781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005G.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/11400",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110495483501494&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY61781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005G.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/11400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflows in the (1) xmlvarcharfromfile, (2) xmlclobfromfile, (3) xmlfilefromvarchar, and (4) xmlfilefromclob function calls in IBM DB2 8.1 allow remote attackers to execute arbitrary code via a 94-byte second argument, which causes the return address to be overwritten with a pointer to the argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8190EC6B-BA0D-498D-8ECB-2E37D8742A29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110495554227717&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY62297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005H.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110495554227717&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY62297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nextgenss.com/advisories/db205012005H.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/11404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via (1) XMLFileFromVarchar or (2) XMLFileFromClob, or read files via (3) XMLVarcharFromFile or (4) XMLClobFromFile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8190EC6B-BA0D-498D-8ECB-2E37D8742A29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=110495620513954&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/db205012005I.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=110495620513954&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/12733/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/db205012005I.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/12170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4872",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Perl-Compatible Regular Expression (PCRE) library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service (crash) via a regular expression with a large number of named subpatterns, which triggers a buffer overflow.  NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "8C79718A-3ECF-4A5B-8C4D-B3458521248B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2007-006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/27582",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27773",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27869",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28658",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-493.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:030",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_62_pcre.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.pcre.org/changelog.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-1052.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/26462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11615",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2007-006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-493.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_62_pcre.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pcre.org/changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-1052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/26462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 might allow context-dependent attackers to execute arbitrary code via vectors that result in long function parameters, as demonstrated by the cups_get_dest_options function in phpcups.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cups:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2DBB75-CF65-4501-AB8C-E537623CE5BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cups.org/str.php?L1102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/41497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cups.org/str.php?L1102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/41497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication passwords via a request with a \"Max-Forwards: 0\" header or (2) arbitrary local passwords on the web server that hosts this object."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=297078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=302489",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/41553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=297078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=302489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/41553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.0",
            "matchCriteriaId" : "1AC79A8A-0227-446D-A38E-AFB424522509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D954FE3D-B766-4D39-B0CA-31A24EDB362C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53B002D-18FD-4C6A-97C0-AA9C83ABD382"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.typo3.org/view.php?id=1250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-20050725-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.typo3.org/view.php?id=1250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-20050725-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.2.2, and possibly other versions before 2.3.0 Beta 2, allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-4877."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ignite_realtime:openfire:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73605A73-927A-4024-9F0B-20ABEF53A1B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.igniterealtime.org/issues/browse/JM-430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.igniterealtime.org/issues/browse/JM-430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-12-31T05:00:00.000",
      "lastModified" : "2025-04-03T01:03:51.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 allows remote attackers to inject arbitrary web script or HTML via Javascript events in the username parameter, a different vulnerability than CVE-2005-4876."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ignite_realtime:openfire:2.3.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3FC75F-32E9-4D93-95A4-93858EC68C63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.igniterealtime.org/issues/browse/JM-430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.igniterealtime.org/issues/browse/JM-430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-18T20:30:00.170",
      "lastModified" : "2025-04-09T00:30:58.490",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2, and unspecified other console scripts in these products, allow remote attackers to inject arbitrary web script or HTML via the sig[1] parameter and possibly other parameters, a different vulnerability than CVE-2007-6156."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en (1) acid_qry_main.php en Analysis Console para Intrusion Databases (ACID) v0.9.6b20 y (2) base_qry_main.php en Basic Analysis y Security Engine (BASE) v1.2 y otros scripts de consola  no especificados en estos productos, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"sig[1]\" y posiblemente otros parámetros, una vulnerabilidad diferente a CVE-2007-6156."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acid:analysis_console_for_intrusion_databases:0.9.6b20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D95BCF7-B845-4AF6-A400-6C169D12FF20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secureideas:basic_analysis_and_security_engine:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0826792-D304-40F1-A9E8-F120B70CF677"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T17:30:00.187",
      "lastModified" : "2025-04-09T00:30:58.490",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote attackers to inject arbitrary web script or HTML via the (1) gmt_ofs and (2) language parameters.  NOTE: the page parameter is already covered by CVE-2006-1913.  NOTE: it was later reported that 3.50 is also affected."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en jax_guestbook.php en Jax Guestbook v3.1 y v3.31 permite a atacantes remotos inyectar web script o HTML a través de los parámetros (1) gmt_ofs y (2) language.\r\nNOTA: el parámetro \"page\" ya está cubierto por CVE-2006-1913.\r\nNOTA: después se informó que v3.50 está también afectado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jax_scripts:jax_guestbook:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D46145-5BD9-4715-A751-19E7219B0A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jax_scripts:jax_guestbook:3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C9722E9-136B-4425-B089-BC06C7528E0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/28523.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16337",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/28523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/28523.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/28523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T17:30:00.203",
      "lastModified" : "2025-04-09T00:30:58.490",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP addresses of users via a direct request to (1) guestbook, (2) guestbook_ips2block, (3) ips2block, and (4) formmailer/logfile.csv."
      }, {
        "lang" : "es",
        "value" : "Jax Guestbook v3.1 y v3.31 almacena información sensible bajo la raíz web con controles de acceso insuficientes, lo cual permite a atacantes remotos obtener la dirección IP de usuarios a través de peticiones directas de (1) guestbook, (2) guestbook_ips2block, (3) ips2block, y (4) formmailer/logfile.csv."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jax_scripts:jax_guestbook:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D46145-5BD9-4715-A751-19E7219B0A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jax_scripts:jax_guestbook:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF709F31-1E90-48C2-B97F-521CDFFD3C25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16337",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/16337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T20:00:00.420",
      "lastModified" : "2025-04-09T00:30:58.490",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions."
      }, {
        "lang" : "es",
        "value" : "El subsistema netlink del kernel de Linux v2.4.x anteriores a la v2.4.37.6 y v2.6.x anteriores a la v2.6.13-rc1 no inicializa unos determinados campos de relleno de estructuras; lo que permite a usuarios locales obtener información confidencial de la memoria del kernel a través de vectores de ataque sin especificar, relacionados con las funciones (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, y (23) cbq_dump_ovl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre1:*:*:*:*:*",
            "matchCriteriaId" : "ABF7B810-A31F-4CF4-B79A-94FEB32FFA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre2:*:*:*:*:*",
            "matchCriteriaId" : "E570983E-3FEC-4088-B060-6095BFB7CD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre3:*:*:*:*:*",
            "matchCriteriaId" : "365CADA0-6FC8-424C-8B1C-62ECCC0650E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre4:*:*:*:*:*",
            "matchCriteriaId" : "40EFDC05-BABC-491D-AC13-0ACA7A0CB5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre5:*:*:*:*:*",
            "matchCriteriaId" : "79CFAD9A-FFE9-475E-98D0-9BFF1EC38AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550DFE6E-DCE6-4649-8746-522996021DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17BB496-749A-40C8-BAA9-6CFBBE308065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C30F255-1297-46EA-9FBC-05564792FF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1757C19-B231-423F-95E9-F9DF1D76FC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934CBC22-864C-468F-B267-3CDE4449DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC432E3-7214-4B61-A666-2DAF5CCAEC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7682650A-8332-484D-874F-2B67246880B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFF499A-6602-4BD3-90B5-E6C4AC888812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843F73D0-2296-45E7-B5D7-BC8C63A8D99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C406D55-D6CF-443B-B5DB-FC69FBEA01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C53EDB2-923D-4860-8251-9A07C9F8FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2A5D6B-7011-40AE-8A94-02B062B19010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E283E518-3A3E-4D39-B11F-E4B71D6ADF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB58C532-186F-4C1F-A107-1BF17C19AA15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A31F446-FB7E-4D6C-8703-0A730E2C71AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.34.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BA2E08-09BC-4EE4-822E-0F6FEF92E721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.35.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97AA815F-E07C-4989-B190-D5E52451D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.35.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFCA2ED-2384-4DB7-9634-AEAEDFF57817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.35.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C171597-F06E-48BA-A897-E753ECBEE68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.35.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E0D1AD-E8B0-4125-BCA7-8487D9490EBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.35.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99F78D3-A2FA-4033-8E21-FE3FFCE9D94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E5B7B-A31B-44A1-92CF-D88E118545D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC24F28-2C48-43D7-B8FB-7DCF499C9627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B549FD-5315-4DB1-8A3B-76B2E28DDDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E506CC5-BB82-423E-A99A-F77A4C8CA26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B075A26C-356F-41A5-A2AB-4AB130F4B503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE7521F-BC6A-470A-AF3D-36E9243330E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E510D6-5ED5-4EF8-BEFB-B84FDCF44F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6FEE93-0FCB-4289-9F76-540A1E48950F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.37.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A8E327-3DFD-4109-93EB-23A5C12ED933"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=0f3f2328f63c521fe4b435f148687452f98b2349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=30e744716c4a6cc4e8ecaaddf68f20057c03dc8d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=3408cce0c2f380884070896420ca566704452fb5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a47077a0b5aa2649751c46e7a27884e6686ccbf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9ef1d4c7c7aca1cd436612b6ca785b726ffb8ed8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b3563c4fbff906991a1b4ef4609f99cca2a0de6a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=git-commits-head&m=112002138324380",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.13/ChangeLog-2.6.13-rc1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/05/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/06/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/07/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1522.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=521601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=0f3f2328f63c521fe4b435f148687452f98b2349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=30e744716c4a6cc4e8ecaaddf68f20057c03dc8d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=3408cce0c2f380884070896420ca566704452fb5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a47077a0b5aa2649751c46e7a27884e6686ccbf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9ef1d4c7c7aca1cd436612b6ca785b726ffb8ed8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b3563c4fbff906991a1b4ef4609f99cca2a0de6a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=git-commits-head&m=112002138324380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.13/ChangeLog-2.6.13-rc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/05/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/06/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1522.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=521601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/CVE-2005-4881\n\nThis issue has been rated as having moderate security impact. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5, and Red Hat Enterprise MRG. It affects Red Hat Enterprise Linux 3, and 4.\n\nIt was addressed in Red Hat Enterprise Linux 4 via: https://rhn.redhat.com/errata/RHSA-2009-1522.html\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important and critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/",
        "lastModified" : "2009-10-22T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-20T19:30:00.297",
      "lastModified" : "2025-04-09T00:30:58.490",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used in Wyse Simple Imager (WSI) and other products, allows remote attackers to cause a denial of service (daemon crash) via a long filename in a TFTP read (aka RRQ or get) request, a different vulnerability than CVE-2002-2226."
      }, {
        "lang" : "es",
        "value" : "tftpd en Philippe Jounin Tftpd32 v2.74 y anteriores, tal y como se utiliza en Wyse simple Imager (WSI) y otros productos, permite a atacantes remotos causar una denegación de servicio (mediante caída de demonio) a través de un nombre de fichero  largo en una solicitud de lectura TFTP (alias RRQ o GET). Se trata de una vulnerabilidad diferente a CVE-2002-2226."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.74",
            "matchCriteriaId" : "61767087-CB3B-48E6-A878-585DA404AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5179AD-626E-49CE-A901-D11A0F91365B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD76387-D5C6-4208-9A07-C8CACF364152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01577E14-494A-41E7-AAE3-CE056D5D47A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2643C36-668E-457F-BB34-154D39025BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1FDE23-01D4-475D-AEB5-149C0C3E184B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037A8135-0860-4D78-9BD3-8159BF2A658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31EFFDF-1234-4472-A869-5949B2006F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E048D128-8BCD-4E74-85CC-9ADA091C9C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59FAF65-D5D5-4A45-8A18-CA40C63807EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E258100C-F46E-414C-8ACA-063C87823FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460C391A-E8FB-4921-ADFF-5E5F6C8C36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0386.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1012856",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secway.org/advisory/ad20050108.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/632633",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/12898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0386.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1012856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secway.org/advisory/ad20050108.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/632633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/12898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-20T19:30:00.500",
      "lastModified" : "2025-04-09T00:30:58.490",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial of service (daemon crash) via invalid \"connect frames.\""
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en Philippe Jounin Tftpd32 antes de v2.80 permite a atacantes remotos causar una denegación de servicio (mediante caída del demonio) a través de una petición \"connect frames\" inválida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.74",
            "matchCriteriaId" : "61767087-CB3B-48E6-A878-585DA404AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5179AD-626E-49CE-A901-D11A0F91365B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD76387-D5C6-4208-9A07-C8CACF364152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01577E14-494A-41E7-AAE3-CE056D5D47A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2643C36-668E-457F-BB34-154D39025BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1FDE23-01D4-475D-AEB5-149C0C3E184B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037A8135-0860-4D78-9BD3-8159BF2A658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31EFFDF-1234-4472-A869-5949B2006F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E048D128-8BCD-4E74-85CC-9ADA091C9C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59FAF65-D5D5-4A45-8A18-CA40C63807EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E258100C-F46E-414C-8ACA-063C87823FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460C391A-E8FB-4921-ADFF-5E5F6C8C36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pagesperso-orange.fr/philippe.jounin/tftpd32_news.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://pagesperso-orange.fr/philippe.jounin/tftpd32_news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2010-01-25T21:30:00.480",
      "lastModified" : "2025-04-11T00:51:21.963",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 10.1.0.4 (10g) allows remote authenticated attackers to affect availability via unknown vectors, aka DB02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente Oracle OLAP en Oracle Database Server v10.1.0.4 (10g), permite a atacantes autenticados remotamente comprometer la disponibilidad a través de vectores desconocido. También conocida como DB02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2010-01-28T20:30:01.150",
      "lastModified" : "2025-04-11T00:51:21.963",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability on certain Sun StorEdge 6130 (SE6130) Controller Arrays allows remote attackers to delete data via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en determinados Sun StorEdge 6130 (SE6130) Controller Arrays, permite a atacantes remotos eliminar datos a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sun:storedge_6130_arrays:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F280F49D-347D-4116-8AD6-DB9553BE2948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200971-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200971-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "Per: http://sunsolve.sun.com/search/document.do?assetkey=1-66-200971-1\r\n\r\n\r\n\"Resolution\r\n\r\nCustomers with an array that falls within the serial number range defined above should contact their Sun authorized service provider and reference this Sun Alert to obtain a utility which will resolve this issue.\"",
      "evaluatorImpact" : "Per: http://sunsolve.sun.com/search/document.do?assetkey=1-66-200971-1\r\n\r\nThis issue can occur on the following platform:\r\n\r\n    * Sun StorEdge 6130 arrays with a serial number in the range of 0451AWF00G - 0513AWF00J\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4886",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2010-02-26T19:30:00.417",
      "lastModified" : "2025-04-11T00:51:21.963",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The selinux_parse_skb_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allows remote attackers to cause a denial of service (OOPS) via vectors associated with an incorrect call to the ipv6_skip_exthdr function."
      }, {
        "lang" : "es",
        "value" : "La función selinux_parse_skb_ipv6 en security/selinux/hooks.c en el kernel de Linux anteriores a v2.6.12-rc4 permite a atacantes remotos provocar una denegación de servicio (OOPS) a través de vectores asociados con un llamada incorrecta la la función ipv6_skip_exthdr."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc3:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.12",
            "matchCriteriaId" : "FAA548A0-498F-4416-A1F1-57682B41BA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d3d077cd4f1154e63a9858e47fe3fb1ad0c03e5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.12/ChangeLog-2.6.12-rc4",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2010/02/22/3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=160117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56614",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d3d077cd4f1154e63a9858e47fe3fb1ad0c03e5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.12/ChangeLog-2.6.12-rc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2010/02/22/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=160117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2010-04-05T15:30:00.827",
      "lastModified" : "2025-04-11T00:51:21.963",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords."
      }, {
        "lang" : "es",
        "value" : "NWFTPD.nlm anterior a v5.06.05 para el servidor FTP de Novell NetWare v6.5 SP5 permite a los atacantes tener un impacto no especificado a través de vectores relacionados con las contraseñas -passwords-."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.06.04",
            "matchCriteriaId" : "A156D9A9-8404-4236-90DB-2CE703C2D3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.01o:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D22986D-C520-4533-B257-7597AD7323C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.01w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6245EE38-90AA-4A4E-AE6A-A468FA902075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.01y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23197629-F3ED-463A-9718-4A96B0059CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.02b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E09E25F-F984-423B-B03A-2964DF173125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.02i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5BCF530-0758-453E-ACFC-5129747A6660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.02r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51D76099-7058-4BC7-9229-F943D03ECD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.02y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4304B8D-E271-41C6-9D84-E71AA3D683E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.03b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA8CA21-1E2A-44CA-A21B-A74EA6BA81FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.03l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8519850A-56CB-4C6A-9E87-09F71281E20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069FC929-2FEF-44BA-AAEC-A795AF724B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F12F0B-0439-4301-8767-A6F36097649A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.04.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8131B93-3147-4988-9193-19629C933D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.04.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B67AD9-BE51-4B7C-AE9E-1D15AB70BA0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6C2582-0C8E-4743-82B1-51AF53AE3879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.05.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B387DDA6-FF1B-48D6-85AF-EB1221CF47DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7A41C8-4332-4F8C-A297-6850C05B3EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=133977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=133977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2010-04-05T15:30:00.890",
      "lastModified" : "2025-04-11T00:51:21.963",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (excessive stale connections) by establishing many FTP sessions, which persist in the Not-Logged-In state after each session is completed."
      }, {
        "lang" : "es",
        "value" : "NWFTPD.nlm anterior a v5.06.04 en el servidor FTP en Novell NetWare, permite a atacantes remotos provocar una denegación de servicio (Conexiones pasadas excesivas) estableciendo varias sesiones FTP, que persisten en el estado  Not-Logged-In después de que cada sesión es completada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FF91EA-4411-460E-9943-2427E884D3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF45C68A-5F83-4090-A0C1-A09EC2987706"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=97819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=97819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2010-06-08T18:30:09.977",
      "lastModified" : "2025-04-11T00:51:21.963",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issue to CVE-2010-2059."
      }, {
        "lang" : "es",
        "value" : "lib/fsm.c en RPM antes de v4.4.3 no reinicia los metadatos de un archivo ejecutable durante la eliminación de los archivos en una eliminación de paquetes con RPM, lo que podría permitir a usuarios locales conseguir privilegios mediante la creación de un vínculo físico a un fichero vulnerable (1) con permiso setuid o (2) con permiso setgid. Se trata de un problema relacionado con la CVE-2010-2059."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.2.3",
            "matchCriteriaId" : "368283A7-FAC3-460B-8A18-DEA1E5996915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76112E07-F476-41E5-9FF8-E85C28019BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E064D1B0-093D-4C62-89A0-481D261F9AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05B2BC3-41EB-4839-B3DC-AF8B567D0318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B95097-EEA2-42A1-AA30-4AC519E67B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "267ACF41-E8E2-4F9E-983A-E526DACFCE82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:1.4.2\\/a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6429C42B-EBD6-4D93-AABB-AD268ADB72AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1372FF29-498C-41CB-AB2E-25CEC92866AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EFE8428-E00F-4E5F-8787-F63FEE93E617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4E9CC7-1BD8-490B-9C9B-E4A76EFAD13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFAB0B1A-A9E5-4808-85EC-0BD2A3F753AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D1E892-05D5-4C79-AD12-7B7C0421E509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2..4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E092A7C-7B5A-449C-B49D-96BB5A1E011E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CA6696D-D6CC-4C23-AB8F-91474BFC341E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16D91A5-35F5-44F3-A515-8E4F27B563D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08974D05-C00C-438C-A76F-E17C191D0CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81771BF8-0788-44B5-8694-AFF436FDECD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93BF53E9-CC37-4E31-9F34-2B569947887F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D79478-665E-4D18-AAA6-BA51C41A4C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A59FF59-BD73-4C13-AC51-98126ED46573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C83F0D-159B-4CFB-92C6-83D36225080A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7A4BC0-43DF-4542-A54F-BF8B07F30B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B926B035-659A-4F86-B680-CD1A6163F2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98BC57C-69AD-40F6-885B-3A560F69809F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71499D02-8989-4AA0-80FB-28860F103EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B424D987-8421-4FE5-B9F7-0D4AB7AC921B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F58F12D-301C-4C4D-8F78-0B6A7B220B0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A30CF4-508D-407B-A097-30331AF9D452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E49FB5B-5BFA-4736-8F2C-C07188D0BC00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883AE5CC-379E-41A7-A8B5-12671015F131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8D8FEA-89A2-4133-89D7-FD403D605E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDA2319-4C36-44A5-A1F2-E0F1EFC1DE23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11322F8-93B7-457C-8993-B0A8D3274468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD35E28-313C-4CF7-AEC0-1C91316FF5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B591779-643B-4E2E-9270-40748EDA1BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3C91C9-CFDC-4C51-B6AF-51F1560161A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D67C30-F0CA-410B-8C3A-EA5536BC256E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80DB9D55-9BC2-416C-9A2A-021F4EC0E884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B48E845-573C-4F07-8D69-F1A54CCEEDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9642BA0F-CBBD-4FB5-8A20-BBCAD7EC31CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C9FE2D-197A-45EB-BE40-B746B13F2C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07E462F-2163-430B-9315-75BFD00113C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F650FC0-1DF8-4432-92F5-4B4DCEFC2D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "347BC012-5307-4B0F-A013-624ED455ABD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED89DCC-0EFF-4665-BDE0-406155A46BDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEB6C44-B615-46F8-A5DC-BEF25D932314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979D846B-9DD9-474A-A8BE-25334D2969B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF5DE17-2061-4896-B7DA-CFDEF46E9652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB528B71-8BF5-4D93-A1BC-DF0502AEA58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0585DC0B-DFBB-466E-9D3D-86E19A4B88A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041B087D-4FBC-4EDC-AAC0-DF8A1D39980A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4FB33B-5015-4620-BD21-3F0C916069EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684E9118-30B2-476C-816E-CA4B2916017B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF46B23-559C-4DF0-8510-C79F17ABF22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD40A202-557B-495C-BBE5-DEC9FF97EE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3DB711-AE17-4B3B-9D45-C38CBDF418A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2E6A8E-4C9B-46A1-B786-6C0B3A3395F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D049089-7FBD-41A6-8A5B-8497DA24C720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DEBEDF-3E64-4417-BC41-7F0E20C522F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF99B53-237E-468B-8B7F-A105FE40803B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D5F196-4BA9-43EB-BE38-EE405C8CC0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C4022C-F1D4-4A58-8341-E22EAF943511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5503DC6-40DB-4A84-984E-BDEED82F224A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90148D48-5DA5-46F9-AE96-618C427A5DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733E1435-CE73-4A39-97EB-304D2F45A838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80DA6E-CCE3-4CAF-B2A1-E6FF2B702D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08FD930-F2BC-47BC-86BC-07545D1431B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97DE028F-D0BE-435C-826D-CCBFFEBF3B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08EB15D-1842-41F4-9F19-FF6571055242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CF2BBF-83AA-451E-8E30-E040EFCF6F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "409B29B1-E2E0-4CBD-83D0-F4CE67820F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D325D4A-166A-4174-BEA8-1C6D47A8DDBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AEBBD1-2320-42A3-8DCA-46DF61007349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54C09F8-F0F5-4BDF-868F-0B6A4609B3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132C1B54-0438-4239-B599-8160D494EE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5CCEAC-3D92-46DB-AC88-859ED5A5E277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED68CE6A-2BF5-49F2-AEAE-199AAC94807B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.0.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C589CD4-5A9E-41E1-BBFA-AF4BE2DD31E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E406BD-8CC3-4929-ABB2-F820F8C83823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8685704C-C43D-4315-A541-4E04B7B08B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C1D452-A003-4DB1-A8CF-0F7FBB9A5811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F8C79E-416F-4C88-B102-3BB60E969FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F47849F-4466-4500-802C-260970D6A764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C190DE39-ABEF-4DA1-A909-B9E98BD5A468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.4.2.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308E9B35-F619-4BBE-B1BA-AAF0873F75D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77BB52FC-E320-47CD-A180-C22371D7AFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A746D6-4C15-49BD-B17C-2CA06FFA76D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://distrib-coffee.ipsl.jussieu.fr/pub/mirrors/rpm/files/rpm/rpm-4.4/rpm-4.4.3.tar.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=125517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=598775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/59426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://distrib-coffee.ipsl.jussieu.fr/pub/mirrors/rpm/files/rpm/rpm-4.4/rpm-4.4.3.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=125517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=598775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/59426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2012-07-25T19:55:01.273",
      "lastModified" : "2025-04-11T00:51:21.963",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de enteros en TCMalloc (tcmalloc.cc) en gperftools antes v0.4 hace que sea más fácil para los atacantes dependientes de contexto realizar ataques relacionados con la memoria, tales como desbordamientos de memoria a través de un valor de tamaño grande, lo que causa que se asigne menos memoria de lo esperado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:csilvers:gperftools:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "BEC9A6EA-129D-4A9E-A3F6-379FC64E4B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:csilvers:gperftools:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BDB58C4-45E6-401B-9305-B422E7760FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:csilvers:gperftools:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D76DB5-A8CA-4667-8B62-F38132D7A5C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2016-10-14T16:59:00.187",
      "lastModified" : "2025-04-12T10:46:40.837",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2.  NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation."
      }, {
        "lang" : "es",
        "value" : "SHA-1 no es resistente a la colisión, lo que facilita a atacantes dependientes del contexto llevar a cabo ataques de espionaje, como es demostrado por ataques en el uso de SHA-1 en TLS 1.2. NOTA: esta CVE existe para dar un identificador común para referenciar este problema de SHA-1; la existencia de un identificador no es, en si misma, una recomendación tecnológica."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "47.0.2526.111",
            "matchCriteriaId" : "AFB52550-C3FC-4CDD-AA6E-500BD3304241"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ia.cr/2007/474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://shattered.io/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cwi.nl/news/2017/cwi-and-google-announce-first-collision-industry-security-standard-sha-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.googleblog.com/2015/12/an-update-on-sha-1-certificates-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sites.google.com/site/itstheshappening",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.schneier.com/blog/archives/2005/02/sha1_broken.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.schneier.com/blog/archives/2005/08/new_cryptanalyt.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://ia.cr/2007/474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://shattered.io/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cwi.nl/news/2017/cwi-and-google-announce-first-collision-industry-security-standard-sha-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.googleblog.com/2015/12/an-update-on-sha-1-certificates-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sites.google.com/site/itstheshappening",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.schneier.com/blog/archives/2005/02/sha1_broken.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.schneier.com/blog/archives/2005/08/new_cryptanalyt.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorComment" : "SHA-1 is likely present in a large number of products across the entire IT sector. The applicability statement for this CVE will be updated when specific products are identified, as time and resources permit."
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0123",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:02.073",
      "lastModified" : "2023-11-07T01:57:09.937",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0128",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.087",
      "lastModified" : "2023-11-07T01:57:10.263",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0165",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-05-11T14:29:02.120",
      "lastModified" : "2023-11-07T01:57:10.933",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0166",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-05-11T14:29:02.137",
      "lastModified" : "2023-11-07T01:57:11.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0167",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-05-11T14:29:02.167",
      "lastModified" : "2023-11-07T01:57:11.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0168",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-05-11T14:29:02.183",
      "lastModified" : "2023-11-07T01:57:11.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0169",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-05-11T14:29:02.213",
      "lastModified" : "2023-11-07T01:57:11.810",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0170",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-05-11T14:29:02.230",
      "lastModified" : "2023-11-07T01:57:12.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0171",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-05-11T14:29:02.243",
      "lastModified" : "2023-11-07T01:57:12.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0172",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-05-11T14:29:02.277",
      "lastModified" : "2023-11-07T01:57:12.467",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0609",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2017-05-11T14:29:02.290",
      "lastModified" : "2023-11-07T01:57:17.510",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1731",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-05-11T14:29:02.307",
      "lastModified" : "2023-11-07T01:57:28.177",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1844",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-05-11T14:29:02.337",
      "lastModified" : "2023-11-07T01:57:29.410",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1845",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-05-11T14:29:02.353",
      "lastModified" : "2023-11-07T01:57:29.647",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1860",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2017-05-11T14:29:02.387",
      "lastModified" : "2023-11-07T01:57:30.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1861",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2017-05-11T14:29:02.400",
      "lastModified" : "2023-11-07T01:57:30.483",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1862",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2017-05-11T14:29:02.433",
      "lastModified" : "2023-11-07T01:57:30.713",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-1863",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2017-05-11T14:29:02.447",
      "lastModified" : "2023-11-07T01:57:30.933",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2345",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-05-11T14:29:02.480",
      "lastModified" : "2023-11-07T01:57:36.063",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2348",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:02.497",
      "lastModified" : "2023-11-07T01:57:36.280",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2408",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-05-11T14:29:02.527",
      "lastModified" : "2023-11-07T01:57:37.213",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2528",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.540",
      "lastModified" : "2023-11-07T01:57:39.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2740",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.573",
      "lastModified" : "2023-11-07T01:57:41.747",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3125",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:02.587",
      "lastModified" : "2023-11-07T01:57:46.627",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4096",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.620",
      "lastModified" : "2023-11-07T01:57:58.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4097",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.637",
      "lastModified" : "2023-11-07T01:57:58.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4098",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.667",
      "lastModified" : "2023-11-07T01:57:59.033",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4099",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.683",
      "lastModified" : "2023-11-07T01:57:59.253",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4100",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.713",
      "lastModified" : "2023-11-07T01:57:59.473",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4101",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.730",
      "lastModified" : "2023-11-07T01:57:59.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4102",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.760",
      "lastModified" : "2023-11-07T01:57:59.953",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4103",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.777",
      "lastModified" : "2023-11-07T01:58:00.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4104",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.790",
      "lastModified" : "2023-11-07T01:58:00.390",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4105",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.823",
      "lastModified" : "2023-11-07T01:58:00.613",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4106",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.837",
      "lastModified" : "2023-11-07T01:58:00.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4107",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.870",
      "lastModified" : "2023-11-07T01:58:01.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4108",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.887",
      "lastModified" : "2023-11-07T01:58:01.277",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4109",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.900",
      "lastModified" : "2023-11-07T01:58:01.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4110",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.933",
      "lastModified" : "2023-11-07T01:58:01.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4111",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.947",
      "lastModified" : "2023-11-07T01:58:01.920",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4112",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.980",
      "lastModified" : "2023-11-07T01:58:02.133",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4113",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:02.997",
      "lastModified" : "2023-11-07T01:58:02.343",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4114",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.027",
      "lastModified" : "2023-11-07T01:58:02.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4115",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.040",
      "lastModified" : "2023-11-07T01:58:02.853",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4116",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.073",
      "lastModified" : "2023-11-07T01:58:03.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4117",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.087",
      "lastModified" : "2023-11-07T01:58:03.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4118",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.120",
      "lastModified" : "2023-11-07T01:58:03.637",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4119",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.137",
      "lastModified" : "2023-11-07T01:58:03.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4120",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.150",
      "lastModified" : "2023-11-07T01:58:04.097",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4121",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.183",
      "lastModified" : "2023-11-07T01:58:04.313",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4122",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.213",
      "lastModified" : "2023-11-07T01:58:04.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4123",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.230",
      "lastModified" : "2023-11-07T01:58:04.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4124",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.247",
      "lastModified" : "2023-11-07T01:58:04.993",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4125",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-11T14:29:03.277",
      "lastModified" : "2023-11-07T01:58:05.200",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4535",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:03.290",
      "lastModified" : "2023-11-07T01:58:09.133",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4537",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:03.307",
      "lastModified" : "2023-11-07T01:58:09.360",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4538",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:03.337",
      "lastModified" : "2023-11-07T01:58:09.833",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4539",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:03.353",
      "lastModified" : "2023-11-07T01:58:10.127",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4540",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:03.387",
      "lastModified" : "2023-11-07T01:58:10.333",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4541",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:03.400",
      "lastModified" : "2023-11-07T01:58:10.547",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4542",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:03.417",
      "lastModified" : "2023-11-07T01:58:10.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4543",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:03.447",
      "lastModified" : "2023-11-07T01:58:10.963",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4544",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-11T14:29:03.463",
      "lastModified" : "2023-11-07T01:58:11.177",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-04-10T20:29:00.227",
      "lastModified" : "2024-11-21T00:02:15.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory."
      }, {
        "lang" : "es",
        "value" : "La función getgrouplist en la librería GNU C (glibc) anterior a la versión 2.3.5, cuando se invoca con un argumento cero, escribe en el puntero pasado incluso si el tamaño de la matriz especificada es cero, lo que lleva a un desbordamiento del búfer y potencialmente permite a los atacantes corromper la memoria"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.5",
            "matchCriteriaId" : "E6E8B01F-0D99-40B5-89C9-755444BA5177"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/107871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=661",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K12740406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/107871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K12740406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2349",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2019-10-28T14:15:10.140",
      "lastModified" : "2024-11-20T23:59:21.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoo 2.10 has Directory traversal"
      }, {
        "lang" : "es",
        "value" : "Zoo 2.10 tiene un salto de Directorio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoo_project:zoo:2.10-27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68A391C-D933-4F8F-B872-3A2B6227CCBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2015/01/03/1",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-2349",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2015/01/03/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-2349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-3056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-11-01T13:15:11.167",
      "lastModified" : "2024-11-21T00:01:01.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TWiki allows arbitrary shell command execution via the Include function"
      }, {
        "lang" : "es",
        "value" : "Twiki, permite una ejecución de comandos de shell  arbitraria por medio de la función Include"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:20040902-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1067AE29-BF5D-42C6-9B70-F7FAC3763F4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330733",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-3056",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithInclude",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-3056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithInclude",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2350",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2019-11-01T18:15:11.113",
      "lastModified" : "2024-11-20T23:59:21.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTML code in the web user interface."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en websieve versión v0.62, permite a atacantes remotos inyectar script web arbitrario o código HTML en la interfaz de usuario web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websieve_project:websieve:0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC52A265-362F-4D56-AFCC-57FAB2A9E852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311838",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-2350",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-2350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2351",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2019-11-01T19:15:10.603",
      "lastModified" : "2024-11-20T23:59:21.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files."
      }, {
        "lang" : "es",
        "value" : "Mutt versiones anteriores a 1.5.20, parche 7, permite a un atacante causar una denegación de servicio por medio de una serie de peticiones para archivos temporales de mutt."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.20",
            "matchCriteriaId" : "FB1F7751-0DDC-4F5C-8390-EF24AB921562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311296",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-2351",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-2351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2352",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2019-11-01T21:15:11.697",
      "lastModified" : "2024-11-20T23:59:21.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "I race condition in Temp files was found in gs-gpl before 8.56 addons scripts."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en los archivos temporales se encontró en los scripts de los addons de gs-gpl versiones anteriores a 8.56."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gs-gpl_project:gs-gpl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.56",
            "matchCriteriaId" : "CA793D87-A69E-464E-BA6F-2FD319C0CA75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2014-February/002758.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-2352",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2014-February/002758.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-2352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4890",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2019-11-04T19:15:10.130",
      "lastModified" : "2024-11-21T00:05:25.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via \"su - user -c program\". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process."
      }, {
        "lang" : "es",
        "value" : "Se presenta un posible secuestro de tty en shadow versiones 4.x anteriores a 4.1.5 y sudo versiones 1.x anteriores a 1.7.4 por medio de \"su - user -c program\". La sesión de usuario puede ser escapada a la sesión principal mediante el uso de la ioctl TIOCSTI para insertar caracteres en el búfer de entrada para ser leídos por el siguiente proceso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:shadow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.1.5",
            "matchCriteriaId" : "83FC278E-3D95-497D-9086-D77F983D7E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndIncluding" : "1.7.4",
            "matchCriteriaId" : "96A8DB95-19F6-4AEF-9292-CE097676E1DD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2C244C-82F6-49BC-B7F7-54AB989C43E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2012/11/06/8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2013/05/20/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2013/11/28/10",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2013/11/29/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2014/10/20/9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2014/10/21/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2014/12/15/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2016/02/25/6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2005-4890",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2005-4890",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-4890",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2012/11/06/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2013/05/20/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2013/11/28/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2013/11/29/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2014/10/20/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2014/10/21/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2014/12/15/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2016/02/25/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2005-4890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2005-4890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-4890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2354",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2019-11-05T20:15:10.360",
      "lastModified" : "2024-11-20T23:59:22.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nvu 0.99+1.0pre uses an old copy of Mozilla XPCOM which can result in multiple security issues."
      }, {
        "lang" : "es",
        "value" : "Nvu versión 0.99+1.0pre usa una copia antigua de Mozilla XPCOM. lo que puede resultar en múltiples problemas de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvu:nvu:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086372B9-367C-4C74-9974-CF8C1489FA69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2014-February/002758.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=306822",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-2354",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2014-February/002758.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=306822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2005-2354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4891",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-01-15T17:15:13.037",
      "lastModified" : "2024-11-21T00:05:25.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements."
      }, {
        "lang" : "es",
        "value" : "Simple Machine Forum (SMF)  versiones 1.0.4 y anteriores, presentan una vulnerabilidad de inyección SQL que permite a atacantes remotos inyectar sentencias SQL arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplemachines:simple_machine_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "8FD1D78C-7062-42DE-988C-944470DB2CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2012/11/14/10",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://securiteam.com/exploits/5HP0N0KG0O/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2012/11/14/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://securiteam.com/exploits/5HP0N0KG0O/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4892",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T20:15:14.490",
      "lastModified" : "2023-11-07T01:58:15.173",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4893",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T20:15:14.567",
      "lastModified" : "2023-11-07T01:58:15.387",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-4894",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T20:15:14.630",
      "lastModified" : "2023-11-07T01:58:15.597",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2493",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-06-11T22:15:08.453",
      "lastModified" : "2023-11-07T01:57:38.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2005. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-0394",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-06-18T13:15:07.433",
      "lastModified" : "2023-11-07T01:57:15.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2795",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-06-18T15:15:07.803",
      "lastModified" : "2023-11-07T01:57:42.333",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-10001",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-03-28T21:15:08.050",
      "lastModified" : "2024-11-20T23:56:22.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO DE ASIGNÓ ** Se ha encontrado una vulnerabilidad en Netegrity SiteMinder versiones hasta 4.5.1, y Ha sido clasificada como crítica. Este problema afecta al archivo /siteminderagent/pwcgi/smpwservicescgi.exe del componente Login. La manipulación del argumento target conlleva a un redireccionamiento abierto. La explotación ha sido divulgada al público y puede ser usada. NOTA: Esta vulnerabilidad sólo afecta a productos que ya no son soportados por el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_siteminder:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "590F21DA-4ACD-45D7-AAB9-8970F16B057E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_siteminder:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4C6054-11C8-498F-BC16-7B7A4604A693"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.1022",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.1022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-10002",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-10-29T15:15:42.073",
      "lastModified" : "2024-11-20T23:56:22.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in almosteffortless secure-files Plugin up to 1.1 on WordPress. Affected is the function sf_downloads of the file secure-files.php. The manipulation of the argument downloadfile leads to path traversal. Upgrading to version 1.2 is able to address this issue. The name of the patch is cab025e5fc2bcdad8032d833ebc38e6bd2a13c92. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-243804."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad clasificada como crítica fue encontrada en el complemento almosteffortless secure-files hasta 1.1 en WordPress. La función sf_downloads del archivo Secure-files.php es afectada por la vulnerabilidad. La manipulación del argumento downloadfile conduce a path traversal. La actualización a la versión 1.2 puede solucionar este problema. El nombre del parche es cab025e5fc2bcdad8032d833ebc38e6bd2a13c92. Se recomienda actualizar el componente afectado. El identificador de esta vulnerabilidad es VDB-243804."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-plugins:secure_files:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2",
            "matchCriteriaId" : "31D60C64-164B-4CB4-8D08-FB1A2DDDF2BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wp-plugins/secure-files/commit/cab025e5fc2bcdad8032d833ebc38e6bd2a13c92",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.243804",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.243804",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wp-plugins/secure-files/commit/cab025e5fc2bcdad8032d833ebc38e6bd2a13c92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.243804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.243804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-10003",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2024-10-17T14:15:03.800",
      "lastModified" : "2024-11-14T19:35:58.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in mikexstudios Xcomic up to 0.8.2. This affects an unknown part. The manipulation of the argument cmd leads to os command injection. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 0.8.3 is able to address this issue. The patch is named 6ed8e3cc336e29f09c7e791863d0559939da98bf. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en Xcomic de mikexstudios hasta la versión 0.8.2. Afecta a una parte desconocida. La manipulación del argumento cmd provoca la inyección de comandos del sistema operativo. Es posible iniciar el ataque de forma remota. La complejidad de un ataque es bastante alta. Se dice que la explotabilidad es difícil. El exploit se ha revelado al público y puede usarse. La actualización a la versión 0.8.3 puede solucionar este problema. El parche se llama 6ed8e3cc336e29f09c7e791863d0559939da98bf. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mikexstudios:xcomic:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.3",
            "matchCriteriaId" : "BE6B0A39-7E9A-408A-9294-B926F2BACC88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://xcomic.mikexstudios.com/forum/viewtopic.php?id=130",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/mikexstudios/xcomic/commit/6ed8e3cc336e29f09c7e791863d0559939da98bf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/mikexstudios/xcomic/releases/tag/v0.8.3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.280359",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.280359",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://web.archive.org/web/20071218144304/http://xcomic.mikexstudios.com/forum/viewtopic.php?id=130",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-2347",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2025-06-19T11:15:23.593",
      "lastModified" : "2025-06-19T11:15:23.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2005-10004",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2025-08-30T14:15:32.040",
      "lastModified" : "2025-09-02T15:55:25.420",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.php script. An authenticated user can inject arbitrary shell commands via the graph_start GET parameter, which is improperly handled during graph rendering. This flaw allows attackers to execute commands on the underlying operating system with the privileges of the web server process, potentially compromising system integrity."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/cacti_graphimage_exec.rb",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://web.archive.org/web/20050305034552/http://www.cacti.net/cactid_download.php",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.cacti.net/info/downloads",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/16881",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9911",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/cacti-graph-view-rce",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  } ]
}